[....] Starting enhanced syslogd: rsyslogd[ 12.534089] audit: type=1400 audit(1515907651.700:4): avc: denied { syslog } for pid=3159 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.15.209' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 44.660375] kasan: CONFIG_KASAN_INLINE enabled [ 44.664960] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 44.672652] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 44.678852] Dumping ftrace buffer: [ 44.682357] (ftrace buffer empty) [ 44.686032] Modules linked in: [ 44.689305] CPU: 1 PID: 3339 Comm: syzkaller794906 Not tainted 4.9.76-g8e170a5 #11 [ 44.696972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 44.706292] task: ffff8801ca043000 task.stack: ffff8801c8120000 [ 44.712312] RIP: 0010:[] [] __free_pages+0x21/0x80 [ 44.720536] RSP: 0018:ffff8801c81279b0 EFLAGS: 00010a07 [ 44.725948] RAX: dffffc0000000000 RBX: dead4ead00000000 RCX: ffffffff8266640b [ 44.733185] RDX: 1bd5a9d5a0000003 RSI: 0000000000000001 RDI: dead4ead0000001c [ 44.740418] RBP: ffff8801c81279c0 R08: 0000000000000001 R09: 0000000000000000 [ 44.747650] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000004 [ 44.754884] R13: 0000000000000020 R14: ffff8801cb514200 R15: dffffc0000000000 [ 44.762118] FS: 0000000001223880(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 [ 44.770307] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.776151] CR2: 0000000020ef0fe0 CR3: 00000001c9356000 CR4: 0000000000160670 [ 44.783387] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 44.790621] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 44.797852] Stack: [ 44.799965] ffff8801ca043000 ffff8801cb514358 ffff8801c8127a20 ffffffff82666431 [ 44.807917] ffff8801cb514370 ffffed00396a286b ffffed00396a286e ffff8801cb514368 [ 44.815862] dead4ead00000000 ffff8801cb514340 0000000000000000 0000000000000000 [ 44.823808] Call Trace: [ 44.826360] [] sg_remove_scat.isra.19+0x1c1/0x2d0 [ 44.832818] [] sg_finish_rem_req+0x2b5/0x340 [ 44.838839] [] sg_new_read.isra.20+0x39/0x3e0 [ 44.844945] [] ? sg_get_rq_mark+0x142/0x190 [ 44.850878] [] sg_read+0x8bd/0x1440 [ 44.856203] [] ? sg_proc_seq_show_debug+0xd10/0xd10 [ 44.862831] [] ? fsnotify+0xf30/0xf30 [ 44.868244] [] ? avc_policy_seqno+0x9/0x20 [ 44.874092] [] do_loop_readv_writev.part.17+0x141/0x1e0 [ 44.881070] [] ? security_file_permission+0x89/0x1e0 [ 44.887785] [] ? sg_proc_seq_show_debug+0xd10/0xd10 [ 44.894415] [] ? sg_proc_seq_show_debug+0xd10/0xd10 [ 44.901043] [] do_readv_writev+0x520/0x750 [ 44.906892] [] ? vfs_write+0x530/0x530 [ 44.912397] [] ? _raw_spin_unlock+0x2c/0x50 [ 44.918333] [] ? __pmd_alloc+0x410/0x410 [ 44.924012] [] ? __do_page_fault+0x5ec/0xd40 [ 44.930034] [] vfs_readv+0x84/0xc0 [ 44.935185] [] do_readv+0xe6/0x250 [ 44.940336] [] ? vfs_readv+0xc0/0xc0 [ 44.945661] [] ? entry_SYSCALL_64_fastpath+0x5/0xe2 [ 44.952292] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 44.959095] [] SyS_readv+0x27/0x30 [ 44.964249] [] entry_SYSCALL_64_fastpath+0x23/0xe2 [ 44.970789] Code: e9 27 fc ff ff 0f 1f 44 00 00 48 b8 00 00 00 00 00 fc ff df 55 48 89 e5 53 48 89 fb 48 83 c7 1c 48 89 fa 48 83 ec 08 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 3d [ 44.997010] RIP [] __free_pages+0x21/0x80 [ 45.002884] RSP [ 45.006765] ---[ end trace dc5376b80189f2a1 ]--- [ 45.011499] Kernel panic - not syncing: Fatal exception [ 45.017145] Dumping ftrace buffer: [ 45.020656] (ftrace buffer empty) [ 45.024333] Kernel Offset: disabled [ 45.027924] Rebooting in 86400 seconds..