Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 34.905279] kauditd_printk_skb: 9 callbacks suppressed [ 34.910857] audit: type=1400 audit(1573796203.516:35): avc: denied { map } for pid=6632 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 65.118589] audit: type=1400 audit(1573796233.729:36): avc: denied { map } for pid=6642 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 67.297011] IPVS: ftp: loaded support on port[0] = 21 [ 67.813013] audit: type=1400 audit(1573796236.424:37): avc: denied { create } for pid=6642 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 67.836888] audit: type=1400 audit(1573796236.424:38): avc: denied { create } for pid=6642 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 67.862893] audit: type=1400 audit(1573796236.425:39): avc: denied { create } for pid=6642 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 Warning: Permanently added '10.128.1.40' (ECDSA) to the list of known hosts. 2019/11/15 05:37:23 parsed 1 programs 2019/11/15 05:37:23 executed programs: 0 [ 74.987356] audit: type=1400 audit(1573796243.596:40): avc: denied { map } for pid=6715 comm="syz-execprog" path="/root/syzkaller-shm514256719" dev="sda1" ino=16489 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 75.036369] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready [ 75.048301] IPVS: ftp: loaded support on port[0] = 21 [ 75.052033] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready [ 75.053578] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready [ 75.065935] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready [ 75.067643] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready [ 75.081011] IPv6: ADDRCONF(NETDEV_CHANGE): nr5: link becomes ready [ 75.117002] IPVS: ftp: loaded support on port[0] = 21 [ 75.172014] chnl_net:caif_netlink_parms(): no params data found [ 75.193117] IPVS: ftp: loaded support on port[0] = 21 [ 75.259639] chnl_net:caif_netlink_parms(): no params data found [ 75.278662] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.286041] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.294727] device bridge_slave_0 entered promiscuous mode [ 75.313586] IPVS: ftp: loaded support on port[0] = 21 [ 75.336755] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.343882] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.351167] device bridge_slave_1 entered promiscuous mode [ 75.368166] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.375282] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.382998] device bridge_slave_0 entered promiscuous mode [ 75.390255] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.397086] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.404741] device bridge_slave_1 entered promiscuous mode [ 75.419314] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 75.430550] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 75.467353] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 75.481611] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 75.489339] team0: Port device team_slave_0 added [ 75.502248] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 75.516692] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 75.524992] team0: Port device team_slave_1 added [ 75.534871] IPVS: ftp: loaded support on port[0] = 21 [ 75.546774] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 75.547169] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 75.593510] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 75.601530] team0: Port device team_slave_0 added [ 75.643800] device hsr_slave_0 entered promiscuous mode [ 75.710295] device hsr_slave_1 entered promiscuous mode [ 75.786335] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 75.793518] team0: Port device team_slave_1 added [ 75.799303] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 75.810852] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 75.818545] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 75.825490] chnl_net:caif_netlink_parms(): no params data found [ 75.856904] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 75.892805] IPVS: ftp: loaded support on port[0] = 21 [ 75.911541] chnl_net:caif_netlink_parms(): no params data found [ 75.919681] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.927244] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.934878] device bridge_slave_0 entered promiscuous mode [ 75.982323] device hsr_slave_0 entered promiscuous mode [ 76.040315] device hsr_slave_1 entered promiscuous mode [ 76.082594] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 76.101454] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.109097] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.116370] device bridge_slave_1 entered promiscuous mode [ 76.132877] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 76.141126] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 76.164068] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 76.196269] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.203313] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.210869] device bridge_slave_0 entered promiscuous mode [ 76.265716] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.272784] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.280574] device bridge_slave_1 entered promiscuous mode [ 76.313399] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 76.327190] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 76.336241] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 76.343799] team0: Port device team_slave_0 added [ 76.349816] chnl_net:caif_netlink_parms(): no params data found [ 76.358598] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 76.367041] team0: Port device team_slave_1 added [ 76.372971] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 76.380986] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 76.387798] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 76.405737] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 76.482146] device hsr_slave_0 entered promiscuous mode [ 76.540374] device hsr_slave_1 entered promiscuous mode [ 76.580692] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 76.587922] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 76.605898] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 76.614057] team0: Port device team_slave_0 added [ 76.637912] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 76.661433] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 76.668870] team0: Port device team_slave_1 added [ 76.677100] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 76.698725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.706267] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.713195] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.720819] device