[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 52.111851] kauditd_printk_skb: 4 callbacks suppressed [ 52.111866] audit: type=1400 audit(1546149097.032:35): avc: denied { map } for pid=8602 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 52.158870] sshd (8600) used greatest stack depth: 15720 bytes left Warning: Permanently added '10.128.0.23' (ECDSA) to the list of known hosts. executing program [ 58.982673] audit: type=1400 audit(1546149103.902:36): avc: denied { map } for pid=8614 comm="syz-executor102" path="/root/syz-executor102011715" dev="sda1" ino=16484 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 59.013197] ------------[ cut here ]------------ [ 59.017944] kernel BUG at net/core/skbuff.c:1459! [ 59.023074] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 59.028445] CPU: 0 PID: 8616 Comm: syz-executor102 Not tainted 4.20.0+ #176 [ 59.035521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.045090] RIP: 0010:pskb_expand_head+0xc24/0x10d0 [ 59.050086] Code: 8b 85 20 fe ff ff 48 85 c0 0f 84 44 fe ff ff e8 72 11 67 fb 4d 8d 74 24 ff e9 35 fe ff ff e8 63 11 67 fb 0f 0b e8 5c 11 67 fb <0f> 0b e8 55 11 67 fb 31 f6 31 ff e8 1c 12 67 fb e9 6a fd ff ff 4c [ 59.068968] RSP: 0018:ffff8880920cf190 EFLAGS: 00010293 [ 59.074311] RAX: ffff8880902f06c0 RBX: ffff88809ce31b80 RCX: ffffffff861ad06a [ 59.081563] RDX: 0000000000000000 RSI: ffffffff861adae4 RDI: 0000000000000005 [ 59.088810] RBP: ffff8880920cf390 R08: ffff8880902f06c0 R09: ffffed10139c638a [ 59.096221] R10: ffffed10139c638a R11: ffff88809ce31c57 R12: ffff88809ce31c3c [ 59.103483] R13: 0000000000000002 R14: dffffc0000000000 R15: 0000000000000000 [ 59.110748] FS: 00007f8d9044f700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 59.118974] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.124835] CR2: 00007f8d9044ee78 CR3: 00000000a5c47000 CR4: 00000000001406f0 [ 59.132086] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 59.139335] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 59.146582] Call Trace: [ 59.149152] ? __switch_to_asm+0x34/0x70 [ 59.153195] ? __switch_to_asm+0x40/0x70 [ 59.157269] ? __switch_to_asm+0x34/0x70 [ 59.161315] ? __switch_to_asm+0x40/0x70 [ 59.165363] ? __lock_acquire+0x62f/0x4c20 [ 59.169583] ? __pskb_copy_fclone+0xe80/0xe80 [ 59.174062] ? graph_lock+0x270/0x270 [ 59.177846] ? graph_lock+0x270/0x270 [ 59.181627] ? mark_held_locks+0x130/0x130 [ 59.185888] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 59.191423] ? find_held_lock+0x36/0x1c0 [ 59.195464] __pskb_pull_tail+0x156/0x18a0 [ 59.199678] ? __might_fault+0x12b/0x1e0 [ 59.203723] ? skb_realloc_headroom+0x120/0x120 [ 59.208370] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 59.213805] ? __might_fault+0x1a3/0x1e0 [ 59.217846] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 59.223363] ? _copy_to_iter+0x3b8/0x1440 [ 59.227489] ? proto_seq_start+0x50/0x50 [ 59.231534] ip6_datagram_recv_specific_ctl+0x1953/0x1bf0 [ 59.237052] ? iov_iter_copy_from_user_atomic+0x1030/0x1030 [ 59.242767] ? ip6_datagram_recv_common_ctl+0x5c0/0x5c0 [ 59.248130] ? simple_copy_to_iter+0x35/0x40 [ 59.252522] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 59.258035] ? __skb_datagram_iter+0x1a7/0x7e0 [ 59.262598] ? rcu_pm_notify+0xc0/0xc0 [ 59.266465] ? skb_kill_datagram+0x120/0x120 [ 59.270856] ? skb_copy_datagram_iter+0x10d/0x4a0 [ 59.275679] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 59.281199] ? ip6_datagram_recv_common_ctl+0x35a/0x5c0 [ 59.286543] ? ipv6_recv_rxpmtu+0x920/0x920 [ 59.290846] ? __might_fault+0x12b/0x1e0 [ 59.294892] ? lock_downgrade+0x900/0x900 [ 59.299024] ip6_datagram_recv_ctl+0x33/0x40 [ 59.303424] rawv6_recvmsg+0xc4b/0xea0 [ 