[....] Starting enhanced syslogd: rsyslogd[ 11.390045] audit: type=1400 audit(1513983495.908:5): avc: denied { syslog } for pid=2994 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 17.230938] audit: type=1400 audit(1513983501.749:6): avc: denied { map } for pid=3131 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added 'ci-upstream-kasan-gce-7,10.128.15.198' (ECDSA) to the list of known hosts. net.ipv6.conf.syz0.accept_dad = 0 net.ipv6.conf.syz0.router_solicitations = 0 [ 23.449886] audit: type=1400 audit(1513983507.968:7): avc: denied { map } for pid=3145 comm="syzkaller456978" path="/root/syzkaller456978724" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 executing program [ 23.566982] ------------[ cut here ]------------ [ 23.571800] kernel BUG at ./include/linux/skbuff.h:2068! [ 23.577271] invalid opcode: 0000 [#1] SMP KASAN [ 23.581915] Dumping ftrace buffer: [ 23.585419] (ftrace buffer empty) [ 23.589096] Modules linked in: [ 23.592257] CPU: 0 PID: 3145 Comm: syzkaller456978 Not tainted 4.15.0-rc4+ #234 [ 23.599663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 23.608996] RIP: 0010:skb_pull+0xd5/0xf0 [ 23.613025] RSP: 0018:ffff8801c921f270 EFLAGS: 00010293 [ 23.618355] RAX: ffff8801ca472480 RBX: ffff8801c81123c0 RCX: ffffffff841bb0b5 [ 23.625588] RDX: 0000000000000000 RSI: 0000000000000028 RDI: ffff8801c811243c [ 23.632823] RBP: ffff8801c921f288 R08: 1ffff10039243db7 R09: 0000000000000002 [ 23.640060] R10: ffff8801c921f278 R11: 0000000000000000 R12: 0000000000000028 [ 23.647294] R13: 0000000000000010 R14: dffffc0000000000 R15: 0000000000000000 [ 23.654531] FS: 0000000001ca4880(0000) GS:ffff8801db400000(0000) knlGS:0000000000000000 [ 23.662722] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 23.668567] CR2: 000000002084c000 CR3: 00000001ca73c003 CR4: 00000000001606f0 [ 23.675804] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 23.683038] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 23.690270] Call Trace: [ 23.692828] esp6_gro_receive+0xb4/0xbe0 [ 23.696856] ? esp6_output+0xf20/0xf20 [ 23.700709] ? __lock_is_held+0xb6/0x140 [ 23.704738] ? esp6_output+0xf20/0xf20 [ 23.708590] ipv6_gro_receive+0x83e/0x13c0 [ 23.712796] ? ipv6_gso_pull_exthdrs+0x580/0x580 [ 23.717521] ? rcutorture_record_progress+0x10/0x10 [ 23.722508] ? check_noncircular+0x20/0x20 [ 23.726709] ? check_noncircular+0x20/0x20 [ 23.730912] dev_gro_receive+0xd2c/0x2120 [ 23.735046] ? memcpy+0x45/0x50 [ 23.738292] ? net_rx_action+0x1910/0x1910 [ 23.742494] ? __lock_is_held+0xb6/0x140 [ 23.746526] napi_gro_frags+0x377/0xad0 [ 23.750469] ? napi_gro_receive+0x500/0x500 [ 23.754769] ? tun_get_user+0x25cc/0x36d0 [ 23.758883] tun_get_user+0x25f5/0x36d0 [ 23.762838] ? tun_build_skb.isra.48+0x17d0/0x17d0 [ 23.767734] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 23.772887] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 23.778045] ? check_noncircular+0x20/0x20 [ 23.782250] ? tun_get+0x1ab/0x2e0 [ 23.785758] ? lock_release+0xa40/0xa40 [ 23.789696] ? __lock_is_held+0xb6/0x140 [ 23.793731] ? tun_get+0x1d4/0x2e0 [ 23.797236] ? tun_chr_close+0x60/0x60 [ 23.801089] ? __check_object_size+0x25d/0x4f0 [ 23.805637] ? rcu_note_context_switch+0x710/0x710 [ 23.810536] tun_chr_write_iter+0xb9/0x160 [ 23.814737] do_iter_readv_writev+0x525/0x7f0 [ 23.819215] ? vfs_dedupe_file_range+0x8f0/0x8f0 [ 23.823940] ? rw_verify_area+0xe5/0x2b0 [ 23.827971] do_iter_write+0x154/0x540 [ 23.831826] ? dup_iter+0x260/0x260 [ 23.835421] vfs_writev+0x18a/0x340 [ 23.839016] ? __fget_light+0x297/0x380 [ 23.842959] ? vfs_iter_write+0xb0/0xb0 [ 23.846901] ? up_read+0x1a/0x40 [ 23.850236] ? __do_page_fault+0x3d6/0xc90 [ 23.854439] ? mm_fault_error+0x2c0/0x2c0 [ 23.858560] ? __fdget_pos+0x130/0x190 [ 23.862412] ? __fdget_raw+0x20/0x20 [ 23.866099] ? __do_page_fault+0xc90/0xc90 [ 23.870300] do_writev+0xfc/0x2a0 [ 23.873718] ? do_writev+0xfc/0x2a0 [ 23.877310] ? vfs_writev+0x340/0x340 [ 23.881075] ? entry_SYSCALL_64_fastpath+0x5/0x96 [ 23.885883] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 23.890864] SyS_writev+0x27/0x30 [ 23.894283] entry_SYSCALL_64_fastpath+0x1f/0x96 [ 23.899004] RIP: 0033:0x444e50 [ 23.902163] RSP: 002b:00007fff5a4f08d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 23.909835] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000444e50 [ 23.917070] RDX: 0000000000000002 RSI: 00007fff5a4f08e0 RDI: 0000000000000003 [ 23.924305] RBP: 00000000006d0018 R08: 000000002084c046 R09: 0000000000000046 [ 23.931544] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000402390 [ 23.938780] R13: 0000000000402420 R14: 0000000000000000 R15: 0000000000000000 [ 23.946026] Code: a3 d0 00 00 00 e8 fc 38 54 fd 4c 89 e0 5b 41 5c 41 5d 5d c3 45 31 e4 e8 ea 38 54 fd 4c 89 e0 5b 41 5c 41 5d 5d c3 e8 db 38 54 fd <0f> 0b e8 d4 af 8a fd eb 9a e8 cd af 8a fd e9 51 ff ff ff e8 e3 [ 23.965086] RIP: skb_pull+0xd5/0xf0 RSP: ffff8801c921f270 [ 23.970626] ---[ end trace c8c7c2ebe84a87dd ]--- [ 23.975375] Kernel panic - not syncing: Fatal exception in interrupt [ 23.981882] Dumping ftrace buffer: [ 23.985399] (ftrace buffer empty) [ 23.989074] Kernel Offset: disabled [ 23.992675] Rebooting in 86400 seconds..