[....] Starting enhanced syslogd: rsyslogd[ 16.164258] audit: type=1400 audit(1519254999.668:5): avc: denied { syslog } for pid=4013 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 22.606154] audit: type=1400 audit(1519255006.109:6): avc: denied { map } for pid=4153 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.15.201' (ECDSA) to the list of known hosts. [ 29.117235] audit: type=1400 audit(1519255012.620:7): avc: denied { map } for pid=4167 comm="syzkaller711255" path="/root/syzkaller711255726" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 29.128418] IPVS: ftp: loaded support on port[0] = 21 net.ipv6.conf.syz0.accept_dad = 0 net.ipv6.conf.syz0.router_solicitations = 0 [ 29.143256] audit: type=1400 audit(1519255012.621:8): avc: denied { sys_admin } for pid=4167 comm="syzkaller711255" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 29.175957] audit: type=1400 audit(1519255012.679:9): avc: denied { net_admin } for pid=4168 comm="syzkaller711255" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 RTNETLINK answers: Operation not supported RTNETLINK answers: No buffer space available RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported [ 29.365986] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument executing program [ 29.682352] audit: type=1400 audit(1519255013.186:10): avc: denied { sys_chroot } for pid=4168 comm="syzkaller711255" capability=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 29.684785] kasan: CONFIG_KASAN_INLINE enabled [ 29.706989] audit: type=1400 audit(1519255013.186:11): avc: denied { net_raw } for pid=4168 comm="syzkaller711255" capability=13 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 29.711586] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 29.711598] general protection fault: 0000 [#1] SMP KASAN [ 29.748678] Dumping ftrace buffer: [ 29.752186] (ftrace buffer empty) [ 29.755864] Modules linked in: [ 29.759033] CPU: 1 PID: 4168 Comm: syzkaller711255 Not tainted 4.16.0-rc2+ #323 [ 29.766455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 29.775783] RIP: 0010:arpt_do_table+0x11e1/0x16a0 [ 29.780590] RSP: 0018:ffff8801b1a0ea10 EFLAGS: 00010246 [ 29.785921] RAX: 0000000000000001 RBX: ffff8801afc32250 RCX: 0000000000000000 [ 29.793159] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8801afc32126 [ 29.800399] RBP: ffff8801b1a0ebb0 R08: 0000000000000001 R09: 0000000000000002 [ 29.807639] R10: ffff8801b1a0eb08 R11: 0000000000000000 R12: ffff8801b0c3004e [ 29.814877] R13: ffff8801afc32080 R14: dffffc0000000000 R15: 0000000000000000 [ 29.822115] FS: 0000000001fda880(0000) GS:ffff8801db500000(0000) knlGS:0000000000000000 [ 29.830320] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.836180] CR2: 0000000020000400 CR3: 00000001b1964001 CR4: 00000000001606e0 [ 29.843422] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.850663] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 29.857902] Call Trace: [ 29.860470] ? do_add_counters+0x560/0x560 [ 29.864676] ? check_noncircular+0x20/0x20 [ 29.868884] ? lock_acquire+0x1d5/0x580 [ 29.872828] ? lock_acquire+0x1d5/0x580 [ 29.876773] ? arp_rcv+0x546/0x9d0 [ 29.880284] ? find_held_lock+0x35/0x1d0 [ 29.884315] ? lock_release+0xa40/0xa40 [ 29.888260] arptable_filter_hook+0x65/0x80 [ 29.892553] nf_hook_slow+0xba/0x1a0 [ 29.896238] arp_rcv+0x787/0x9d0 [ 29.899573] ? check_noncircular+0x20/0x20 [ 29.903780] ? parp_redo+0x80/0x80 [ 29.907291] ? lock_release+0xa40/0xa40 [ 29.911234] ? is_bpf_text_address+0xa4/0x120 [ 29.915701] ? arp_solicit+0x1320/0x1320 [ 29.919730] ? parp_redo+0x80/0x80 [ 29.923242] __netif_receive_skb_core+0x1a41/0x3460 [ 29.928233] ? nf_ingress+0x9f0/0x9f0 [ 29.932005] ? tun_build_skb.isra.50+0x9cb/0x1850 [ 29.936817] ? tun_chr_write_iter+0xbd/0x1c0 [ 29.941193] ? do_iter_readv_writev+0x55c/0x830 [ 29.945830] ? do_iter_write+0x154/0x540 [ 29.949859] ? __skb_flow_dissect+0x4ce/0x3f00 [ 29.954408] ? SyS_writev+0x27/0x30 [ 29.958007] ? do_syscall_64+0x280/0x940 [ 29.962051] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 29.967219] ? __skb_flow_get_ports+0x420/0x420 [ 29.971862] ? __skb_flow_get_ports+0x420/0x420 [ 