[....] Starting enhanced syslogd: rsyslogd[ 16.122308] audit: type=1400 audit(1519254266.724:5): avc: denied { syslog } for pid=4015 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 18.737584] audit: type=1400 audit(1519254269.339:6): avc: denied { map } for pid=4153 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.15.203' (ECDSA) to the list of known hosts. [ 25.100648] audit: type=1400 audit(1519254275.702:7): avc: denied { map } for pid=4167 comm="syzkaller155335" path="/root/syzkaller155335240" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 25.112663] IPVS: ftp: loaded support on port[0] = 21 net.ipv6.conf.syz0.accept_dad = 0 net.ipv6.conf.syz0.router_solicitations = 0 [ 25.126641] audit: type=1400 audit(1519254275.702:8): avc: denied { sys_admin } for pid=4167 comm="syzkaller155335" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 25.175277] audit: type=1400 audit(1519254275.776:9): avc: denied { net_admin } for pid=4168 comm="syzkaller155335" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 RTNETLINK answers: Operation not supported RTNETLINK answers: No buffer space available RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported [ 25.367375] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument executing program [ 25.679353] audit: type=1400 audit(1519254276.281:10): avc: denied { sys_chroot } for pid=4168 comm="syzkaller155335" capability=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 25.681760] kasan: CONFIG_KASAN_INLINE enabled [ 25.704000] audit: type=1400 audit(1519254276.282:11): avc: denied { net_raw } for pid=4168 comm="syzkaller155335" capability=13 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 25.708575] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 25.740203] general protection fault: 0000 [#1] SMP KASAN [ 25.745711] Dumping ftrace buffer: [ 25.749221] (ftrace buffer empty) [ 25.752903] Modules linked in: [ 25.756077] CPU: 1 PID: 4168 Comm: syzkaller155335 Not tainted 4.16.0-rc2+ #236 [ 25.763492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 25.772824] RIP: 0010:arpt_do_table+0x11e1/0x16a0 [ 25.777641] RSP: 0018:ffff8801b1b46a10 EFLAGS: 00010246 [ 25.782973] RAX: 0000000000000001 RBX: ffff8801d3a306d0 RCX: 0000000000000000 [ 25.790213] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8801d3a305a6 [ 25.797452] RBP: ffff8801b1b46bb0 R08: 0000000000000001 R09: 0000000000000002 [ 25.804690] R10: ffff8801b1b46b08 R11: 0000000000000000 R12: ffff8801b0fc004e [ 25.811929] R13: ffff8801d3a30500 R14: dffffc0000000000 R15: 0000000000000000 [ 25.819168] FS: 000000000129e880(0000) GS:ffff8801db500000(0000) knlGS:0000000000000000 [ 25.827362] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 25.833217] CR2: 0000000020000400 CR3: 00000001b3513004 CR4: 00000000001606e0 [ 25.840467] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 25.847710] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 25.854947] Call Trace: [ 25.857515] ? do_add_counters+0x560/0x560 [ 25.861720] ? check_noncircular+0x20/0x20 [ 25.865923] ? lock_acquire+0x1d5/0x580 [ 25.869876] ? lock_acquire+0x1d5/0x580 [ 25.873821] ? arp_rcv+0x546/0x9d0 [ 25.877331] ? find_held_lock+0x35/0x1d0 [ 25.881362] ? lock_release+0xa40/0xa40 [ 25.885308] arptable_filter_hook+0x65/0x80 [ 25.889600] nf_hook_slow+0xba/0x1a0 [ 25.893286] arp_rcv+0x787/0x9d0 [ 25.896620] ? check_noncircular+0x20/0x20 [ 25.900825] ? parp_redo+0x80/0x80 [ 25.904335] ? lock_release+0xa40/0xa40 [ 25.908279] ? is_bpf_text_address+0xa4/0x120 [ 25.912749] ? arp_solicit+0x1320/0x1320 [ 25.916781] ? parp_redo+0x80/0x80 [ 25.920296] __netif_receive_skb_core+0x1a41/0x3460 [ 25.925285] ? nf_ingress+0x9f0/0x9f0 [ 25.929055] ? tun_build_skb.isra.50+0x9cb/0x1850 [ 25.933864] ? tun_chr_write_iter+0xbd/0x1c0 [ 25.938244] ? do_iter_readv_writev+0x55c/0x830 [ 25.942879] ? do_iter_write+0x154/0x540 [ 25.946908] ? __skb_flow_dissect+0x4ce/0x3f00 [ 25.951460] ? SyS_writev+0x27/0x30 [ 25.955061] ? do_syscall_64+0x280/0x940 [ 25.959096] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 25.964257] ? __skb_flow_get_ports+0x420/0x420 [ 25.969214] ? __skb_flow_get_ports+0x420/0x420 [ 