[....] Starting enhanced syslogd: rsyslogd[ 11.691493] audit: type=1400 audit(1513978108.513:5): avc: denied { syslog } for pid=2998 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 17.336283] audit: type=1400 audit(1513978114.158:6): avc: denied { map } for pid=3137 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added 'ci-upstream-kasan-gce-386-1,10.128.0.54' (ECDSA) to the list of known hosts. net.ipv6.conf.syz0.accept_dad = 0 net.ipv6.conf.syz0.router_solicitations = 0 [ 34.525080] audit: type=1400 audit(1513978131.346:7): avc: denied { map } for pid=3155 comm="syzkaller889511" path="/root/syzkaller889511882" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 executing program [ 34.607694] ------------[ cut here ]------------ [ 34.612487] kernel BUG at ./include/linux/skbuff.h:2068! [ 34.618155] invalid opcode: 0000 [#1] SMP KASAN [ 34.622796] Dumping ftrace buffer: [ 34.626303] (ftrace buffer empty) [ 34.629983] Modules linked in: [ 34.633150] CPU: 0 PID: 3155 Comm: syzkaller889511 Not tainted 4.15.0-rc4+ #144 [ 34.640578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 34.649911] RIP: 0010:skb_pull+0xd5/0xf0 [ 34.653934] RSP: 0018:ffff8801d14a70e0 EFLAGS: 00010293 [ 34.659262] RAX: ffff8801c764e500 RBX: ffff8801c9bb9480 RCX: ffffffff841bb0b5 [ 34.666500] RDX: 0000000000000000 RSI: 0000000000000028 RDI: ffff8801c9bb94fc [ 34.673738] RBP: ffff8801d14a70f8 R08: 1ffff1003a294d85 R09: 0000000000000002 [ 34.680976] R10: ffff8801d14a70e8 R11: 0000000000000000 R12: 0000000000000028 [ 34.688216] R13: 0000000000000010 R14: dffffc0000000000 R15: 0000000000000000 [ 34.695456] FS: 0000000000000000(0000) GS:ffff8801db400000(0063) knlGS:00000000082ca840 [ 34.703648] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 34.709494] CR2: 000000002084c000 CR3: 00000001cffef006 CR4: 00000000001606f0 [ 34.716735] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.723973] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.731215] Call Trace: [ 34.733778] esp6_gro_receive+0xb4/0xbe0 [ 34.737816] ? esp6_output+0xf20/0xf20 [ 34.741674] ? __lock_is_held+0xb6/0x140 [ 34.745705] ? esp6_output+0xf20/0xf20 [ 34.749573] ipv6_gro_receive+0x83e/0x13c0 [ 34.753780] ? ipv6_gso_pull_exthdrs+0x580/0x580 [ 34.758517] ? rcutorture_record_progress+0x10/0x10 [ 34.763506] ? check_noncircular+0x20/0x20 [ 34.767708] ? check_noncircular+0x20/0x20 [ 34.771920] dev_gro_receive+0xd2c/0x2120 [ 34.776039] ? memcpy+0x45/0x50 [ 34.779308] ? net_rx_action+0x1910/0x1910 [ 34.783510] ? __lock_is_held+0xb6/0x140 [ 34.787545] napi_gro_frags+0x377/0xad0 [ 34.791489] ? napi_gro_receive+0x500/0x500 [ 34.795786] ? tun_get_user+0x25cc/0x36d0 [ 34.799913] tun_get_user+0x25f5/0x36d0 [ 34.803867] ? tun_build_skb.isra.48+0x17d0/0x17d0 [ 34.808772] ? _cond_resched+0x14/0x30 [ 