[....] Starting enhanced syslogd: rsyslogd[ 13.055661] audit: type=1400 audit(1516051749.816:5): avc: denied { syslog } for pid=3502 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 17.485475] audit: type=1400 audit(1516051754.246:6): avc: denied { map } for pid=3642 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.27' (ECDSA) to the list of known hosts. net.ipv6.conf.syz0.accept_dad = 0 net.ipv6.conf.syz0.router_solicitations = 0 [ 23.737553] audit: type=1400 audit(1516051760.498:7): avc: denied { map } for pid=3656 comm="syzkaller161437" path="/root/syzkaller161437605" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 RTNETLINK answers: Operation not supported RTNETLINK answers: No buffer space available RTNETLINK answers: Operation not supported [ 24.136268] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument executing program [ 24.477968] skbuff: skb_under_panic: text:000000004215b9cb len:82 put:24 head:00000000be95c203 data:00000000c03f04ac tail:0x3a end:0xc0 dev:gre0 [ 24.491619] ------------[ cut here ]------------ [ 24.496360] kernel BUG at net/core/skbuff.c:104! [ 24.501303] invalid opcode: 0000 [#1] SMP KASAN [ 24.505958] Dumping ftrace buffer: [ 24.509468] (ftrace buffer empty) [ 24.513148] Modules linked in: [ 24.516314] CPU: 0 PID: 3656 Comm: syzkaller161437 Not tainted 4.15.0-rc8+ #173 [ 24.523729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 24.533067] RIP: 0010:skb_panic+0x162/0x1f0 [ 24.537358] RSP: 0018:ffff8801bbd576b0 EFLAGS: 00010282 [ 24.542692] RAX: 0000000000000084 RBX: ffff8801d58c1080 RCX: 0000000000000000 [ 24.549943] RDX: 0000000000000084 RSI: 1ffff100377aae96 RDI: ffffed00377aaeca [ 24.557184] RBP: ffff8801bbd57718 R08: 1ffff100377aae58 R09: 0000000000000000 [ 24.564424] R10: 0000000000000008 R11: 0000000000000000 R12: ffffffff861f8fe0 [ 24.571665] R13: ffffffff84a31e3d R14: 0000000000000018 R15: ffff8801d31500c0 [ 24.578907] FS: 0000000000000000(0000) GS:ffff8801db200000(0063) knlGS:0000000008ad4840 [ 24.587104] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 24.592955] CR2: 0000000020fa3000 CR3: 00000001bc237006 CR4: 00000000001606f0 [ 24.600199] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 24.607438] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 24.614676] Call Trace: [ 24.617238] ? check_stack_object+0x140/0x140 [ 24.621702] ? ipgre_header+0x6d/0x4e0 [ 24.625564] skb_push+0xce/0xf0 [ 24.628820] ipgre_header+0x6d/0x4e0 [ 24.632593] pppoe_sendmsg+0x58e/0x8b0 [ 24.636449] ? gretap_fb_dev_create+0x250/0x250 [ 24.641089] ? pppoe_getname+0x210/0x210 [ 24.645121] ? selinux_socket_sendmsg+0x36/0x40 [ 24.649759] ? security_socket_sendmsg+0x89/0xb0 [ 24.654487] ? pppoe_getname+0x210/0x210 [ 24.658517] sock_sendmsg+0xca/0x110 [ 24.662200] sock_write_iter+0x31a/0x5d0 [ 24.666232] ? sock_sendmsg+0x110/0x110 [ 24.670195] ? bpf_fd_pass+0x280/0x280 [ 24.674051] ? ___might_sleep+0x45c/0x470 [ 24.678173] do_iter_readv_writev+0x525/0x7f0 [ 24.682639] ? vfs_dedupe_file_range+0x8f0/0x8f0 [ 24.687366] ? rw_verify_area+0xe5/0x2b0 [ 24.691401] do_iter_write+0x154/0x540 [ 24.695265] ? iov_iter_get_pages+0x1150/0x1150 [ 24.699917] compat_writev+0x225/0x420 [ 24.703777] ? __fget_light+0x297/0x380 [ 24.707730] ? do_pwritev+0x1a0/0x1a0 [ 24.711505] ? find_held_lock+0x35/0x1d0 [ 24.715542] ? __do_page_fault+0x5f7/0xc90 [ 24.719751] ? __fdget_raw+0x20/0x20 [ 24.723437] ? down_read_trylock+0xdb/0x170 [ 24.727731] ? __do_page_fault+0x32d/0xc90 [ 24.731943] ? __handle_mm_fault+0x3ce0/0x3ce0 [ 24.736502] do_compat_writev+0x115/0x220 [ 24.740628] ? do_compat_writev+0x115/0x220 [ 24.744921] ? compat_writev+0x420/0x420 [ 24.748958] compat_SyS_writev+0x26/0x30 [ 24.752992] ? compat_SyS_preadv2+0x90/0x90 [ 24.757297] do_fast_syscall_32+0x3ee/0xf9d [ 24.761592] ? do_int80_syscall_32+0x9d0/0x9d0 [ 24.766146] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 24.771134] ? page_fault+0x36/0x60 [ 24.774733] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 24.779463] ? retint_user+0x18/0x18 [ 24.783238] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 24.788141] entry_SYSENTER_compat+0x54/0x63 [ 24.792520] RIP: 0023:0xf7f6cc79 [ 24.795868] RSP: 002b:00000000ff96c99c EFLAGS: 00000282 ORIG_RAX: 0000000000000092 [ 24.803543] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020935fa0 [ 24.810790] RDX: 0000000000000006 RSI: 00000000ff96c9fc RDI: 0000000020ae0000 [ 24.818035] RBP: 000000000000002e R08: 0000000000000000 R09: 0000000000000000 [ 24.825280] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 24.832523] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 24.839779] Code: 04 01 84 c0 74 04 3c 03 7e 23 8b 8b 80 00 00 00 41 57 48 c7 c7 a0 88 1f 86 52 56 4c 89 ea 41 50 4c 89 e6 45 89 f0 e8 b6 bd 28 fd <0f> 0b 4c 89 4d b8 4c 89 45 c0 48 89 75 c8 48 89 55 d0 e8 f7 09 [ 24.858865] RIP: skb_panic+0x162/0x1f0 RSP: ffff8801bbd576b0 [ 24.864960] ---[ end trace 293b859210326fbb ]--- [ 24.869911] Kernel panic - not syncing: Fatal exception [ 24.875703] Dumping ftrace buffer: [ 24.879214] (ftrace buffer empty) [ 24.882894] Kernel Offset: disabled [ 24.886497] Rebooting in 86400 seconds..