[....] Starting enhanced syslogd: rsyslogd[ 10.650625] audit: type=1400 audit(1514025381.209:5): avc: denied { syslog } for pid=2985 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 16.512436] audit: type=1400 audit(1514025387.071:6): avc: denied { map } for pid=3123 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added 'ci-upstream-mmots-kasan-gce-8,10.128.15.227' (ECDSA) to the list of known hosts. net.ipv6.conf.syz0.accept_dad = 0 net.ipv6.conf.syz0.router_solicitations = 0 [ 22.696954] audit: type=1400 audit(1514025393.255:7): avc: denied { map } for pid=3137 comm="syzkaller214410" path="/root/syzkaller214410058" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 executing program [ 22.789408] ------------[ cut here ]------------ [ 22.794192] kernel BUG at ./include/linux/skbuff.h:2073! [ 22.799658] invalid opcode: 0000 [#1] SMP KASAN [ 22.804292] Dumping ftrace buffer: [ 22.807795] (ftrace buffer empty) [ 22.811470] Modules linked in: [ 22.814631] CPU: 0 PID: 3137 Comm: syzkaller214410 Not tainted 4.15.0-rc4-mm1+ #49 [ 22.822300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 22.831625] RIP: 0010:skb_pull+0xd5/0xf0 [ 22.835649] RSP: 0018:ffff8801c925f230 EFLAGS: 00010293 [ 22.840976] RAX: ffff8801ca70c080 RBX: ffff8801ce5e8640 RCX: ffffffff842a23f5 [ 22.848212] RDX: 0000000000000000 RSI: 0000000000000028 RDI: ffff8801ce5e86bc [ 22.855445] RBP: ffff8801c925f248 R08: 1ffff1003924bdaf R09: 0000000000000002 [ 22.862681] R10: ffff8801c925f238 R11: 0000000000000000 R12: 0000000000000028 [ 22.869920] R13: 0000000000000010 R14: dffffc0000000000 R15: 0000000000000000 [ 22.877155] FS: 00000000008dc880(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 [ 22.885352] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 22.891197] CR2: 000000002084c000 CR3: 00000001cba8c002 CR4: 00000000001606f0 [ 22.898435] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 22.905670] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 22.912908] Call Trace: [ 22.915466] esp6_gro_receive+0xb4/0xbe0 [ 22.919494] ? esp6_output+0xf20/0xf20 [ 22.923348] ? __lock_is_held+0xb6/0x140 [ 22.927376] ? esp6_output+0xf20/0xf20 [ 22.931230] ipv6_gro_receive+0x83e/0x13c0 [ 22.935439] ? ipv6_gso_pull_exthdrs+0x580/0x580 [ 22.940175] ? rcutorture_record_progress+0x10/0x10 [ 22.945157] ? check_noncircular+0x20/0x20 [ 22.949362] ? check_noncircular+0x20/0x20 [ 22.953565] dev_gro_receive+0xd2c/0x2100 [ 22.957679] ? memcpy+0x45/0x50 [ 22.960925] ? net_rx_action+0x1910/0x1910 [ 22.965133] ? __lock_is_held+0xb6/0x140 [ 22.969164] napi_gro_frags+0x377/0xad0 [ 22.973105] ? napi_gro_receive+0x500/0x500 [ 22.977394] ? tun_get_user+0x26f6/0x3900 [ 22.981506] tun_get_user+0x271f/0x3900 [ 22.985444] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 22.990607] ? tun_build_skb.isra.48+0x17d0/0x17d0 [ 22.995504] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 23.000657] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 23.005809] ? trace_hardirqs_on+0xd/0x10 [ 23.009923] ? find_held_lock+0x35/0x1d0 [ 23.013950] ? tun_get+0x1ab/0x2e0 [ 23.017455] ? lock_release+0xa40/0xa40 [ 23.021395] ? __lock_is_held+0xb6/0x140 [ 23.025425] ? tun_get+0x1d4/0x2e0 [ 23.028928] ? tun_chr_close+0x60/0x60 [ 23.032777] ? __check_object_size+0x25d/0x4f0 [ 23.037325] ? rcu_note_context_switch+0x710/0x710 [ 23.042223] tun_chr_write_iter+0xb9/0x160 [ 23.046427] do_iter_readv_writev+0x525/0x7f0 [ 23.050891] ? vfs_dedupe_file_range+0x8f0/0x8f0 [ 23.055613] ? rw_verify_area+0xe5/0x2b0 [ 23.059641] do_iter_write+0x154/0x540 [ 23.063493] ? dup_iter+0x260/0x260 [ 23.067087] vfs_writev+0x18a/0x340 [ 23.070679] ? __fget_light+0x297/0x380 [ 23.074619] ? vfs_iter_write+0xb0/0xb0 [ 23.078558] ? up_read+0x1a/0x40 [ 23.081892] ? __do_page_fault+0x3d6/0xc90 [ 23.086093] ? mm_fault_error+0x2c0/0x2c0 [ 23.090205] ? __fdget_pos+0x130/0x190 [ 23.094058] ? __fdget_raw+0x20/0x20 [ 23.097735] ? __do_page_fault+0xc90/0xc90 [ 23.101937] do_writev+0xfc/0x2a0 [ 23.105353] ? do_writev+0xfc/0x2a0 [ 23.108947] ? vfs_writev+0x340/0x340 [ 23.112726] ? entry_SYSCALL_64_fastpath+0x5/0x96 [ 23.117535] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 23.122517] SyS_writev+0x27/0x30 [ 23.125939] entry_SYSCALL_64_fastpath+0x1f/0x96 [ 23.130657] RIP: 0033:0x444e50 [ 23.133818] RSP: 002b:00007ffcf200e128 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 23.141489] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000444e50 [ 23.148725] RDX: 0000000000000002 RSI: 00007ffcf200e130 RDI: 0000000000000003 [ 23.155959] RBP: 00000000006d0018 R08: 000000002084c046 R09: 0000000000000046 [ 23.163193] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000402390 [ 23.170427] R13: 0000000000402420 R14: 0000000000000000 R15: 0000000000000000 [ 23.177668] Code: a3 d0 00 00 00 e8 ec 0f 46 fd 4c 89 e0 5b 41 5c 41 5d 5d c3 45 31 e4 e8 da 0f 46 fd 4c 89 e0 5b 41 5c 41 5d 5d c3 e8 cb 0f 46 fd <0f> 0b e8 44 72 7d fd eb 9a e8 3d 72 7d fd e9 51 ff ff ff e8 53 [ 23.196726] RIP: skb_pull+0xd5/0xf0 RSP: ffff8801c925f230 [ 23.202283] ---[ end trace 797d9638a4a13c39 ]--- [ 23.207019] Kernel panic - not syncing: Fatal exception in interrupt [ 23.213511] Dumping ftrace buffer: [ 23.217023] (ftrace buffer empty) [ 23.220699] Kernel Offset: disabled [ 23.224293] Rebooting in 86400 seconds..