[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 18.310825] audit: type=1400 audit(1520260147.899:6): avc: denied { map } for pid=4219 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.38' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 24.631975] audit: type=1400 audit(1520260154.220:7): avc: denied { map } for pid=4233 comm="syzkaller601722" path="/root/syzkaller601722248" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 24.660843] kasan: CONFIG_KASAN_INLINE enabled [ 24.665603] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 24.673155] general protection fault: 0000 [#1] SMP KASAN [ 24.678687] Dumping ftrace buffer: [ 24.682208] (ftrace buffer empty) [ 24.685902] Modules linked in: [ 24.689084] CPU: 1 PID: 4233 Comm: syzkaller601722 Not tainted 4.16.0-rc4+ #341 [ 24.696510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 24.705859] RIP: 0010:lowpan_device_event+0xca/0x130 [ 24.710942] RSP: 0018:ffff8801bcb17010 EFLAGS: 00010206 [ 24.716290] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff85aed770 [ 24.723544] RDX: 0000000000000006 RSI: 0000000000000006 RDI: 0000000000000030 [ 24.730793] RBP: ffff8801bcb17028 R08: 0000000000000000 R09: 1ffff10037962dd0 [ 24.738034] R10: ffff8801bcb17038 R11: 0000000000000001 R12: 0000000000000006 [ 24.745275] R13: 0000000000000000 R14: ffffffff876990e0 R15: ffffffff87687b60 [ 24.752514] FS: 0000000002187880(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 [ 24.760709] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 24.766559] CR2: 0000557afba72268 CR3: 0000000006e22004 CR4: 00000000001606e0 [ 24.773799] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 24.781039] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 24.788285] Call Trace: [ 24.790847] notifier_call_chain+0x136/0x2c0 [ 24.795229] ? raw_notifier_chain_unregister+0x1b0/0x1b0 [ 24.800650] ? generic_xdp_install+0x4d0/0x4d0 [ 24.805203] ? dev_init_scheduler+0x530/0x530 [ 24.809697] ? rtnl_is_locked+0x54/0xb0 [ 24.813641] ? rtnl_kfree_skbs+0x70/0x70 [ 24.817681] raw_notifier_call_chain+0x2d/0x40 [ 24.822236] call_netdevice_notifiers_info+0x32/0x70 [ 24.827311] rollback_registered_many+0x8b5/0xe20 [ 24.832124] ? dev_xdp_uninstall+0x310/0x310 [ 24.836502] ? __lock_acquire+0x664/0x3e00 [ 24.840708] ? lock_acquire+0x1d5/0x580 [ 24.844652] ? trace_hardirqs_off+0x10/0x10 [ 24.848952] ? print_irqtrace_events+0x270/0x270 [ 24.853678] ? print_irqtrace_events+0x270/0x270 [ 24.858404] ? print_irqtrace_events+0x270/0x270 [ 24.863130] rollback_registered+0x1be/0x3c0 [ 24.867508] ? rollback_registered_many+0xe20/0xe20 [ 24.872492] ? __queue_delayed_work+0x226/0x340 [ 24.877132] ? mark_held_locks+0xaf/0x100 [ 24.881256] ? queue_delayed_work_on+0xc9/0x1d0 [ 24.885895] ? rtnl_is_locked+0x54/0xb0 [ 24.889839] ? trace_hardirqs_on+0xd/0x10 [ 24.893958] ? queue_delayed_work_on+0x10d/0x1d0 [ 24.898687] unregister_netdevice_queue+0x2e3/0x5f0 [ 24.903673] ? rollback_registered+0x3c0/0x3c0 [ 24.908227] ? linkwatch_schedule_work+0x130/0x130 [ 24.913134] ? tun_ptr_free+0x3d0/0x3d0 [ 24.917077] ? mark_held_locks+0xaf/0x100 [ 24.921196] ? __lock_is_held+0xb6/0x140 [ 24.925229] ? __local_bh_enable_ip+0x121/0x230 [ 24.929877] ? __tun_detach+0xa4c/0x10b0 [ 24.933906] ? trace_hardirqs_on+0xd/0x10 [ 24.938032] __tun_detach+0x520/0x10b0 [ 24.941892] ? tun_cleanup_tx_ring.part.46+0x550/0x550 [ 24.947139] ? trace_hardirqs_off+0x10/0x10 [ 24.951440] ? locks_remove_file+0x3fa/0x5a0 [ 