34.812640] ? clear_huge_page+0x309/0x730 [ 34.816854] ? _raw_spin_unlock+0x22/0x30 [ 34.820978] ? do_huge_pmd_anonymous_page+0xb21/0x1b00 [ 34.826234] ? tun_get+0x1ab/0x2e0 [ 34.829743] ? perf_event_fork+0x30/0x30 [ 34.833780] ? lock_release+0xa40/0xa40 [ 34.837728] ? __lock_is_held+0xb6/0x140 [ 34.841762] ? tun_get+0x1d4/0x2e0 [ 34.845290] ? tun_chr_close+0x60/0x60 [ 34.849406] ? rcu_note_context_switch+0x710/0x710 [ 34.854309] ? vma_link+0xe9/0x170 [ 34.857817] tun_chr_write_iter+0xb9/0x160 [ 34.862022] do_iter_readv_writev+0x525/0x7f0 [ 34.866486] ? vfs_dedupe_file_range+0x8f0/0x8f0 [ 34.871211] ? rw_verify_area+0xe5/0x2b0 [ 34.875242] do_iter_write+0x154/0x540 [ 34.879109] ? iov_iter_get_pages+0x1150/0x1150 [ 34.883768] compat_writev+0x225/0x420 [ 34.887627] ? __fget_light+0x297/0x380 [ 34.891569] ? do_pwritev+0x1a0/0x1a0 [ 34.895343] ? find_held_lock+0x35/0x1d0 [ 34.899387] ? __do_page_fault+0x5f7/0xc90 [ 34.903599] ? __fdget_pos+0x130/0x190 [ 34.907458] ? __fdget_raw+0x20/0x20 [ 34.911136] ? down_read_trylock+0xdb/0x170 [ 34.915421] ? __do_page_fault+0x32d/0xc90 [ 34.919626] ? __handle_mm_fault+0x3ce0/0x3ce0 [ 34.924177] do_compat_writev+0x115/0x220 [ 34.928294] ? do_compat_writev+0x115/0x220 [ 34.932582] ? compat_writev+0x420/0x420 [ 34.936619] compat_SyS_writev+0x26/0x30 [ 34.940647] ? compat_SyS_preadv2+0x90/0x90 [ 34.944938] do_fast_syscall_32+0x3ee/0xf9d [ 34.949238] ? do_int80_syscall_32+0x9d0/0x9d0 [ 34.953787] ? kasan_check_read+0x11/0x20 [ 34.957902] ? syscall_return_slowpath+0x550/0x550 [ 34.962801] ? SyS_rt_sigaction+0x94/0x1b0 [ 34.967002] ? SyS_sigprocmask+0x4b0/0x4b0 [ 34.971204] ? SyS_read+0x184/0x220 [ 34.974799] ? retint_user+0x18/0x18 [ 34.978483] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 34.983296] entry_SYSENTER_compat+0x54/0x63 [ 34.987670] RIP: 0023:0xf7fc7c79 [ 34.991002] RSP: 002b:00000000ff92d088 EFLAGS: 00000246 ORIG_RAX: 0000000000000092 [ 34.998687] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000ff92d0c4 [ 35.005928] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 0000000000000004 [ 35.013174] RBP: 0000000020000000 R08: 0000000000000000 R09: 0000000000000000 [ 35.020414] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 35.027655] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 35.034909] Code: a3 d0 00 00 00 e8 fc 38 54 fd 4c 89 e0 5b 41 5c 41 5d 5d c3 45 31 e4 e8 ea 38 54 fd 4c 89 e0 5b 41 5c 41 5d 5d c3 e8 db 38 54 fd <0f> 0b e8 d4 af 8a fd eb 9a e8 cd af 8a fd e9 51 ff ff ff e8 e3 [ 35.053983] RIP: skb_pull+0xd5/0xf0 RSP: ffff8801d14a70e0 [ 35.059529] ---[ end trace 010623435cfe4db0 ]--- [ 35.064262] Kernel panic - not syncing: Fatal exception in interrupt [ 35.071106] Dumping ftrace buffer: [ 35.074618] (ftrace buffer empty) [ 35.078308] Kernel Offset: disabled [ 35.081903] Rebooting in 86400 seconds..