[ 11.116200] audit: type=1400 audit(1513974289.867:5): avc: denied { syslog } for pid=2990 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 16.632695] audit: type=1400 audit(1513974295.384:6): avc: denied { map } for pid=3134 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added 'ci-upstream-net-kasan-gce-1,10.128.0.49' (ECDSA) to the list of known hosts. net.ipv6.conf.syz0.accept_dad = 0 net.ipv6.conf.syz0.router_solicitations = 0 executing program [ 22.876276] audit: type=1400 audit(1513974301.628:7): avc: denied { map } for pid=3148 comm="syzkaller674540" path="/root/syzkaller674540272" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 22.954579] ------------[ cut here ]------------ [ 22.959352] kernel BUG at ./include/linux/skbuff.h:2073! [ 22.964812] invalid opcode: 0000 [#1] SMP KASAN [ 22.969456] Dumping ftrace buffer: [ 22.972970] (ftrace buffer empty) [ 22.976652] Modules linked in: [ 22.979833] CPU: 1 PID: 3148 Comm: syzkaller674540 Not tainted 4.15.0-rc4+ #164 [ 22.987254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 22.996591] RIP: 0010:skb_pull+0xd5/0xf0 [ 23.000615] RSP: 0018:ffff8801c924f230 EFLAGS: 00010293 [ 23.005944] RAX: ffff8801cabb4000 RBX: ffff8801ced551c0 RCX: ffffffff841c9355 [ 23.013441] RDX: 0000000000000000 RSI: 0000000000000028 RDI: ffff8801ced5523c [ 23.020678] RBP: ffff8801c924f248 R08: 1ffff10039249daf R09: 0000000000000002 [ 23.027956] R10: ffff8801c924f238 R11: 0000000000000000 R12: 0000000000000028 [ 23.035197] R13: 0000000000000010 R14: dffffc0000000000 R15: 0000000000000000 [ 23.042443] FS: 0000000000db8880(0000) GS:ffff8801db500000(0000) knlGS:0000000000000000 [ 23.050648] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 23.056506] CR2: 000000002084c000 CR3: 00000001c9dae003 CR4: 00000000001606e0 [ 23.063740] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 23.070976] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 23.078213] Call Trace: [ 23.080774] esp6_gro_receive+0xb4/0xbe0 [ 23.084800] ? esp6_output+0xf20/0xf20 [ 23.088657] ? __lock_is_held+0xb6/0x140 [ 23.092691] ? esp6_output+0xf20/0xf20 [ 23.096560] ipv6_gro_receive+0x83e/0x13c0 [ 23.100765] ? ipv6_gso_pull_exthdrs+0x580/0x580 [ 23.105491] ? rcutorture_record_progress+0x10/0x10 [ 23.110479] ? check_noncircular+0x20/0x20 [ 23.114684] ? check_noncircular+0x20/0x20 [ 23.118896] dev_gro_receive+0xd2c/0x2100 [ 23.123019] ? memcpy+0x45/0x50 [ 23.126266] ? net_rx_action+0x1910/0x1910 [ 23.130464] ? __lock_is_held+0xb6/0x140 [ 23.134498] napi_gro_frags+0x377/0xad0 [ 23.138441] ? napi_gro_receive+0x500/0x500 [ 23.142736] ? tun_get_user+0x26f6/0x3900 [ 23.146856] tun_get_user+0x271f/0x3900 [ 23.150807] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 23.155987] ? tun_build_skb.isra.48+0x17d0/0x17d0 [ 23.160903] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 23.166069] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 23.171249] ? find_held_lock+0x35/0x1d0 [ 23.175301] ? tun_get+0x1ab/0x2e0 [ 23.178824] ? lock_release+0xa40/0xa40 [ 23.182782] ? __lock_is_held+0xb6/0x140 [ 23.186832] ? tun_get+0x1d4/0x2e0 [ 23.191216] ? tun_chr_close+0x60/0x60 [ 23.196029] ? __check_object_size+0x25d/0x4f0 [ 23.200576] ? rcu_note_context_switch+0x710/0x710 [ 23.205476] tun_chr_write_iter+0xb9/0x160 [ 23.209677] do_iter_readv_writev+0x525/0x7f0 [ 23.215008] ? vfs_dedupe_file_range+0x8f0/0x8f0 [ 23.219731] ? rw_verify_area+0xe5/0x2b0 [ 23.223756] do_iter_write+0x154/0x540 [ 23.227609] ? dup_iter+0x260/0x260 [ 23.232333] vfs_writev+0x18a/0x340 [ 23.236952] ? __fget_light+0x297/0x380 [ 23.242283] ? vfs_iter_write+0xb0/0xb0 [ 23.247002] ? up_read+0x1a/0x40 [ 23.250333] ? __do_page_fault+0x3d6/0xc90 [ 23.254535] ? mm_fault_error+0x2c0/0x2c0 [ 23.258662] ? __fdget_pos+0x130/0x190 [ 23.262516] ? __fdget_raw+0x20/0x20 [ 23.266200] ? __do_page_fault+0xc90/0xc90 [ 23.270407] do_writev+0xfc/0x2a0 [ 23.273830] ? do_writev+0xfc/0x2a0 [ 23.277427] ? vfs_writev+0x340/0x340 [ 23.281198] ? entry_SYSCALL_64_fastpath+0x5/0x96 [ 23.286011] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 23.290993] SyS_writev+0x27/0x30 [ 23.294413] entry_SYSCALL_64_fastpath+0x1f/0x96 [ 23.299132] RIP: 0033:0x444e50 [ 23.302286] RSP: 002b:00007ffed3c6d3c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 23.309956] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000444e50 [ 23.317189] RDX: 0000000000000002 RSI: 00007ffed3c6d3d0 RDI: 0000000000000003 [ 23.324424] RBP: 00000000006d0018 R08: 000000002084c046 R09: 0000000000000046 [ 23.331658] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000402390 [ 23.338892] R13: 0000000000402420 R14: 0000000000000000 R15: 0000000000000000 [ 23.346143] Code: a3 d0 00 00 00 e8 1c 5d 53 fd 4c 89 e0 5b 41 5c 41 5d 5d c3 45 31 e4 e8 0a 5d 53 fd 4c 89 e0 5b 41 5c 41 5d 5d c3 e8 fb 5c 53 fd <0f> 0b e8 e4 8d 8a fd eb 9a e8 dd 8d 8a fd e9 51 ff ff ff e8 f3 [ 23.365208] RIP: skb_pull+0xd5/0xf0 RSP: ffff8801c924f230 [ 23.370751] ---[ end trace a07734801ab70d94 ]--- [ 23.375479] Kernel panic - not syncing: Fatal exception in interrupt [ 23.382251] Dumping ftrace buffer: [ 23.385762] (ftrace buffer empty) [ 23.389444] Kernel Offset: disabled [ 23.393041] Rebooting in 86400 seconds..