[....] Starting enhanced syslogd: rsyslogd[ 12.620979] audit: type=1400 audit(1512808744.774:5): avc: denied { syslog } for pid=2994 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 27.617373] audit: type=1400 audit(1512808759.771:6): avc: denied { map } for pid=3137 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added 'ci-upstream-kasan-gce-6,10.128.0.41' (ECDSA) to the list of known hosts. [ 50.186660] audit: type=1400 audit(1512808782.340:7): avc: denied { map } for pid=3151 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16479 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2017/12/09 08:39:42 parsed 1 programs 2017/12/09 08:39:42 executed programs: 0 [ 50.647444] audit: type=1400 audit(1512808782.801:8): avc: denied { map } for pid=3151 comm="syz-execprog" path="/root/syzkaller-shm770934118" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 50.749078] skbuff: skb_over_panic: text:000000004ac22d57 len:196 put:20 head:0000000035622794 data:000000000253c41f tail:0xd4 end:0xc0 dev:lo [ 50.762136] ------------[ cut here ]------------ [ 50.766868] kernel BUG at net/core/skbuff.c:104! [ 50.771656] invalid opcode: 0000 [#1] SMP KASAN [ 50.776293] Dumping ftrace buffer: [ 50.779796] (ftrace buffer empty) [ 50.783474] Modules linked in: [ 50.786647] CPU: 0 PID: 3166 Comm: syz-executor0 Not tainted 4.15.0-rc2+ #213 [ 50.793882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.803209] RIP: 0010:skb_panic+0x15c/0x1f0 [ 50.807493] RSP: 0018:ffff8801db407508 EFLAGS: 00010286 [ 50.812821] RAX: 0000000000000082 RBX: ffff8801cc57c940 RCX: 0000000000000000 [ 50.820054] RDX: 0000000000000082 RSI: 1ffff1003b680e61 RDI: ffffed003b680e95 [ 50.827287] RBP: ffff8801db407570 R08: 1ffff1003b680e23 R09: 0000000000000000 [ 50.834522] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff857d24a0 [ 50.841755] R13: ffffffff84738f82 R14: 0000000000000014 R15: ffff8801c4dbc980 [ 50.848992] FS: 00000000029fa940(0000) GS:ffff8801db400000(0000) knlGS:0000000000000000 [ 50.857183] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.863028] CR2: 0000000000434440 CR3: 00000001c6b42000 CR4: 00000000001406f0 [ 50.870265] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 50.877498] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 50.884733] Call Trace: [ 50.887282] [ 50.889405] ? SyS_mprotect+0x2a/0x40 [ 50.893169] ? entry_SYSCALL_64_fastpath+0x1f/0x96 [ 50.898065] ? add_grhead.isra.24+0x42/0x3b0 [ 50.902437] skb_put+0x181/0x1c0 [ 50.905767] add_grhead.isra.24+0x42/0x3b0 [ 50.909968] add_grec+0xa55/0x1060 [ 50.913470] ? check_noncircular+0x20/0x20 [ 50.917672] ? mld_sendpack+0xcc0/0xcc0 [ 50.921611] ? trace_hardirqs_on_caller+0x19e/0x5c0 [ 50.926592] ? trace_hardirqs_on+0xd/0x10 [ 50.930704] mld_ifc_timer_expire+0x4d2/0x770 [ 50.935168] call_timer_fn+0x23b/0x840 [ 50.939287] ? mld_dad_timer_expire+0x100/0x100 [ 50.944186] ? process_timeout+0x40/0x40 [ 50.948210] ? print_usage_bug+0x3f0/0x3f0 [ 50.952411] ? lock_downgrade+0x980/0x980 [ 50.956524] ? __run_timers+0x1ce/0xb60 [ 50.960465] ? lock_release+0xda0/0xda0 [ 50.964417] ? trace_hardirqs_on_caller+0x19e/0x5c0 [ 50.969395] ? mld_dad_timer_expire+0x100/0x100 [ 50.974028] ? mld_dad_timer_expire+0x100/0x100 [ 50.978660] __run_timers+0x7e1/0xb60 [ 50.982428] ? del_timer_sync+0x240/0x240 [ 50.986546] ? timerqueue_add+0x1e9/0x280 [ 50.990658] ? enqueue_hrtimer+0x162/0x490 [ 50.994856] ? find_held_lock+0x39/0x1d0 [ 50.998881] ? check_noncircular+0x20/0x20 [ 51.003079] ? print_usage_bug+0x3f0/0x3f0 [ 51.007276] ? lock_downgrade+0x980/0x980 [ 51.011385] ? lock_acquire+0x1d5/0x580 [ 51.015323] ? clockevents_program_event+0x163/0x2e0 [ 51.020393] ? __lock_is_held+0xbc/0x140 [ 51.024422] run_timer_softirq+0x4c/0xb0 [ 51.028445] __do_softirq+0x29d/0xbb2 [ 51.032214] ? __irqentry_text_end+0x4/0x4 [ 51.036413] ? do_timer+0x50/0x50 [ 51.039830] ? native_apic_msr_write+0x5c/0x80 [ 51.044380] ? do_raw_spin_trylock+0x190/0x190 [ 51.048924] ? lapic_next_event+0x54/0x80 [ 51.053046] ? clockevents_program_event+0x108/0x2e0 [ 51.058113] ? tick_program_event+0x83/0x100 [ 51.062486] ? __lock_is_held+0xbc/0x140 [ 51.066520] irq_exit+0x1d3/0x210 [ 51.069945] smp_apic_timer_interrupt+0x16b/0x700 [ 51.074752] ? smp_reschedule_interrupt+0xe6/0x670 [ 51.079648] ? smp_call_function_single_interrupt+0x640/0x640 [ 51.085493] ? _raw_spin_lock+0x32/0x40 [ 51.089434] ? handle_edge_irq+0x2b4/0x7c0 [ 51.093635] ? task_prio+0x40/0x40 [ 51.097146] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 51.101954] apic_timer_interrupt+0x9d/0xb0 [ 51.106236] [ 51.108437] RIP: 0010:__split_vma+0x101/0x7b0 [ 51.112895] RSP: 0018:ffff8801c4c47ce0 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff11 [ 51.120567] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff819ccc6b [ 51.127802] RDX: 1ffffffff0d16180 RSI: ffff8801c5fc8460 RDI: ffff8801db2169c0 [ 51.135035] RBP: ffff8801c4c47d80 R08: 0000000000100070 R09: ffff8801d17d5aa8 [ 51.142270] R10: 1ffff10038988ee0 R11: 1ffff10038bf90a4 R12: ffff8801c5fc8460 [ 51.149504] R13: 1ffff10038988f9f R14: 00007fe4491bf000 R15: 000000000000000b [ 51.156745] ? __split_vma+0xdb/0x7b0 [ 51.160515] ? find_vma_prev+0x140/0x140 [ 51.164541] ? __vma_adjust+0x1790/0x1790 [ 51.168651] ? rcu_note_context_switch+0x710/0x710 [ 51.173547] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 51.178440] split_vma+0x8f/0xc0 [ 51.181774] mprotect_fixup+0x3f5/0x640 [ 51.185714] ? vmacache_find+0x5f/0x280 [ 51.189654] do_mprotect_pkey+0x57d/0x900 [ 51.193769] ? SyS_mmap_pgoff+0x243/0x5f0 [ 51.197880] ? mprotect_fixup+0x640/0x640 [ 51.201992] ? entry_SYSCALL_64_fastpath+0x5/0x96 [ 51.206888] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 51.213431] SyS_mprotect+0x2a/0x40 [ 51.218149] entry_SYSCALL_64_fastpath+0x1f/0x96 [ 51.223647] RIP: 0033:0x452b37 [ 51.226803] RSP: 002b:00007fff0991ca58 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 51.236812] RAX: ffffffffffffffda RBX: 00000000000000f8 RCX: 0000000000452b37 [ 51.245367] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 00007fe4491be000 [ 51.252602] RBP: 0000000000a74090 R08: 00000000006f8d60 R09: 00000000006f8d60 [ 51.259836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a74080 [ 51.267370] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 [ 51.274613] Code: 03 0f b6 04 01 84 c0 74 04 3c 03 7e 20 8b 4b 78 41 57 48 c7 c7 20 1d 7d 85 52 56 4c 89 ea 41 50 4c 89 e6 45 89 f0 e8 ac 37 3f fd <0f> 0b 4c 89 4d b8 4c 89 45 c0 48 89 75 c8 48 89 55 d0 e8 3d f4 [ 51.293674] RIP: skb_panic+0x15c/0x1f0 RSP: ffff8801db407508 [ 51.299479] ---[ end trace 45a8d053cb7ca102 ]--- [ 51.304212] Kernel panic - not syncing: Fatal exception in interrupt [ 51.310700] Dumping ftrace buffer: [ 51.314207] (ftrace buffer empty) [ 51.317882] Kernel Offset: disabled [ 51.321473] Rebooting in 86400 seconds..