25.973856] ? check_noncircular+0x20/0x20 [ 25.978060] ? __lock_is_held+0xb6/0x140 [ 25.982094] ? print_irqtrace_events+0x270/0x270 [ 25.986822] ? find_held_lock+0x35/0x1d0 [ 25.990864] ? netif_receive_skb_internal+0x1d7/0x670 [ 25.996034] ? lock_downgrade+0x980/0x980 [ 26.000165] ? pvclock_read_flags+0x160/0x160 [ 26.004631] ? lock_acquire+0x1d5/0x580 [ 26.008573] ? lock_acquire+0x1d5/0x580 [ 26.012519] ? netif_receive_skb_internal+0xa2/0x670 [ 26.017593] ? ktime_get_with_offset+0x2c1/0x420 [ 26.022330] ? lock_release+0xa40/0xa40 [ 26.026274] ? do_gettimeofday+0x190/0x190 [ 26.030480] ? tun_build_skb.isra.50+0x397/0x1850 [ 26.035298] __netif_receive_skb+0x2c/0x1b0 [ 26.039589] ? __netif_receive_skb+0x2c/0x1b0 [ 26.044060] netif_receive_skb_internal+0x10b/0x670 [ 26.049046] ? dev_cpu_dead+0xb00/0xb00 [ 26.052991] ? check_noncircular+0x20/0x20 [ 26.057200] ? rcu_pm_notify+0xc0/0xc0 [ 26.061061] netif_receive_skb+0xae/0x390 [ 26.065179] ? netif_receive_skb_internal+0x670/0x670 [ 26.070343] ? find_held_lock+0x35/0x1d0 [ 26.074375] ? tun_rx_batched.isra.52+0x5c4/0x870 [ 26.079188] tun_rx_batched.isra.52+0x5ee/0x870 [ 26.083828] ? tun_sock_write_space+0x370/0x370 [ 26.088474] tun_get_user+0x25a5/0x3810 [ 26.092417] ? trace_hardirqs_off+0xd/0x10 [ 26.096624] ? _raw_spin_unlock_irqrestore+0xa6/0xba [ 26.101704] ? tun_build_skb.isra.50+0x1850/0x1850 [ 26.106602] ? do_syscall_64+0x280/0x940 [ 26.110637] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 26.115983] ? tun_get+0x1ab/0x2e0 [ 26.119498] ? lock_release+0xa40/0xa40 [ 26.123443] ? __lock_is_held+0xb6/0x140 [ 26.127480] ? tun_get+0x1d4/0x2e0 [ 26.130989] ? tun_do_read+0x26c0/0x26c0 [ 26.135025] ? __check_object_size+0x8b/0x530 [ 26.139494] ? rcu_note_context_switch+0x710/0x710 [ 26.144398] tun_chr_write_iter+0xbd/0x1c0 [ 26.148613] do_iter_readv_writev+0x55c/0x830 [ 26.153090] ? vfs_dedupe_file_range+0x8f0/0x8f0 [ 26.157817] ? rw_verify_area+0xe5/0x2b0 [ 26.161850] do_iter_write+0x154/0x540 [ 26.165708] ? dup_iter+0x260/0x260 [ 26.169306] ? module_unload_free+0x5b0/0x5b0 [ 26.173773] vfs_writev+0x18a/0x340 [ 26.177370] ? vfs_iter_write+0xb0/0xb0 [ 26.181339] ? nf_setsockopt+0x93/0xc0 [ 26.185213] ? __fdget_pos+0x130/0x190 [ 26.189071] ? __fdget_raw+0x20/0x20 [ 26.192757] ? sock_common_setsockopt+0x95/0xd0 [ 26.197397] do_writev+0xfc/0x2a0 [ 26.200817] ? do_writev+0xfc/0x2a0 [ 26.204415] ? vfs_writev+0x340/0x340 [ 26.208185] ? mm_fault_error+0x2c0/0x2c0 [ 26.212305] ? move_addr_to_kernel+0x60/0x60 [ 26.216693] ? SyS_readv+0x30/0x30 [ 26.220201] SyS_writev+0x27/0x30 [ 26.223627] do_syscall_64+0x280/0x940 [ 26.227485] ? __do_page_fault+0xc90/0xc90 [ 26.231689] ? mmdrop+0x18/0x30 [ 26.234939] ? finish_task_switch+0x279/0x860 [ 26.239405] ? syscall_return_slowpath+0x550/0x550 [ 26.244302] ? syscall_return_slowpath+0x2ac/0x550 [ 26.249201] ? prepare_exit_to_usermode+0x350/0x350 [ 26.254190] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 26.259527] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 26.264341] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 26.269500] RIP: 0033:0x446bf0 [ 26.272658] RSP: 002b:00000000007efe08 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 26.280333] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 0000000000446bf0 [ 26.287574] RDX: 0000000000000001 RSI: 00000000007efe40 RDI: 0000000000000003 [ 26.294812] RBP: 0000000000000068 R08: 00000000000003f0 R09: 0000000120080522 [ 26.302052] R10: 0000000020000400 R11: 0000000000000246 R12: 0000000000000000 [ 26.309293] R13: 000000000000000a R14: 0000000000000000 R15: 0000000000000000 [ 26.316540] Code: 00 00 00 4c 01 e8 48 39 c3 74 34 e8 1a fa b7 fc 8b 8d a4 fe ff ff 48 8b b5 88 fe ff ff 4c 8d 3c ce 8d 41 01 4c 89 f9 48 c1 e9 03 <42> 80 3c 31 00 0f 85 00 01 00 00 4d 89 2f 89 85 a4 fe ff ff 49 [ 26.335605] RIP: arpt_do_table+0x11e1/0x16a0 RSP: ffff8801b1b46a10 [ 26.341924] ---[ end trace 1de82ab7a0eb7113 ]--- [ 26.346683] Kernel panic - not syncing: Fatal exception in interrupt [ 26.353557] Dumping ftrace buffer: [ 26.357072] (ftrace buffer empty) [ 26.360750] Kernel Offset: disabled [ 26.364345] Rebooting in 86400 seconds..