[....] Starting enhanced syslogd: rsyslogd[ 13.447540] audit: type=1400 audit(1537675366.518:4): avc: denied { syslog } for pid=1921 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.110' (ECDSA) to the list of known hosts. 2018/09/23 04:03:04 parsed 1 programs 2018/09/23 04:03:06 executed programs: 0 syzkaller login: [ 38.965812] kasan: CONFIG_KASAN_INLINE enabled [ 38.970322] kasan: GPF could be caused by NULL-ptr deref or user memory accessgeneral protection fault: 0000 [#1] PREEMPT SMP KASAN [ 38.983510] Modules linked in: [ 38.986827] CPU: 1 PID: 3676 Comm: syz-executor0 Not tainted 4.4.157+ #101 [ 38.993829] task: ffff8800b93117c0 task.stack: ffff8801d6740000 [ 38.999873] RIP: 0010:[] [] udpv6_queue_rcv_skb+0x18f/0x1510 [ 39.009033] RSP: 0018:ffff8801d67478d0 EFLAGS: 00010206 [ 39.014476] RAX: dffffc0000000000 RBX: ffff8800b8e08000 RCX: 0000000000000000 [ 39.021737] RDX: 000000000000000c RSI: ffffffff8258fb96 RDI: 0000000000000060 [ 39.029000] RBP: ffff8801d6747910 R08: 0000000000000001 R09: 0000000000000001 [ 39.036273] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8800ba345000 [ 39.043540] R13: 0000000000000001 R14: 0000000000000000 R15: ffff8800ba345058 [ 39.050810] FS: 00007f31e9309700(0000) GS:ffff8801db700000(0000) knlGS:0000000000000000 [ 39.059031] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.060594] kasan: CONFIG_KASAN_INLINE enabled [ 39.069471] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 39.069472] CR2: 00000000004cbfb0 CR3: 00000000b79b3000 CR4: 00000000001606b0 [ 39.084171] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 39.091429] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 39.098683] Stack: [ 39.100819] 00000001b8e08088 ffff8800ba345000 ffff8800b8e08088 ffff8800b8e08000 [ 39.108846] ffff8800ba345000 dffffc0000000000 ffff8800ba345058 0000000000000000 [ 39.116900] ffff8801d6747980 ffffffff82168d3b ffff8800b8e08430 ffff8800b8e08188 [ 39.124927] Call Trace: [ 39.127509] [] release_sock+0x17b/0x500 [ 39.133128] [] udpv6_sendmsg+0x917/0x24c0 [ 39.138917] [] ? udp_lib_close+0x20/0x20 [ 39.144621] [] ? udp_v6_flush_pending_frames+0xe0/0xe0 [ 39.151541] [] ? avc_has_perm_noaudit+0x2f0/0x2f0 [ 39.158063] [] ? trace_hardirqs_on+0x10/0x10 [ 39.164115] [] ? sock_has_perm+0x1c1/0x3f0 [ 39.169989] [] ? sock_has_perm+0x2a1/0x3f0 [ 39.175869] [] ? sock_has_perm+0x9f/0x3f0 [ 39.181658] [] ? selinux_msg_queue_alloc_security+0x2e0/0x2e0 [ 39.189186] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 39.195932] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 39.202679] [] ? check_preemption_disabled+0x3b/0x170 [ 39.209515] [] ? inet_sendmsg+0x143/0x4d0 [ 39.215319] [] inet_sendmsg+0x203/0x4d0 [ 39.220939] [] ? inet_sendmsg+0x73/0x4d0 [ 39.226645] [] ? inet_recvmsg+0x4c0/0x4c0 [ 39.232435] [] sock_sendmsg+0xbb/0x110 [ 39.237968] [] SyS_sendto+0x220/0x370 [ 39.243419] [] ? SyS_getpeername+0x2d0/0x2d0 [ 39.249469] [] ? inet6_bind+0x13b/0xf50 [ 39.255085] [] ? fput+0x20/0x150 [ 39.260095] [] ? SyS_bind+0x18a/0x280 [ 39.265533] [] ? SyS_socketpair+0x520/0x520 [ 39.271496] [] ? get_unused_fd_flags+0xd0/0xd0 [ 39.277728] [] ? SyS_futex+0x24e/0x360 [ 39.283266] [] ? do_futex+0x1840/0x1840 [ 39.288885] [] ? SyS_socket+0x14a/0x1f0 [ 39.294509] [] ? move_addr_to_kernel+0x50/0x50 [ 39.300734] [] ? lockdep_sys_exit_thunk+0x12/0x14 [ 39.307226] [] entry_SYSCALL_64_fastpath+0x1e/0x9a [ 39.313801] Code: 74 24 58 41 f6 c6 01 0f 85 24 08 00 00 e8 ea 51 d6 fe 49 83 e6 fe 48 b8 00 00 00 00 00 fc ff df 49 8d 7e 60 