[....] Starting enhanced syslogd: rsyslogd[ 16.608500] audit: type=1400 audit(1520046501.448:5): avc: denied { syslog } for pid=4080 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 22.368725] audit: type=1400 audit(1520046507.208:6): avc: denied { map } for pid=4220 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.55' (ECDSA) to the list of known hosts. [ 28.669997] audit: type=1400 audit(1520046513.509:7): avc: denied { map } for pid=4234 comm="syzkaller937352" path="/root/syzkaller937352881" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 28.695949] audit: type=1400 audit(1520046513.519:8): avc: denied { sys_admin } for pid=4240 comm="syzkaller937352" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 28.696226] IPVS: ftp: loaded support on port[0] = 21 executing program [ 28.752297] IPVS: ftp: loaded support on port[0] = 21 [ 28.760548] audit: type=1400 audit(1520046513.600:9): avc: denied { sys_chroot } for pid=4244 comm="syzkaller937352" capability=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 28.770971] netlink: 'syzkaller937352': attribute type 15 has an invalid length. unlink(./0/file0/fb) failed (errno 1) executing program [ 28.785447] audit: type=1400 audit(1520046513.601:10): avc: denied { net_admin } for pid=4244 comm="syzkaller937352" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 28.814208] IPVS: ftp: loaded support on port[0] = 21 [ 28.823273] audit: type=1400 audit(1520046513.662:11): avc: denied { dac_override } for pid=4244 comm="syzkaller937352" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 unlink(./0/file0/fb) failed (errno 1) executing program unlink(./0/file0/fb) failed (errno 1) executing program [ 28.860732] IPVS: ftp: loaded support on port[0] = 21 [ 28.863870] netlink: 'syzkaller937352': attribute type 15 has an invalid length. [ 28.887653] netlink: 'syzkaller937352': attribute type 15 has an invalid length. [ 28.900522] IPVS: ftp: loaded support on port[0] = 21 unlink(./0/file0/fb) failed (errno 1) executing program unlink(./0/file0/fb) failed (errno 1) [ 28.923224] netlink: 'syzkaller937352': attribute type 15 has an invalid length. [ 28.938766] IPVS: ftp: loaded support on port[0] = 21 [ 28.955926] netlink: 'syzkaller937352': attribute type 15 has an invalid length. executing program unlink(./0/file0/fb) failed (errno 1) executing program [ 28.977560] IPVS: ftp: loaded support on port[0] = 21 [ 28.995584] netlink: 'syzkaller937352': attribute type 15 has an invalid length. [ 29.016221] IPVS: ftp: loaded support on port[0] = 21 unlink(./0/file0/fb) failed (errno 1) executing program unlink(./0/file0/fb) failed (errno 1) [ 29.032927] netlink: 'syzkaller937352': attribute type 15 has an invalid length. [ 29.062389] netlink: 'syzkaller937352': attribute type 15 has an invalid length. [ 29.822566] IPVS: ftp: loaded support on port[0] = 21 executing program unlink(./0/file0/fb) failed (errno 1) executing program [ 29.848639] IPVS: ftp: loaded support on port[0] = 21 [ 29.864720] netlink: 'syzkaller937352': attribute type 15 has an invalid length. [ 29.884263] IPVS: ftp: loaded support on port[0] = 21 unlink(./0/file0/fb) failed (errno 1) executing program unlink(./0/file0/fb) failed (errno 1) [ 29.910537] netlink: 'syzkaller937352': attribute type 15 has an invalid length. [ 29.920475] IPVS: ftp: loaded support on port[0] = 21 executing program unlink(./0/file0/fb) failed (errno 1) [ 29.956363] IPVS: