[ 40.079682] audit: type=1800 audit(1555263300.585:32): pid=7471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2450 res=0 Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 52.344474] kauditd_printk_skb: 2 callbacks suppressed [ 52.344488] audit: type=1400 audit(1555263312.945:35): avc: denied { map } for pid=7646 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.238' (ECDSA) to the list of known hosts. executing program executing program [ 74.302427] audit: type=1400 audit(1555263334.895:36): avc: denied { map } for pid=7658 comm="syz-executor015" path="/root/syz-executor015945744" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 74.340555] IPVS: ftp: loaded support on port[0] = 21 executing program executing program [ 74.386514] IPVS: ftp: loaded support on port[0] = 21 [ 74.426620] IPVS: ftp: loaded support on port[0] = 21 executing program executing program [ 74.465424] IPVS: ftp: loaded support on port[0] = 21 [ 74.503600] IPVS: ftp: loaded support on port[0] = 21 executing program [ 74.549244] IPVS: ftp: loaded support on port[0] = 21 executing program executing program [ 74.593765] IPVS: ftp: loaded support on port[0] = 21 [ 74.630365] IPVS: ftp: loaded support on port[0] = 21 executing program [ 74.665740] IPVS: ftp: loaded support on port[0] = 21 executing program [ 74.707456] IPVS: ftp: loaded support on port[0] = 21 executing program executing program [ 74.753101] IPVS: ftp: loaded support on port[0] = 21 [ 74.788663] IPVS: ftp: loaded support on port[0] = 21 executing program executing program [ 74.823031] IPVS: ftp: loaded support on port[0] = 21 [ 74.857998] IPVS: ftp: loaded support on port[0] = 21 executing program executing program [ 74.898145] IPVS: ftp: loaded support on port[0] = 21 [ 74.937032] IPVS: ftp: loaded support on port[0] = 21 [ 74.975465] IPVS: ftp: loaded support on port[0] = 21 executing program executing program [ 75.063780] IPVS: ftp: loaded support on port[0] = 21 [ 75.097045] IPVS: ftp: loaded support on port[0] = 21 executing program executing program [ 75.157096] IPVS: ftp: loaded support on port[0] = 21 executing program [ 75.197314] IPVS: ftp: loaded support on port[0] = 21 executing program [ 75.237670] IPVS: ftp: loaded support on port[0] = 21 executing program executing program [ 75.287209] IPVS: ftp: loaded support on port[0] = 21 [ 75.323155] IPVS: ftp: loaded support on port[0] = 21 executing program executing program [ 75.357691] IPVS: ftp: loaded support on port[0] = 21 [ 75.396817] IPVS: ftp: loaded support on port[0] = 21 executing program executing program [ 75.430609] IPVS: ftp: loaded support on port[0] = 21 [ 75.467322] IPVS: ftp: loaded support on port[0] = 21 executing program [ 75.507200] IPVS: ftp: loaded support on port[0] = 21 [ 75.513669] sched: DL replenish lagged too much executing program executing program [ 75.549057] IPVS: ftp: loaded support on port[0] = 21 [ 75.587042] IPVS: ftp: loaded support on port[0] = 21 executing program [ 75.623097] IPVS: ftp: loaded support on port[0] = 21 executing program executing program [ 75.657429] IPVS: ftp: loaded support on port[0] = 21 [ 75.697158] IPVS: ftp: loaded support on port[0] = 21 executing program executing program [ 75.737220] IPVS: ftp: loaded support on port[0] = 21 [ 75.776580] IPVS: ftp: loaded support on port[0] = 21 executing program executing program [ 75.812983] IPVS: ftp: loaded support on port[0] = 21 [ 75.844284] IPVS: ftp: loaded support on port[0] = 21 executing