[....] Starting enhanced syslogd: rsyslogd[ 15.911875] audit: type=1400 audit(1520827017.950:5): avc: denied { syslog } for pid=4074 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 19.630309] audit: type=1400 audit(1520827021.669:6): avc: denied { map } for pid=4214 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.23' (ECDSA) to the list of known hosts. [ 42.013184] audit: type=1400 audit(1520827044.052:7): avc: denied { map } for pid=4231 comm="syzkaller760148" path="/root/syzkaller760148957" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 42.021922] IPVS: ftp: loaded support on port[0] = 21 net.ipv6.conf.syz_tun.accept_dad = 0 net.ipv6.conf.syz_tun.router_solicitations = 0 [ 42.039118] audit: type=1400 audit(1520827044.055:8): avc: denied { sys_admin } for pid=4231 comm="syzkaller760148" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 42.087062] audit: type=1400 audit(1520827044.125:9): avc: denied { net_admin } for pid=4232 comm="syzkaller760148" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 RTNETLINK answers: File exists RTNETLINK answers: Operation not supported RTNETLINK answers: No buffer space available RTNETLINK answers: Operation not supported [ 42.318459] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument [ 42.674097] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 42.680215] 8021q: adding VLAN 0 to HW filter on device bond0 executing program [ 42.717662] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 42.756574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.768472] audit: type=1400 audit(1520827044.807:10): avc: denied { sys_chroot } for pid=4232 comm="syzkaller760148" capability=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 42.809072] kasan: CONFIG_KASAN_INLINE enabled [ 42.813659] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 42.820992] general protection fault: 0000 [#1] SMP KASAN [ 42.826495] Dumping ftrace buffer: [ 42.830000] (ftrace buffer empty) [ 42.833679] Modules linked in: [ 42.836841] CPU: 1 PID: 4392 Comm: syzkaller760148 Not tainted 4.16.0-rc4+ #350 [ 42.844251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 42.853583] RIP: 0010:perf_trace_lock_acquire+0xc0/0x980 [ 42.859009] RSP: 0018:ffff8801ad5b7540 EFLAGS: 00010002 [ 42.864340] RAX: 0000000000000049 RBX: 1ffff10035ab6eb2 RCX: 0000000000000000 [ 42.871578] RDX: dffffc0000000000 RSI: 0000000000000230 RDI: ffffffff86f2c1e0 [ 42.878814] RBP: ffff8801ad5b7718 R08: 0000000000000000 R09: 0000000000000230 [ 42.886054] R10: dffffc0000000000 R11: ffffffff815613c0 R12: ffff8801ad5b76f0 [ 42.893293] R13: 0000000000000000 R14: ffffffff86f2c1e0 R15: 0000000000000001 [ 42.900534] FS: 00007f97606cf700(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 [ 42.908739] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.914587] CR2: 00007f97606cedb8 CR3: 00000001b121e002 CR4: 00000000001606e0 [ 42.921831] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 42.929069] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 42.936307] Call Trace: [ 42.938867] ? perf_trace_lock+0x900/0x900 [ 42.943069] ? __might_sleep+0x95/0x190 [ 42.947009] ? perf_trace_lock+0x900/0x900 [ 42.951213] ? ucma_destroy_id+0x269/0x4c0 [ 42.955416] ? trace_hardirqs_off+0x10/0x10 [ 42.959705] ? trace_hardirqs_off+0x10/0x10 [ 42.963996] ? perf_trace_lock_acquire+0xe3/0x980 [ 42.968805] ? __lock_acquire+0x664/0x3e00 [ 42.973010] lock_acquire+0x394/0x580 [ 42.976784] ? rdma_destroy_id+0xa9/0xda0 [ 42.980898] ? lock_release+0xa40/0xa40 [ 42.984840] ? lock_downgrade+0x980/0x980 [ 42.988956] ? lock_release+0xa40/0xa40 [ 42.992902] ? check_same_owner+0x320/0x320 [ 42.997192] ? do_raw_spin_trylock+0x190/0x190 [ 43.001745] _raw_spin_lock_irqsave+0x96/0xc0 [ 43.006210] ? rdma_destroy_id+0xa9/0xda0 [ 43.010327] rdma_destroy_id+0xa9/0xda0 [ 43.014271] ? trace_hardirqs_on+0xd/0x10 [ 43.018387] ? _raw_spin_unlock_irq+0x27/0x70 [ 43.022850] ? wait_for_completion+0xe0/0x770 [ 43.027313] ? cma_release_dev+0x350/0x350 [ 43.031516] ? wait_for_completion_interruptible+0x7e0/0x7e0 [ 43.037278] ? do_wait_intr_irq+0x3e0/0x3e0 [ 43.041567] ? do_raw_spin_trylock+0x190/0x190 [ 43.046117] ? _raw_spin_unlock_irqrestore+0x31/0xc0 [ 43.051187] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 43.056170] ? trace_hardirqs_on+0xd/0x10 [ 43.060290] ? complete+0x62/0x80 [ 43.063714] ucma_destroy_id+0x2e9/0x4c0 [ 43.067743] ? ucma_close+0x2f0/0x2f0 [ 43.071513] ? __might_sleep+0x95/0x190 [ 43.075457] ? kasan_check_write+0x14/0x20 [ 43.079661] ? _copy_from_user+0x99/0x110 [ 43.083786] ucma_write+0x2d6/0x3d0 [ 43.087382] ? ucma_close+0x2f0/0x2f0 [ 43.091153] ? ucma_resolve_route+0x1a0/0x1a0 [ 43.095619] ? ucma_resolve_route+0x1a0/0x1a0 [ 43.100080] __vfs_write+0xef/0x970 [ 43.103677] ? rcu_note_context_switch+0x710/0x710 [ 43.108575] ? kernel_read+0x120/0x120 [ 43.112431] ? __might_sleep+0x95/0x190 [ 43.116376] ? _cond_resched+0x14/0x30 [ 43.120234] ? __inode_security_revalidate+0xd9/0x130 [ 43.125390] ? avc_policy_seqno+0x9/0x20 [ 43.129419] ? selinux_file_permission+0x82/0x460 [ 43.134230] ? security_file_permission+0x89/0x1e0 [ 43.139126] ? rw_verify_area+0xe5/0x2b0 [ 43.143154] ? __fdget_raw+0x20/0x20 [ 43.146839] vfs_write+0x189/0x510 [ 43.150350] SyS_write+0xef/0x220 [ 43.153770] ? filp_open+0x70/0x70 [ 43.157277] ? SyS_read+0x220/0x220 [ 43.160879] ? do_syscall_64+0xb7/0x940 [ 43.164823] ? SyS_read+0x220/0x220 [ 43.168419] do_syscall_64+0x281/0x940 [ 43.172273] ? _raw_spin_unlock_irq+0x27/0x70 [ 43.176737] ? finish_task_switch+0x1c1/0x7e0 [ 43.181199] ? syscall_return_slowpath+0x550/0x550 [ 43.186095] ? syscall_return_slowpath+0x2ac/0x550 [ 43.190993] ? prepare_exit_to_usermode+0x350/0x350 [ 43.195977] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 43.201309] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 43.206118] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 43.211274] RIP: 0033:0x447f49 [ 43.214434] RSP: 002b:00007f97606cece8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 43.222112] RAX: ffffffffffffffda RBX: 00000000006f003c RCX: 0000000000447f49 [ 43.229352] RDX: 0000000000000314 RSI: 00000000200003c0 RDI: 0000000000000006 [ 43.236590] RBP: 00000000006f0038 R08: 0000000000000000 R09: 0000000000000000 [ 43.243829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.251067] R13: 00000000007ffd8f R14: 00007f97606cf9c0 R15: 0000000000000005 [ 43.258310] Code: c7 40 1c 00 f2 f2 f2 c7 40 20 f2 f2 f2 f2 c7 40 24 00 f2 f2 f2 c7 40 28 f3 f3 f3 f3 48 8d 46 18 48 89 85 70 fe ff ff 48 c1 e8 03 <80> 3c 10 00 0f 85 da 04 00 00 49 8b 79 18 48 85 ff 0f 84 62 04 [ 43.277348] RIP: perf_trace_lock_acquire+0xc0/0x980 RSP: ffff8801ad5b7540 [ 43.284243] ---[ end trace e76bd36afa9b3c46 ]--- [ 43.288967] Kernel panic - not syncing: Fatal exception [ 43.294643] Dumping ftrace buffer: [ 43.298150] (ftrace buffer empty) [ 43.301828] Kernel Offset: disabled [ 43.305423] Rebooting in 86400 seconds..