ftp: loaded support on port[0] = 21 executing program unlink(./0/file0/fb) failed (errno 1) [ 29.994382] IPVS: ftp: loaded support on port[0] = 21 executing program unlink(./0/file0/fb) failed (errno 1) [ 30.024295] IPVS: ftp: loaded support on port[0] = 21 executing program unlink(./0/file0/fb) failed (errno 1) [ 30.059855] IPVS: ftp: loaded support on port[0] = 21 executing program unlink(./0/file0/fb) failed (errno 1) [ 31.552512] IPVS: ftp: loaded support on port[0] = 21 executing program unlink(./0/file0/fb) failed (errno 1) [ 31.577837] IPVS: ftp: loaded support on port[0] = 21 executing program unlink(./0/file0/fb) failed (errno 1) [ 31.610693] IPVS: ftp: loaded support on port[0] = 21 executing program unlink(./0/file0/fb) failed (errno 1) [ 31.644758] IPVS: ftp: loaded support on port[0] = 21 executing program unlink(./0/file0/fb) failed (errno 1) [ 31.679896] IPVS: ftp: loaded support on port[0] = 21 executing program unlink(./0/file0/fb) failed (errno 1) [ 31.714590] IPVS: ftp: loaded support on port[0] = 21 executing program unlink(./0/file0/fb) failed (errno 1) [ 31.751316] IPVS: ftp: loaded support on port[0] = 21 executing program unlink(./0/file0/fb) failed (errno 1) executing program [ 31.789631] IPVS: ftp: loaded support on port[0] = 21 unlink(./0/file0/fb) failed (errno 1) [ 33.360105] kasan: CONFIG_KASAN_INLINE enabled [ 33.367327] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 33.374679] general protection fault: 0000 [#1] SMP KASAN [ 33.380187] Dumping ftrace buffer: [ 33.383696] (ftrace buffer empty) [ 33.387375] Modules linked in: [ 33.390540] CPU: 0 PID: 456 Comm: kworker/u4:4 Not tainted 4.16.0-rc3+ #337 [ 33.397607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 33.406948] Workqueue: netns cleanup_net [ 33.410983] RIP: 0010:get_work_pool+0x147/0x1e0 [ 33.415618] RSP: 0018:ffff8801d8ae6e88 EFLAGS: 00010006 [ 33.420949] RAX: dffffc0000000000 RBX: 0000001ffffffe00 RCX: ffffffff8147db16 [ 33.428199] RDX: 00000003ffffffc0 RSI: ffffffff86f42900 RDI: ffffffff86ec9820 [ 33.435438] RBP: ffff8801d8ae6f08 R08: 1ffff1003b15ce12 R09: 0000000000000000 [ 33.442678] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff1003b15cdd1 [ 33.449930] R13: 1ffff1003b15cdd5 R14: ffff8801d8ae6ee8 R15: dffffc0000000000 [ 33.457170] FS: 0000000000000000(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 [ 33.465366] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.471217] CR2: 00007ffcf03439bc CR3: 0000000006e22004 CR4: 00000000001606f0 [ 33.478459] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.485697] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.492937] Call Trace: [ 33.495498] ? destroy_delayed_work_on_stack+0x30/0x30 [ 33.500755] ? __might_sleep+0x95/0x190 [ 33.504703] flush_work+0xfc/0x8f0 [ 33.508217] ? wq_pool_ids_show+0x290/0x290 [ 33.512509] ? ret_from_fork+0x3a/0x50 [ 33.516370] ? save_stack+0xa3/0xd0 [ 33.519967] ? save_stack+0x43/0xd0 [ 33.523828] ? __kasan_slab_free+0x11a/0x170 [ 33.528206] ? kasan_slab_free+0xe/0x10 [ 33.532151] ? kfree+0xd9/0x260 [ 33.535399] ? xfrm_sysctl_fini+0x63/0x80 [ 33.539525] ? xfrm_net_exit+0x15/0x70 [ 33.543385] ? ops_exit_list.isra.6+0xae/0x150 [ 33.547935] ? cleanup_net+0x6a1/0xcb0 [ 33.551792] ? process_one_work+0xc47/0x1bb0 [ 33.556170] ? worker_thread+0x223/0x1990 [ 33.560286] ? kthread+0x33c/0x400 [ 33.563794] ? ret_from_fork+0x3a/0x50 [ 33.567654] ? debug_check_no_obj_freed+0x3da/0xf1f [ 33.572640] ? find_held_lock+0x35/0x1d0 [ 33.576675] xfrm_policy_fini+0xb1/0x560 [ 33.580706] ? free_obj_work+0x690/0x690 [ 33.584738] ? lock_release+0xa40/0xa40 [ 33.588685] ? xfrm_policy_flush+0x750/0x750 [ 33.593068] ? check_same_owner+0x320/0x320 [ 33.597365] ? mark_held_locks+0xaf/0x100 [ 33.601483] ? kfree+0xf3/0x260 [ 33.604733] ? xfrm_sysctl_fini+0x63/0x80 [ 33.608860] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 33.613846] ? trace_hardirqs_on+0xd/0x10 [ 33.617966] ? xfrm_policy_fini+0x560/0x560 [ 33.622257] xfrm_net_exit+0x1d/0x70 [ 33.625944] ops_exit_list.isra.6+0xae/0x150 [ 33.630328] cleanup_net+0x6a1/0xcb0 [ 33.634018] ? find_held_lock+0x35/0x1d0 [ 33.638058] ? unregister_pernet_device+0x80/0x80 [ 33.642880] ? debug_object_deactivate+0x364/0x560 [ 33.647786] ? lock_downgrade+0x980/0x980 [ 33.651903] ? flush_delayed_work+0x150/0x150 [ 33.656377] ? lock_release+0xa40/0xa40 [ 33.660325] ? find_held_lock+0x35/0x1d0 [ 33.664357] ? trace_hardirqs_off+0x10/0x10 [ 33.668664] ? lock_acquire+0x1d5/0x580 [ 33.672610] ? process_one_work+0xb89/0x1bb0 [ 33.677002] ? __lock_is_held+0xb6/0x140 [ 33.681046] process_one_work+0xc47/0x1bb0 [ 33.685251] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 33.690409] ? trace_hardirqs_on+0xd/0x10 [ 33.694539] ? pwq_dec_nr_in_flight+0x450/0x450 [ 33.699187] ? __schedule+0x903/0x1ec0 [ 33.703052] ? __lock_acquire+0x664/0x3e00 [ 33.707258] ? __lock_is_held+0xb6/0x140 [ 33.711290] ? trace_hardirqs_off+0x10/0x10 [ 33.715592] ? trace_hardirqs_off+0x10/0x10 [ 33.719891] ? lock_acquire+0x1d5/0x580 [ 33.723835] ? lock_acquire+0x1d5/0x580 [ 33.727780] ? worker_thread+0x4a3/0x1990 [ 33.731900] ? lock_downgrade+0x980/0x980 [ 33.736025] ? lock_release+0xa40/0xa40 [ 33.739971] ? pr_cont_work+0x130/0x130 [ 33.743916] ? do_raw_spin_trylock+0x190/0x190 [ 33.748482] worker_thread+0x223/0x1990 [ 33.752426] ? lock_release+0xa40/0xa40 [ 33.756368] ? lock_downgrade+0x980/0x980 [ 33.760492] ? process_one_work+0x1bb0/0x1bb0 [ 33.764960] ? put_task_stack+0x116/0x270 [ 33.769079] ? finish_task_switch+0x539/0x7e0 [ 33.773547] ? copy_overflow+0x20/0x20 [ 33.777416] ? __schedule+0x903/0x1ec0 [ 33.781289] ? trace_hardirqs_off+0x10/0x10 [ 33.785584] ? find_held_lock+0x35/0x1d0 [ 33.789641] ? find_held_lock+0x35/0x1d0 [ 33.793676] ? complete+0x62/0x80 [ 33.797204] ? __schedule+0x1ec0/0x1ec0 [ 33.801153] ? do_wait_intr_irq+0x3e0/0x3e0 [ 33.805444] ? __lockdep_init_map+0xe4/0x650 [ 33.809823] ? do_raw_spin_trylock+0x190/0x190 [ 33.814372] ? lockdep_init_map+0x9/0x10 [ 33.818405] ? _raw_spin_unlock_irqrestore+0x31/0xc0 [ 33.823479] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 33.828463] ? trace_hardirqs_on+0xd/0x10 [ 33.832582] ? __kthread_parkme+0x175/0x240 [ 33.836876] kthread+0x33c/0x400 [ 33.840218] ? process_one_work+0x1bb0/0x1bb0 [ 33.844682] ? kthread_stop+0x7a0/0x7a0 [ 33.848628] ret_from_fork+0x3a/0x50 [ 33.852320] Code: 00 48 83 c4 60 5b 41 5c 41 5d 41 5e 5d c3 48 81 e3 00 fe ff ff e8 2a 19 29 00 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 75 7f 48 8b 1b eb a8 e8 09 19 29 00 e8 f4 53 15 00 [ 33.871388] RIP: get_work_pool+0x147/0x1e0 RSP: ffff8801d8ae6e88 [ 33.877506] ---[ end trace ac759106a81dd957 ]--- [ 33.882229] Kernel panic - not syncing: Fatal exception [ 33.888021] Dumping ftrace buffer: [ 33.891532] (ftrace buffer empty) [ 33.895212] Kernel Offset: disabled [ 33.898808] Rebooting in 86400 seconds..