program [ 75.874905] IPVS: ftp: loaded support on port[0] = 21 executing program [ 75.905818] IPVS: ftp: loaded support on port[0] = 21 [ 75.939133] IPVS: ftp: loaded support on port[0] = 21 [ 75.955993] WARNING: CPU: 1 PID: 7 at net/xfrm/xfrm_state.c:2383 xfrm_state_fini+0x213/0x280 [ 75.956172] kobject: 'gretap0' (00000000df193772): kobject_add_internal: parent: 'net', set: 'devices' [ 75.965117] Kernel panic - not syncing: panic_on_warn set ... [ 75.965117] [ 75.965131] CPU: 1 PID: 7 Comm: kworker/u4:0 Not tainted 4.19.34 #2 [ 75.965135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 75.965151] Workqueue: netns cleanup_net [ 75.965157] Call Trace: [ 75.965174] dump_stack+0x172/0x1f0 [ 75.965187] panic+0x263/0x51d [ 75.965195] ? __warn_printk+0xf3/0xf3 [ 75.965207] ? xfrm_state_fini+0x213/0x280 [ 75.965217] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 75.965235] ? __warn.cold+0x5/0x54 [ 75.965243] ? __warn+0xe8/0x1d0 [ 75.965251] ? xfrm_state_fini+0x213/0x280 [ 75.965259] __warn.cold+0x20/0x54 [ 75.985266] kobject: 'gretap0' (00000000df193772): kobject_uevent_env [ 75.989581] ? xfrm_state_fini+0x213/0x280 [ 75.989593] report_bug+0x263/0x2b0 [ 75.989644] do_error_trap+0x204/0x360 [ 76.001750] kobject: 'gretap0' (00000000df193772): fill_kobj_path: path = '/devices/virtual/net/gretap0' [ 76.003360] ? math_error+0x340/0x340 [ 76.003374] ? __flush_work+0x48c/0x840 [ 76.003385] ? error_entry+0x76/0xd0 [ 76.003397] ? trace_hardirqs_off_caller+0x65/0x220 [ 76.003404] ? _raw_spin_unlock_bh+0x31/0x40 [ 76.003416] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 76.003426] do_invalid_op+0x1b/0x20 [ 76.003440] invalid_op+0x14/0x20 [ 76.026067] kobject: 'queues' (000000009ce8e809): kobject_add_internal: parent: 'gretap0', set: '' [ 76.027064] RIP: 0010:xfrm_state_fini+0x213/0x280 [ 76.027078] Code: 41 5e 5d c3 e8 ce 3e 7c fb 0f 0b e9 09 ff ff ff e8 c2 3e 7c fb 0f 0b e9 68 ff ff ff e8 b6 3e 7c fb 0f 0b eb c6 e8 ad 3e 7c fb <0f> 0b e9 52 fe ff ff e8 61 9c b2 fb e9 75 fe ff ff e8 77 9c b2 fb [ 76.031056] kobject: 'queues' (000000009ce8e809): kobject_uevent_env [ 76.034493] RSP: 0018:ffff8880aa21fbd0 EFLAGS: 00010293 [ 76.034503] RAX: ffff8880aa2061c0 RBX: ffff8880a8c98040 RCX: 0000000000000000 [ 76.034508] RDX: 0000000000000000 RSI: ffffffff85eef893 RDI: ffff8880aa206a3c [ 76.034513] RBP: ffff8880aa21fbf0 R08: ffff8880aa2061c0 R09: ffff8880aa206ab0 [ 76.034518] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880a8c99b80 [ 76.034523] R13: ffff8880aa21fcc8 R14: ffffffff891b6138 R15: dffffc0000000000 [ 76.034544] ? xfrm_state_fini+0x213/0x280 [ 76.034557] ? xfrm_policy_fini+0x2b0/0x2b0 [ 76.034566] xfrm_net_exit+0x25/0x70 [ 76.034577] ops_exit_list.isra.0+0xb0/0x160 [ 76.034587] cleanup_net+0x3fb/0x960 [ 76.034597] ? unregister_pernet_device+0x80/0x80 [ 76.034606] ? __lock_is_held+0xb6/0x140 [ 76.034623] process_one_work+0x98e/0x1760 [ 76.034643] ? pwq_dec_nr_in_flight+0x320/0x320 [ 76.039742] kobject: 'queues' (000000009ce8e809): kobject_uevent_env: filter function caused the event to drop! [ 76.043412] ? lock_acquire+0x16f/0x3f0 [ 76.043427] ? kasan_check_write+0x14/0x20 [ 76.043436] ? do_raw_spin_lock+0xc8/0x240 [ 76.043449] worker_thread+0x98/0xe40 [ 76.043474] kthread+0x357/0x430 [ 76.043482] ? process_one_work+0x1760/0x1760 [ 76.043489] ? kthread_delayed_work_timer_fn+0x290/0x290 [ 76.043500] ret_from_fork+0x3a/0x50 [ 76.051289] Kernel Offset: disabled [ 76.284493] Rebooting in 86400 seconds..