[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 75.469072][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 75.469085][ T26] audit: type=1400 audit(1573415032.639:41): avc: denied { map } for pid=9243 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.10.25' (ECDSA) to the list of known hosts. 2019/11/10 19:44:30 parsed 1 programs [ 113.588638][ T26] audit: type=1400 audit(1573415070.759:42): avc: denied { map } for pid=9255 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 113.669626][ T26] audit: type=1400 audit(1573415070.839:43): avc: denied { map } for pid=9255 comm="syz-execprog" path="/sys/kernel/debug/kcov" dev="debugfs" ino=22 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 2019/11/10 19:44:32 executed programs: 0 [ 115.878758][ T9270] IPVS: ftp: loaded support on port[0] = 21 [ 115.941933][ T9270] chnl_net:caif_netlink_parms(): no params data found [ 115.970041][ T9270] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.977575][ T9270] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.985487][ T9270] device bridge_slave_0 entered promiscuous mode [ 115.993437][ T9270] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.000669][ T9270] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.008441][ T9270] device bridge_slave_1 entered promiscuous mode [ 116.025160][ T9270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.035828][ T9270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.053903][ T9270] team0: Port device team_slave_0 added [ 116.061714][ T9270] team0: Port device team_slave_1 added [ 116.137580][ T9270] device hsr_slave_0 entered promiscuous mode [ 116.205280][ T9270] device hsr_slave_1 entered promiscuous mode [ 116.335809][ T9270] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.343041][ T9270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.350968][ T9270] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.358102][ T9270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.468302][ T9270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.482028][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 116.504709][ T17] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.545499][ T17] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.565373][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 116.602681][ T9270] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.657110][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 116.675535][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.682614][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.736748][ T9297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 116.755619][ T9297] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.762708][ T9297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.826436][ T9298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 116.837510][ T9298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 116.865836][ T9298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 116.897241][ T9298] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 116.921001][ T9270] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 116.957647][ T9270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 116.968990][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 117.026260][ T9297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 117.033704][ T9297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 117.059957][ T9270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.166149][ T26] audit: type=1400 audit(1573415074.339:44): avc: denied { associate } for pid=9270 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 117.264042][ T9312] kasan: CONFIG_KASAN_INLINE enabled [ 117.269363][ T9312] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 117.277420][ T9312] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 117.284342][ T9312] CPU: 0 PID: 9312 Comm: syz-executor.0 Not tainted 5.4.0-rc6+ #0 [ 117.292114][ T9312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 117.302158][ T9312] RIP: 0010:__lock_acquire+0x1254/0x4a00 [ 117.307767][ T9312] Code: 00 0f 85 96 24 00 00 48 81 c4 f0 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 48 b8 00 00 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 <80> 3c 02 00 0f 85 0b 28 00 00 49 81 3e e0 85 06 8a 0f 84 5f ee ff [ 117.327343][ T9312] RSP: 0018:ffff888082eafb48 EFLAGS: 00010006 [ 117.333380][ T9312] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 117.341328][ T9312] RDX: 0000000000000218 RSI: 0000000000000000 RDI: 0000000000000001 [ 117.349277][ T9312] RBP: ffff888082eafc60 R08: 0000000000000001 R09: 0000000000000001 [ 117.357258][ T9312] R10: fffffbfff138cda0 R11: ffff8880917c6040 R12: 00000000000010c0 [ 117.365207][ T9312] R13: 0000000000000000 R14: 00000000000010c0 R15: 0000000000000000 [ 117.373155][ T9312] FS: 00007f3d5a39e700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 117.382054][ T9312] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.388618][ T9312] CR2: 000000000075c000 CR3: 0000000097d33000 CR4: 00000000001406f0 [ 117.397086][ T9312] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 117.405038][ T9312] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 117.413011][ T9312] Call Trace: [ 117.416298][ T9312] ? __kasan_check_read+0x11/0x20 [ 117.421300][ T9312] ? __lock_acquire+0x16f2/0x4a00 [ 117.426297][ T9312] ? rwlock_bug.part.0+0x90/0x90 [ 117.431209][ T9312] ? lock_acquire+0x190/0x410 [ 117.436120][ T9312] ? mark_held_locks+0xf0/0xf0 [ 117.440856][ T9312] lock_acquire+0x190/0x410 [ 117.445336][ T9312] ? j1939_jsk_del+0x32/0x240 [ 117.449989][ T9312] _raw_spin_lock_bh+0x33/0x50 [ 117.454727][ T9312] ? j1939_jsk_del+0x32/0x240 [ 117.459375][ T9312] j1939_jsk_del+0x32/0x240 [ 117.463852][ T9312] ? lock_sock_nested+0xe2/0x120 [ 117.468781][ T9312] j1939_sk_bind+0x2e2/0x8e0 [ 117.473347][ T9312] __sys_bind+0x239/0x290 [ 117.477660][ T9312] ? __ia32_sys_socketpair+0xf0/0xf0 [ 117.482919][ T9312] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 117.489133][ T9312] ? put_timespec64+0xda/0x140 [ 117.493875][ T9312] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 117.499305][ T9312] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 117.504739][ T9312] ? do_syscall_64+0x26/0x760 [ 117.509403][ T9312] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 117.515454][ T9312] ? do_syscall_64+0x26/0x760 [ 117.520109][ T9312] __x64_sys_bind+0x73/0xb0 [ 117.524597][ T9312] do_syscall_64+0xfa/0x760 [ 117.529075][ T9312] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 117.534938][ T9312] RIP: 0033:0x45a219 [ 117.538806][ T9312] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 117.558384][ T9312] RSP: 002b:00007f3d5a39dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 117.566768][ T9312] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a219 [ 117.574715][ T9312] RDX: 0000000000000018 RSI: 0000000020000240 RDI: 0000000000000003 [ 117.582664][ T9312] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 117.590609][ T9312] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3d5a39e6d4 [ 117.598553][ T9312] R13: 00000000004c057e R14: 00000000004d2c50 R15: 00000000ffffffff [ 117.606504][ T9312] Modules linked in: [ 117.610383][ T9312] ---[ end trace e65d096e727ebb73 ]--- [ 117.615819][ T9312] RIP: 0010:__lock_acquire+0x1254/0x4a00 [ 117.621424][ T9312] Code: 00 0f 85 96 24 00 00 48 81 c4 f0 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 48 b8 00 00 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 <80> 3c 02 00 0f 85 0b 28 00 00 49 81 3e e0 85 06 8a 0f 84 5f ee ff [ 117.641027][ T9312] RSP: 0018:ffff888082eafb48 EFLAGS: 00010006 [ 117.647076][ T9312] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 117.655024][ T9312] RDX: 0000000000000218 RSI: 0000000000000000 RDI: 0000000000000001 [ 117.663082][ T9312] RBP: ffff888082eafc60 R08: 0000000000000001 R09: 0000000000000001 [ 117.671051][ T9312] R10: fffffbfff138cda0 R11: ffff8880917c6040 R12: 00000000000010c0 [ 117.679002][ T9312] R13: 0000000000000000 R14: 00000000000010c0 R15: 0000000000000000 [ 117.686949][ T9312] FS: 00007f3d5a39e700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 117.695850][ T9312] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.702407][ T9312] CR2: 000000000075c000 CR3: 0000000097d33000 CR4: 00000000001406f0 [ 117.710356][ T9312] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 117.718393][ T9312] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 117.726340][ T9312] Kernel panic - not syncing: Fatal exception in interrupt [ 117.734906][ T9312] Kernel Offset: disabled [ 117.739225][ T9312] Rebooting in 86400 seconds..