bridge_slave_0 entered promiscuous mode [ 76.727875] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.734875] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.741910] device bridge_slave_1 entered promiscuous mode [ 76.761805] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 76.792431] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 76.805731] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 76.812176] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.830787] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 76.858176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.877946] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 76.895713] chnl_net:caif_netlink_parms(): no params data found [ 76.962068] device hsr_slave_0 entered promiscuous mode [ 76.990412] device hsr_slave_1 entered promiscuous mode [ 77.032265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.042188] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.048936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.056335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.064470] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.071284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.078650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.100868] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.108949] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.118975] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 77.132440] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 77.146645] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.156198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.166833] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 77.174189] team0: Port device team_slave_0 added [ 77.201232] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 77.208375] team0: Port device team_slave_1 added [ 77.214613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.224362] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 77.239411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.250914] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 77.268424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.278843] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 77.287393] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 77.296246] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.306260] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.314008] device bridge_slave_0 entered promiscuous mode [ 77.325268] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.333876] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.342476] device bridge_slave_1 entered promiscuous mode [ 77.350514] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 77.367192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.389939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.400848] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 77.407558] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.429011] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 77.438664] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 77.493348] device hsr_slave_0 entered promiscuous mode [ 77.530327] device hsr_slave_1 entered promiscuous mode [ 77.590736] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 77.609533] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 77.616057] audit: type=1400 audit(1573796246.220:41): avc: denied { associate } for pid=6732 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 77.640708] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.648062] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 77.656804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.668380] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 77.678923] team0: Port device team_slave_0 added [ 77.697601] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 77.699929] ------------[ cut here ]------------ [ 77.699949] WARNING: CPU: 1 PID: 6805 at ./include/net/sock.h:1700 af_alg_accept+0x76d/0x9d0 [ 77.699952] Kernel panic - not syncing: panic_on_warn set ... [ 77.699952] [ 77.699964] CPU: 1 PID: 6805 Comm: syz-executor.0 Not tainted 4.12.0+ #0 [ 77.699966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 77.699969] Call Trace: [ 77.699981] dump_stack+0x145/0x1f0 [ 77.699987] ? arch_local_irq_restore+0x43/0x43 [ 77.699993] ? af_alg_accept+0x76d/0x9d0 [ 77.699998] ? af_alg_accept+0x76d/0x9d0 [ 77.700010] panic+0x1a9/0x349 [ 77.700014] ? add_taint.cold.5+0x11/0x11 [ 77.700025] ? af_alg_accept+0x76d/0x9d0 [ 77.700029] __warn.cold.8+0x11a/0x14a [ 77.700034] ? af_alg_accept+0x76d/0x9d0 [ 77.700039] report_bug+0x1a3/0x227 [ 77.700046] ? fixup_exception+0x3b/0xc0 [ 77.700057] do_trap+0x1ef/0x2d0 [ 77.700065] do_error_trap+0x11f/0x390 [ 77.700072] ? math_error+0x3f0/0x3f0 [ 77.700078] ? __rwlock_init+0x1c/0x140 [ 77.700082] ? af_alg_accept+0x76d/0x9d0 [ 77.700087] ? trace_hardirqs_on_caller+0x40c/0x580 [ 77.700093] ? lockdep_init_map+0x105/0x550 [ 77.700096] ? lockdep_init_map+0x105/0x550 [ 77.700106] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 77.700114] do_invalid_op+0x1b/0x20 [ 77.700120] invalid_op+0x1e/0x30 [ 77.700123] RIP: 0010:af_alg_accept+0x76d/0x9d0 [ 77.700126] RSP: 0018:ffff8801204cfce8 EFLAGS: 00010282 [ 77.700131] RAX: ffff880118643ae0 RBX: ffff8801244d5280 RCX: 1ffff100230c875c [ 77.700133] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffff8801244d53b0 [ 77.700136] RBP: ffff8801204cfd20 R08: ffff8801092a2940 R09: 0000000000000000 [ 77.700138] R10: 0000000000000000 R11: ffff8801092a20c0 R12: ffff880118643ac0 [ 77.700140] R13: ffff880103fc80c0 R14: ffffffff87394420 R15: ffff880115f1ee00 [ 77.700154] ? af_alg_accept+0xa6/0x9d0 [ 77.700160] alg_accept+0x33/0x50 [ 77.700167] SYSC_accept4+0x34b/0x810 [ 77.700175] ? kernel_accept+0x300/0x300 [ 77.700184] ? _copy_to_user+0x6d/0xa0 [ 77.700190] ? __might_fault+0x15f/0x1b0 [ 77.700196] ? put_timespec64+0x10c/0x180 [ 77.700201] ? nsecs_to_jiffies+0x20/0x20 [ 77.700207] ? SyS_futex+0xfe/0x3d0 [ 77.700216] ? entry_SYSCALL_64_fastpath+0x5/0xc2 [ 77.700221] ? trace_hardirqs_on_caller+0x40c/0x580 [ 77.700226] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 77.700233] SyS_accept4+0x9/0x10 [ 77.700236] entry_SYSCALL_64_fastpath+0x23/0xc2 [ 77.700241] RIP: 0033:0x45a219 [ 77.700243] RSP: 002b:00007f8ca4b6ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 77.700248] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045a219 [ 77.700250] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 77.700252] RBP: 0000000000000082 R08: 0000000000000000 R09: 0000000000000000 [ 77.700254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.700257] R13: 00007ffc387058df R14: 00007f8ca4b6b9c0 R15: 000000000075bf2c [ 77.706202] Kernel Offset: disabled [ 78.013132] Rebooting in 86400 seconds..