[....] Starting enhanced syslogd: rsyslogd[ 11.756945] audit: type=1400 audit(1514514525.865:5): avc: denied { syslog } for pid=2999 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 16.820655] audit: type=1400 audit(1514514530.929:6): avc: denied { map } for pid=3139 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.15.244' (ECDSA) to the list of known hosts. [ 30.964839] audit: type=1400 audit(1514514545.073:7): avc: denied { map } for pid=3156 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16479 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2017/12/29 02:29:05 parsed 1 programs 2017/12/29 02:29:05 executed programs: 0 [ 31.066161] audit: type=1400 audit(1514514545.174:8): avc: denied { map } for pid=3156 comm="syz-execprog" path="/root/syzkaller-shm372421236" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 31.091773] audit: type=1400 audit(1514514545.175:9): avc: denied { sys_admin } for pid=3161 comm="syz-executor0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 31.182400] audit: type=1400 audit(1514514545.291:10): avc: denied { sys_chroot } for pid=3164 comm="syz-executor0" capability=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 31.186056] FAULT_INJECTION: forcing a failure. [ 31.186056] name failslab, interval 1, probability 0, space 0, times 1 [ 31.186067] CPU: 1 PID: 3165 Comm: syz-executor0 Not tainted 4.15.0-rc5+ #149 [ 31.186070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 31.186072] Call Trace: [ 31.186082] dump_stack+0x194/0x257 [ 31.186090] ? arch_local_irq_restore+0x53/0x53 [ 31.186098] ? is_bpf_text_address+0xa4/0x120 [ 31.186112] should_fail+0x8c0/0xa40 [ 31.186120] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 31.186129] ? check_noncircular+0x20/0x20 [ 31.186140] ? tty_ldisc_put+0x4c/0x70 [ 31.186146] ? save_stack+0xa3/0xd0 [ 31.186156] ? find_held_lock+0x35/0x1d0 [ 31.186166] ? __lock_is_held+0xb6/0x140 [ 31.186184] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 31.186188] ? lock_downgrade+0x980/0x980 [ 31.186196] ? rcu_note_context_switch+0x710/0x710 [ 31.186200] ? lock_release+0xa40/0xa40 [ 31.186203] ? lock_release+0xa40/0xa40 [ 31.186214] should_failslab+0xec/0x120 [ 31.186222] kmem_cache_alloc_trace+0x4b/0x750 [ 31.186227] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 31.186233] ? trace_hardirqs_on+0xd/0x10 [ 31.186244] tty_ldisc_get.part.3+0x66/0x140 [ 31.186250] tty_set_ldisc+0x64d/0x7a0 [ 31.186262] tty_ioctl+0x492/0x1610 [ 31.186269] ? tty_vhangup+0x30/0x30 [ 31.186275] ? ldsem_down_read+0x37/0x40 [ 31.186285] ? check_noncircular+0x20/0x20 [ 31.186289] ? lock_release+0xa40/0xa40 [ 31.186296] ? map_files_get_link+0x3a0/0x3a0 [ 31.186318] ? find_held_lock+0x35/0x1d0 [ 31.186329] ? tty_vhangup+0x30/0x30 [ 31.186335] do_vfs_ioctl+0x1b1/0x1520 [ 31.186340] ? lock_downgrade+0x980/0x980 [ 31.186349] ? ioctl_preallocate+0x2b0/0x2b0 [ 31.186352] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 31.186360] ? rcu_note_context_switch+0x710/0x710 [ 31.186376] ? ldsem_up_read+0x3a/0x70 [ 31.186382] ? tty_ldisc_deref+0x35/0x40 [ 31.186387] ? tty_compat_ioctl+0x119/0x260 [ 31.186396] compat_SyS_ioctl+0x4ef/0x2a30 [ 31.186406] ? do_ioctl+0x60/0x60 [ 31.186414] do_fast_syscall_32+0x3ee/0xf9d [ 31.186425] ? do_int80_syscall_32+0x9d0/0x9d0 [ 31.186430] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 31.186441] ? syscall_return_slowpath+0x2ad/0x550 [ 31.186446] ? prepare_exit_to_usermode+0x340/0x340 [ 31.186453] ? sysret32_from_system_call+0x5/0x3b [ 31.186462] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 31.186474] entry_SYSENTER_compat+0x54/0x63 [ 31.186478] RIP: 0023:0xf7f63c79 [ 31.186480] RSP: 002b:000000000844f86c EFLAGS: 00000216 ORIG_RAX: 0000000000000036 [ 31.186485] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000005423 [ 31.186488] RDX: 0000000020171ffc RSI: 0000000000000000 RDI: 0000000000000000 [ 31.186490] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 31.186492] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 31.186494] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 31.186581] WARNING: CPU: 1 PID: 3165 at drivers/tty/tty_ldisc.c:531 tty_set_ldisc+0x4c6/0x7a0 [ 31.186585] Kernel panic - not syncing: panic_on_warn set ... [ 31.186585] [ 31.186589] CPU: 1 PID: 3165 Comm: syz-executor0 Not tainted 4.15.0-rc5+ #149 [ 31.186591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 31.186592] Call Trace: [ 31.186597] dump_stack+0x194/0x257 [ 31.186604] ? arch_local_irq_restore+0x53/0x53 [ 31.186613] ? vsnprintf+0x1ed/0x1900 [ 31.186623] panic+0x1e4/0x41c [ 31.186627] ? refcount_error_report+0x214/0x214 [ 31.186632] ? show_regs_print_info+0x18/0x18 [ 31.186643] ? __warn+0x1c1/0x200 [ 31.186655] ? tty_set_ldisc+0x4c6/0x7a0 [ 31.186662] __warn+0x1dc/0x200 [ 31.186667] ? tty_set_ldisc+0x4c6/0x7a0 [ 31.186674] report_bug+0x211/0x2d0 [ 31.186687] fixup_bug.part.11+0x37/0x80 [ 31.186693] do_error_trap+0x2d7/0x3e0 [ 31.186701] ? math_error+0x400/0x400 [ 31.186705] ? put_ldops.isra.2+0x7b/0xa0 [ 31.186711] ? lock_downgrade+0x980/0x980 [ 31.186719] ? free_modinfo_version+0x70/0x70 [ 31.186724] ? lock_release+0xa40/0xa40 [ 31.186731] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 31.186742] do_invalid_op+0x1b/0x20 [ 31.186747] invalid_op+0x22/0x40 [ 31.186751] RIP: 0010:tty_set_ldisc+0x4c6/0x7a0 [ 31.186753] RSP: 0018:ffff8801c8497970 EFLAGS: 00010293 [ 31.186757] RAX: ffff8801d4410180 RBX: ffff8801c9f77400 RCX: ffffffff8287e946 [ 31.186759] RDX: 0000000000000000 RSI: 1ffff1003a882148 RDI: 0000000000000282 [ 31.186761] RBP: ffff8801c84979c0 R08: 1ffff10039092eee R09: 0000000000000000 [ 31.186764] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000ffffffff [ 31.186766] R13: ffff8801c9f77970 R14: ffff8801c9ab5100 R15: fffffffffffffff4 [ 31.186778] ? tty_set_ldisc+0x4c6/0x7a0 [ 31.186795] tty_ioctl+0x492/0x1610 [ 31.186802] ? tty_vhangup+0x30/0x30 [ 31.186806] ? ldsem_down_read+0x37/0x40 [ 31.186815] ? check_noncircular+0x20/0x20 [ 31.186819] ? lock_release+0xa40/0xa40 [ 31.186825] ? map_files_get_link+0x3a0/0x3a0 [ 31.186847] ? find_held_lock+0x35/0x1d0 [ 31.186858] ? tty_vhangup+0x30/0x30 [ 31.186862] do_vfs_ioctl+0x1b1/0x1520 [ 31.186867] ? lock_downgrade+0x980/0x980 [ 31.186876] ? ioctl_preallocate+0x2b0/0x2b0 [ 31.186879] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 31.186887] ? rcu_note_context_switch+0x710/0x710 [ 31.186902] ? ldsem_up_read+0x3a/0x70 [ 31.186908] ? tty_ldisc_deref+0x35/0x40 [ 31.186913] ? tty_compat_ioctl+0x119/0x260 [ 31.186921] compat_SyS_ioctl+0x4ef/0x2a30 [ 31.186931] ? do_ioctl+0x60/0x60 [ 31.186936] do_fast_syscall_32+0x3ee/0xf9d [ 31.186947] ? do_int80_syscall_32+0x9d0/0x9d0 [ 31.186953] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 31.186963] ? syscall_return_slowpath+0x2ad/0x550 [ 31.186968] ? prepare_exit_to_usermode+0x340/0x340 [ 31.186974] ? sysret32_from_system_call+0x5/0x3b [ 31.186989] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 31.187000] entry_SYSENTER_compat+0x54/0x63 [ 31.187003] RIP: 0023:0xf7f63c79 [ 31.187005] RSP: 002b:000000000844f86c EFLAGS: 00000216 ORIG_RAX: 0000000000000036 [ 31.187009] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000005423 [ 31.187011] RDX: 0000000020171ffc RSI: 0000000000000000 RDI: 0000000000000000 [ 31.187013] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 31.187016] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 31.187018] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 31.206820] Dumping ftrace buffer: [ 31.206909] (ftrace buffer empty) [ 31.206914] Kernel Offset: disabled [ 31.823537] Rebooting in 86400 seconds..