29.976498] ? check_noncircular+0x20/0x20 [ 29.980703] ? __lock_is_held+0xb6/0x140 [ 29.984739] ? print_irqtrace_events+0x270/0x270 [ 29.989472] ? find_held_lock+0x35/0x1d0 [ 29.993508] ? netif_receive_skb_internal+0x1d7/0x670 [ 29.998668] ? lock_downgrade+0x980/0x980 [ 30.002792] ? pvclock_read_flags+0x160/0x160 [ 30.007261] ? lock_acquire+0x1d5/0x580 [ 30.011205] ? lock_acquire+0x1d5/0x580 [ 30.015146] ? netif_receive_skb_internal+0xa2/0x670 [ 30.020219] ? ktime_get_with_offset+0x2c1/0x420 [ 30.024949] ? lock_release+0xa40/0xa40 [ 30.028890] ? do_gettimeofday+0x190/0x190 [ 30.033095] ? tun_build_skb.isra.50+0x397/0x1850 [ 30.037909] __netif_receive_skb+0x2c/0x1b0 [ 30.042199] ? __netif_receive_skb+0x2c/0x1b0 [ 30.046663] netif_receive_skb_internal+0x10b/0x670 [ 30.051652] ? dev_cpu_dead+0xb00/0xb00 [ 30.055602] ? check_noncircular+0x20/0x20 [ 30.059815] ? rcu_pm_notify+0xc0/0xc0 [ 30.063692] netif_receive_skb+0xae/0x390 [ 30.067815] ? netif_receive_skb_internal+0x670/0x670 [ 30.072988] ? find_held_lock+0x35/0x1d0 [ 30.077030] ? tun_rx_batched.isra.52+0x5c4/0x870 [ 30.081845] tun_rx_batched.isra.52+0x5ee/0x870 [ 30.086483] ? tun_sock_write_space+0x370/0x370 [ 30.091127] tun_get_user+0x25a5/0x3810 [ 30.095072] ? trace_hardirqs_off+0xd/0x10 [ 30.099279] ? _raw_spin_unlock_irqrestore+0xa6/0xba [ 30.104358] ? tun_build_skb.isra.50+0x1850/0x1850 [ 30.109258] ? do_syscall_64+0x280/0x940 [ 30.113288] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 30.118636] ? tun_get+0x1ab/0x2e0 [ 30.122148] ? lock_release+0xa40/0xa40 [ 30.126091] ? __lock_is_held+0xb6/0x140 [ 30.130127] ? tun_get+0x1d4/0x2e0 [ 30.133635] ? tun_do_read+0x26c0/0x26c0 [ 30.137665] ? __check_object_size+0x8b/0x530 [ 30.142129] ? rcu_note_context_switch+0x710/0x710 [ 30.147041] tun_chr_write_iter+0xbd/0x1c0 [ 30.151247] do_iter_readv_writev+0x55c/0x830 [ 30.155712] ? vfs_dedupe_file_range+0x8f0/0x8f0 [ 30.160441] ? rw_verify_area+0xe5/0x2b0 [ 30.164475] do_iter_write+0x154/0x540 [ 30.168331] ? dup_iter+0x260/0x260 [ 30.171929] ? module_unload_free+0x5b0/0x5b0 [ 30.176400] vfs_writev+0x18a/0x340 [ 30.180002] ? vfs_iter_write+0xb0/0xb0 [ 30.183960] ? nf_setsockopt+0x93/0xc0 [ 30.187820] ? __fdget_pos+0x130/0x190 [ 30.191676] ? __fdget_raw+0x20/0x20 [ 30.195364] ? sock_common_setsockopt+0x95/0xd0 [ 30.200004] do_writev+0xfc/0x2a0 [ 30.203430] ? do_writev+0xfc/0x2a0 [ 30.207033] ? vfs_writev+0x340/0x340 [ 30.210805] ? mm_fault_error+0x2c0/0x2c0 [ 30.214924] ? move_addr_to_kernel+0x60/0x60 [ 30.219301] ? SyS_readv+0x30/0x30 [ 30.222810] SyS_writev+0x27/0x30 [ 30.226236] do_syscall_64+0x280/0x940 [ 30.230093] ? __do_page_fault+0xc90/0xc90 [ 30.234296] ? mmdrop+0x18/0x30 [ 30.237550] ? finish_task_switch+0x279/0x860 [ 30.242023] ? syscall_return_slowpath+0x550/0x550 [ 30.246935] ? syscall_return_slowpath+0x2ac/0x550 [ 30.251845] ? prepare_exit_to_usermode+0x350/0x350 [ 30.256837] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 30.262519] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 30.267600] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 30.272757] RIP: 0033:0x446bf0 [ 30.275917] RSP: 002b:00000000007efe08 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 30.283592] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 0000000000446bf0 [ 30.290833] RDX: 0000000000000001 RSI: 00000000007efe40 RDI: 0000000000000003 [ 30.298072] RBP: 0000000000000068 R08: 00000000000003f0 R09: 0000000120080522 [ 30.305310] R10: 0000000020000400 R11: 0000000000000246 R12: 0000000000000000 [ 30.312549] R13: 000000000000000a R14: 0000000000000000 R15: 0000000000000000 [ 30.319802] Code: 00 00 00 4c 01 e8 48 39 c3 74 34 e8 7a f2 b7 fc 8b 8d a4 fe ff ff 48 8b b5 88 fe ff ff 4c 8d 3c ce 8d 41 01 4c 89 f9 48 c1 e9 03 <42> 80 3c 31 00 0f 85 00 01 00 00 4d 89 2f 89 85 a4 fe ff ff 49 [ 30.338891] RIP: arpt_do_table+0x11e1/0x16a0 RSP: ffff8801b1a0ea10 [ 30.345219] ---[ end trace 7546a75a4c50f196 ]--- [ 30.349970] Kernel panic - not syncing: Fatal exception in interrupt [ 30.356838] Dumping ftrace buffer: [ 30.360354] (ftrace buffer empty) [ 30.364040] Kernel Offset: disabled [ 30.367637] Rebooting in 86400 seconds..