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 01 0f 8e d0 0e 00 00 41 f6 46 60 04 [ 39.341101] RIP [] udpv6_queue_rcv_skb+0x18f/0x1510 [ 39.347892] RSP [ 39.351509] general protection fault: 0000 [#2] [ 39.351586] ---[ end trace 1ba7604c49ead1e5 ]--- [ 39.351591] Kernel panic - not syncing: Fatal exception in interrupt [ 39.367299] PREEMPT SMP KASAN [ 39.371074] Modules linked in: [ 39.374383] CPU: 0 PID: 3680 Comm: syz-executor3 Tainted: G D 4.4.157+ #101 [ 39.383016] task: ffff8800b91717c0 task.stack: ffff8800b8e28000 [ 39.389059] RIP: 0010:[] [] udpv6_queue_rcv_skb+0x18f/0x1510 [ 39.398202] RSP: 0018:ffff8800b8e2f8d0 EFLAGS: 00010206 [ 39.403653] RAX: dffffc0000000000 RBX: ffff8800b8fd8000 RCX: 0000000000000001 [ 39.410913] RDX: 000000000000000c RSI: ffffffff8258fb96 RDI: 0000000000000060 [ 39.418168] RBP: ffff8800b8e2f910 R08: 0000000000000001 R09: 0000000000000000 [ 39.425426] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8800baf9e000 [ 39.432682] R13: 0000000000000001 R14: 0000000000000000 R15: ffff8800baf9e058 [ 39.439945] FS: 00007fc994b75700(0000) GS:ffff8801db600000(0000) knlGS:0000000000000000 [ 39.448156] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.454025] CR2: 0000000000619570 CR3: 00000001d1dc6000 CR4: 00000000001606b0 [ 39.461286] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 39.468548] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 39.475801] Stack: [ 39.477936] 00000001b8fd8088 ffff8800baf9e000 ffff8800b8fd8088 ffff8800b8fd8000 [ 39.485986] ffff8800baf9e000 dffffc0000000000 ffff8800baf9e058 0000000000000000 [ 39.494032] ffff8800b8e2f980 ffffffff82168d3b ffff8800b8fd8430 ffff8800b8fd8188 [ 39.502054] Call Trace: [ 39.504637] [] release_sock+0x17b/0x500 [ 39.510250] [] udpv6_sendmsg+0x917/0x24c0 [ 39.516045] [] ? udp_lib_close+0x20/0x20 [ 39.521749] [] ? udp_v6_flush_pending_frames+0xe0/0xe0 [ 39.528662] [] ? avc_has_perm_noaudit+0x2f0/0x2f0 [ 39.535148] [] ? trace_hardirqs_on+0x10/0x10 [ 39.541194] [] ? trace_hardirqs_on+0x10/0x10 [ 39.547244] [] ? sock_has_perm+0x1c1/0x3f0 [ 39.553121] [] ? trace_hardirqs_on+0x10/0x10 [ 39.559169] [] ? sock_has_perm+0x2a1/0x3f0 [ 39.565049] [] ? sock_has_perm+0x9f/0x3f0 [ 39.570841] [] ? selinux_msg_queue_alloc_security+0x2e0/0x2e0 [ 39.578370] [] ? __fget+0x47/0x3d0 [ 39.583551] [] ? inet_sendmsg+0x73/0x4d0 [ 39.589250] [] ? inet_sendmsg+0x143/0x4d0 [ 39.595046] [] inet_sendmsg+0x203/0x4d0 [ 39.600660] [] ? inet_sendmsg+0x73/0x4d0 [ 39.606354] [] ? inet_recvmsg+0x4c0/0x4c0 [ 39.612143] [] sock_sendmsg+0xbb/0x110 [ 39.617669] [] SyS_sendto+0x220/0x370 [ 39.623105] [] ? SyS_getpeername+0x2d0/0x2d0 [ 39.629150] [] ? inet6_bind+0x13b/0xf50 [ 39.634763] [] ? fput+0x20/0x150 [ 39.639770] [] ? SyS_bind+0x18a/0x280 [ 39.645206] [] ? SyS_socketpair+0x520/0x520 [ 39.651172] [] ? get_unused_fd_flags+0xd0/0xd0 [ 39.657398] [] ? SyS_futex+0x24e/0x360 [ 39.662944] [] ? do_futex+0x1840/0x1840 [ 39.668561] [] ? SyS_socket+0x14a/0x1f0 [ 39.674266] [] ? move_addr_to_kernel+0x50/0x50 [ 39.680504] [] ? finish_task_switch+0x1e7/0x650 [ 39.686813] [] ? lockdep_sys_exit_thunk+0x12/0x14 [ 39.693305] [] entry_SYSCALL_64_fastpath+0x1e/0x9a [ 39.699879] Code: 74 24 58 41 f6 c6 01 0f 85 24 08 00 00 e8 ea 51 d6 fe 49 83 e6 fe 48 b8 00 00 00 00 00 fc ff df 49 8d 7e 60 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 01 0f 8e d0 0e 00 00 41 f6 46 60 04 [ 39.727313] RIP [] udpv6_queue_rcv_skb+0x18f/0x1510 [ 39.734106] RSP [ 39.738063] Kernel Offset: disabled [ 39.741681] Rebooting in 86400 seconds..