[....] Starting enhanced syslogd: rsyslogd[ 12.407997] audit: type=1400 audit(1515932537.268:5): avc: denied { syslog } for pid=3500 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 17.860206] audit: type=1400 audit(1515932542.720:6): avc: denied { map } for pid=3639 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.4' (ECDSA) to the list of known hosts. net.ipv6.conf.syz0.accept_dad = 0 net.ipv6.conf.syz0.router_solicitations = 0 [ 24.080475] audit: type=1400 audit(1515932548.941:7): avc: denied { map } for pid=3653 comm="syzkaller168355" path="/root/syzkaller168355571" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 RTNETLINK answers: Operation not supported RTNETLINK answers: No buffer space available RTNETLINK answers: Operation not supported [ 24.492679] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument [ 24.864940] audit: type=1400 audit(1515932549.725:8): avc: denied { sys_admin } for pid=3653 comm="syzkaller168355" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 executing program [ 25.053549] audit: type=1400 audit(1515932549.914:9): avc: denied { sys_chroot } for pid=3808 comm="syzkaller168355" capability=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 25.078327] audit: type=1400 audit(1515932549.916:10): avc: denied { map_create } for pid=3808 comm="syzkaller168355" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 25.101325] audit: type=1400 audit(1515932549.916:11): avc: denied { map_read map_write } for pid=3808 comm="syzkaller168355" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 25.133474] kasan: CONFIG_KASAN_INLINE enabled [ 25.138140] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 25.145526] general protection fault: 0000 [#1] SMP KASAN [ 25.151050] Dumping ftrace buffer: [ 25.154562] (ftrace buffer empty) [ 25.158244] Modules linked in: [ 25.161410] CPU: 0 PID: 23 Comm: kworker/0:1 Not tainted 4.15.0-rc7+ #261 [ 25.168911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 25.178251] Workqueue: events bpf_map_free_deferred [ 25.183243] RIP: 0010:cgroup_fd_array_put_ptr+0x71/0x2a0 [ 25.188662] RSP: 0018:ffff8801d98af490 EFLAGS: 00010a03 [ 25.193996] RAX: 10b40039400001e9 RBX: 1ffff1003b315e92 RCX: ffffffff8180f495 [ 25.201242] RDX: 0000000000000000 RSI: ffff8801cdedb6a4 RDI: 85a001ca00000f4c [ 25.208484] RBP: ffff8801d98af518 R08: 1ffff1003b315e70 R09: 0000000000000000 [ 25.215727] R10: 0000000000000000 R11: 0000000000000000 R12: 85a001ca00000ee0 [ 25.223054] R13: ffff8801d98af4f0 R14: dffffc0000000000 R15: 85a001ca00000ee0 [ 25.230296] FS: 0000000000000000(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 [ 25.238501] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 25.244362] CR2: 00000000203e2fe4 CR3: 0000000006822006 CR4: 00000000001606f0 [ 25.251614] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 25.258856] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 25.266995] Call Trace: [ 25.269573] ? array_of_map_free+0x180/0x180 [ 25.273953] ? kfree+0xf0/0x260 [ 25.277230] ? selinux_bpf_map_free+0x39/0x50 [ 25.281698] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 25.286690] cgroup_fd_array_free+0xd2/0x150 [ 25.291078] bpf_map_free_deferred+0xb0/0xe0 [ 25.295474] process_one_work+0xbbf/0x1b10 [ 25.299683] ? trace_hardirqs_on+0xd/0x10 [ 25.303810] ? pwq_dec_nr_in_flight+0x450/0x450 [ 25.308456] ? __schedule+0x8f3/0x2060 [ 25.312313] ? update_curr+0x2e3/0xa60 [ 25.316177] ? check_noncircular+0x20/0x20 [ 25.320384] ? __lock_is_held+0xb6/0x140 [ 25.324429] ? lock_acquire+0x1d5/0x580 [ 25.328376] ? lock_acquire+0x1d5/0x580 [ 25.332319] ? worker_thread+0x4a3/0x1990 [ 25.336440] ? lock_downgrade+0x980/0x980 [ 25.340560] ? lock_release+0xa40/0xa40 [ 25.344508] ? retint_kernel+0x10/0x10 [ 25.348373] ? do_raw_spin_trylock+0x190/0x190 [ 25.352933] worker_thread+0x223/0x1990 [ 25.356890] ? process_one_work+0x1b10/0x1b10 [ 25.361358] ? _raw_spin_unlock_irq+0x27/0x70 [ 25.365825] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 25.370811] ? trace_hardirqs_on+0xd/0x10 [ 25.374930] ? _raw_spin_unlock_irq+0x27/0x70 [ 25.379407] ? finish_task_switch+0x1d3/0x740 [ 25.383872] ? finish_task_switch+0x1aa/0x740 [ 25.388340] ? copy_overflow+0x20/0x20 [ 25.392215] ? __schedule+0x8f3/0x2060 [ 25.396085] ? find_held_lock+0x35/0x1d0 [ 25.400121] ? find_held_lock+0x35/0x1d0 [ 25.404159] ? complete+0x62/0x80 [ 25.407592] ? __schedule+0x2060/0x2060 [ 25.411537] ? do_wait_intr_irq+0x3e0/0x3e0 [ 25.415829] ? __lockdep_init_map+0xe4/0x650 [ 25.420222] ? do_raw_spin_trylock+0x190/0x190 [ 25.424776] ? lockdep_init_map+0x9/0x10 [ 25.428810] ? _raw_spin_unlock_irqrestore+0x31/0xba [ 25.433887] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 25.438875] ? trace_hardirqs_on+0xd/0x10 [ 25.442994] ? __kthread_parkme+0x175/0x240 [ 25.447290] kthread+0x33c/0x400 [ 25.450639] ? process_one_work+0x1b10/0x1b10 [ 25.455106] ? kthread_stop+0x7a0/0x7a0 [ 25.459056] ret_from_fork+0x24/0x30 [ 25.462745] Code: 45 88 30 f4 80 81 c7 00 f1 f1 f1 f1 c7 40 04 00 f2 f2 f2 c7 40 08 f3 f3 f3 f3 e8 eb 22 ef ff 49 8d 7c 24 6c 48 89 f8 48 c1 e8 03 <42> 0f b6 14 30 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f [ 25.481842] RIP: cgroup_fd_array_put_ptr+0x71/0x2a0 RSP: ffff8801d98af490 [ 25.488861] ---[ end trace 6d05a26a7c2aaef1 ]--- [ 25.493669] Kernel panic - not syncing: Fatal exception [ 25.499468] Dumping ftrace buffer: [ 25.502985] (ftrace buffer empty) [ 25.506672] Kernel Offset: disabled [ 25.510269] Rebooting in 86400 seconds..