59.307298] ? rawv6_rcv_skb+0x480/0x480 [ 59.311358] sock_common_recvmsg+0x13a/0x2a0 [ 59.315752] ? compat_sock_common_getsockopt+0x150/0x150 [ 59.321193] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 59.326717] ? security_socket_recvmsg+0x9c/0xc0 [ 59.331458] ? compat_sock_common_getsockopt+0x150/0x150 [ 59.336894] sock_recvmsg+0xd0/0x110 [ 59.340588] ? __sock_recv_ts_and_drops+0x420/0x420 [ 59.345587] ___sys_recvmsg+0x2b6/0x680 [ 59.349547] ? ___sys_sendmsg+0x930/0x930 [ 59.353681] ? release_sock+0x1ec/0x2c0 [ 59.357641] ? __local_bh_enable_ip+0x160/0x260 [ 59.362296] ? __fget_light+0x2e9/0x430 [ 59.366274] ? fget_raw+0x20/0x20 [ 59.369723] ? __local_bh_enable_ip+0x160/0x260 [ 59.374383] ? ip6_datagram_connect+0x3a/0x50 [ 59.378863] ? ip6_datagram_connect_v6_only+0x71/0x90 [ 59.384069] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 59.389590] ? sockfd_lookup_light+0xc5/0x160 [ 59.394083] __sys_recvmsg+0x11a/0x280 [ 59.397968] ? __ia32_sys_sendmmsg+0x100/0x100 [ 59.402541] ? __x64_sys_futex+0x476/0x690 [ 59.406781] ? do_syscall_64+0x9a/0x820 [ 59.410743] ? do_syscall_64+0x9a/0x820 [ 59.414704] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 59.420150] ? trace_hardirqs_off+0xb8/0x310 [ 59.424543] __x64_sys_recvmsg+0x78/0xb0 [ 59.428592] do_syscall_64+0x1b9/0x820 [ 59.432468] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 59.437817] ? syscall_return_slowpath+0x5e0/0x5e0 [ 59.442737] ? trace_hardirqs_on_caller+0x310/0x310 [ 59.447754] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 59.452775] ? recalc_sigpending_tsk+0x180/0x180 [ 59.457515] ? __switch_to_asm+0x40/0x70 [ 59.461585] ? __switch_to_asm+0x34/0x70 [ 59.465632] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 59.470462] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 59.475743] RIP: 0033:0x4458d9 [ 59.478938] Code: e8 9c bb 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb 11 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 59.497825] RSP: 002b:00007f8d9044eda8 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 59.505519] RAX: ffffffffffffffda RBX: 00000000006dbc38 RCX: 00000000004458d9 [ 59.512769] RDX: 0000000000000002 RSI: 0000000020000140 RDI: 0000000000000004 [ 59.520019] RBP: 00000000006dbc30 R08: 0000000000000000 R09: 0000000000000000 [ 59.527275] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc3c [ 59.534524] R13: 0100000000000000 R14: 00007f8d9044f9c0 R15: 00000000006dbd2c [ 59.541777] Modules linked in: [ 59.545447] ---[ end trace a1ff1ede1cc60628 ]--- [ 59.550211] RIP: 0010:pskb_expand_head+0xc24/0x10d0 [ 59.555274] Code: 8b 85 20 fe ff ff 48 85 c0 0f 84 44 fe ff ff e8 72 11 67 fb 4d 8d 74 24 ff e9 35 fe ff ff e8 63 11 67 fb 0f 0b e8 5c 11 67 fb <0f> 0b e8 55 11 67 fb 31 f6 31 ff e8 1c 12 67 fb e9 6a fd ff ff 4c [ 59.574195] RSP: 0018:ffff8880920cf190 EFLAGS: 00010293 [ 59.579543] RAX: ffff8880902f06c0 RBX: ffff88809ce31b80 RCX: ffffffff861ad06a [ 59.587097] RDX: 0000000000000000 RSI: ffffffff861adae4 RDI: 0000000000000005 [ 59.594420] RBP: ffff8880920cf390 R08: ffff8880902f06c0 R09: ffffed10139c638a [ 59.601711] R10: ffffed10139c638a R11: ffff88809ce31c57 R12: ffff88809ce31c3c [ 59.608965] R13: 0000000000000002 R14: dffffc0000000000 R15: 0000000000000000 [ 59.616266] FS: 00007f8d9044f700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 59.624508] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.630372] CR2: 00007f8d9044ee78 CR3: 00000000a5c47000 CR4: 00000000001406f0 [ 59.637659] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 59.644942] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 59.652225] Kernel panic - not syncing: Fatal exception [ 59.658447] Kernel Offset: disabled [ 59.662064] Rebooting in 86400 seconds..