24.955820] ? fcntl_setlk+0x1100/0x1100 [ 24.959851] ? fsnotify+0x7b3/0x1140 [ 24.963543] ? __tun_detach+0x10b0/0x10b0 [ 24.967660] ? __tun_detach+0x10b0/0x10b0 [ 24.971779] tun_chr_close+0x44/0x60 [ 24.975466] __fput+0x327/0x7e0 [ 24.978720] ? fput+0x140/0x140 [ 24.981973] ? _raw_spin_unlock_irq+0x27/0x70 [ 24.986442] ____fput+0x15/0x20 [ 24.989693] task_work_run+0x199/0x270 [ 24.993551] ? task_work_cancel+0x210/0x210 [ 24.997845] ? _raw_spin_unlock+0x22/0x30 [ 25.001963] ? switch_task_namespaces+0x87/0xc0 [ 25.006607] do_exit+0x9bb/0x1ad0 [ 25.010050] ? __tun_chr_ioctl+0x471/0x40d0 [ 25.014345] ? mm_update_next_owner+0x930/0x930 [ 25.018986] ? avc_has_extended_perms+0x7fa/0x12c0 [ 25.023892] ? tun_poll_controller+0x4c0/0x4c0 [ 25.028447] ? avc_ss_reset+0x110/0x110 [ 25.032391] ? save_stack+0xa3/0xd0 [ 25.035986] ? save_stack+0x43/0xd0 [ 25.039582] ? __kasan_slab_free+0x11a/0x170 [ 25.043961] ? kasan_slab_free+0xe/0x10 [ 25.047907] ? kmem_cache_free+0x83/0x2a0 [ 25.052034] ? putname+0xee/0x130 [ 25.055459] ? do_sys_open+0x31b/0x6d0 [ 25.059313] ? SyS_open+0x2d/0x40 [ 25.062739] ? _raw_spin_unlock_irqrestore+0xa6/0xc0 [ 25.067815] ? debug_check_no_obj_freed+0x3da/0xf1f [ 25.072803] ? __lock_is_held+0xb6/0x140 [ 25.076845] ? rcu_note_context_switch+0x710/0x710 [ 25.081749] ? tun_chr_compat_ioctl+0x30/0x30 [ 25.086214] ? tun_chr_ioctl+0x2a/0x40 [ 25.090070] ? tun_chr_ioctl+0x2a/0x40 [ 25.093929] ? do_vfs_ioctl+0x486/0x1520 [ 25.097963] ? ioctl_preallocate+0x2b0/0x2b0 [ 25.102344] ? selinux_capable+0x40/0x40 [ 25.106378] ? kmem_cache_free+0x258/0x2a0 [ 25.110586] ? putname+0xf3/0x130 [ 25.114022] do_group_exit+0x149/0x400 [ 25.117884] ? SyS_exit+0x30/0x30 [ 25.121307] ? security_file_ioctl+0x7d/0xb0 [ 25.125685] ? security_file_ioctl+0x89/0xb0 [ 25.130078] ? do_syscall_64+0xb7/0x940 [ 25.134030] ? do_group_exit+0x400/0x400 [ 25.138062] SyS_exit_group+0x1d/0x20 [ 25.141834] do_syscall_64+0x281/0x940 [ 25.145693] ? __do_page_fault+0xc90/0xc90 [ 25.149901] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 25.154627] ? syscall_return_slowpath+0x550/0x550 [ 25.159527] ? syscall_return_slowpath+0x2ac/0x550 [ 25.164429] ? prepare_exit_to_usermode+0x350/0x350 [ 25.169418] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 25.174754] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 25.179571] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 25.184733] RIP: 0033:0x4429e8 [ 25.187899] RSP: 002b:00007ffeb3a5da58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 25.195575] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004429e8 [ 25.202813] RDX: 0000000000000000 RSI: 000000000000003c RDI: 0000000000000000 [ 25.210054] RBP: 00000000004c2628 R08: 00000000000000e7 R09: ffffffffffffffd0 [ 25.217300] R10: 00000000004002e0 R11: 0000000000000246 R12: 0000000000000001 [ 25.224538] R13: 00000000006d4180 R14: 0000000000000000 R15: 0000000000000000 [ 25.231792] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 59 48 8b 9b 50 03 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 30 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 3e 48 8b 5b 30 41 bd 01 00 00 00 48 85 db 74 92 [ 25.250863] RIP: lowpan_device_event+0xca/0x130 RSP: ffff8801bcb17010 [ 25.257519] ---[ end trace a62e77ce152df4e8 ]--- [ 25.262275] Kernel panic - not syncing: Fatal exception [ 25.268082] Dumping ftrace buffer: [ 25.271601] (ftrace buffer empty) [ 25.275282] Kernel Offset: disabled [ 25.278876] Rebooting in 86400 seconds..