[....] Starting enhanced syslogd: rsyslogd[ 12.635472] audit: type=1400 audit(1516268928.211:5): avc: denied { syslog } for pid=3501 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 18.887249] audit: type=1400 audit(1516268934.462:6): avc: denied { map } for pid=3642 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.23' (ECDSA) to the list of known hosts. executing program executing program executing program [ 55.042150] audit: type=1400 audit(1516268970.617:7): avc: denied { map } for pid=3659 comm="syzkaller073310" path="/root/syzkaller073310707" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 55.068179] audit: type=1400 audit(1516268970.626:8): avc: denied { name_bind } for pid=3660 comm="syzkaller073310" src=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 executing program executing program executing program [ 55.069418] dccp_close: ABORT with 24 bytes unread [ 55.087915] dccp_close: ABORT with 24 bytes unread [ 55.101297] audit: type=1400 audit(1516268970.626:9): avc: denied { node_bind } for pid=3660 comm="syzkaller073310" src=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:node_t:s0 tclass=dccp_socket permissive=1 [ 55.104567] dccp_close: ABORT with 24 bytes unread [ 55.120078] dccp_close: ABORT with 24 bytes unread executing program executing program [ 55.134127] audit: type=1400 audit(1516268970.627:10): avc: denied { name_connect } for pid=3660 comm="syzkaller073310" dest=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 [ 55.139345] dccp_close: ABORT with 24 bytes unread [ 55.154429] dccp_close: ABORT with 24 bytes unread [ 55.172817] dccp_close: ABORT with 24 bytes unread executing program [ 55.193524] dccp_close: ABORT with 24 bytes unread executing program [ 55.215198] dccp_close: ABORT with 24 bytes unread executing program executing program [ 55.237164] dccp_close: ABORT with 24 bytes unread executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 56.203591] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:425/tfrc_rx_hist_sample_rtt() [ 56.216897] CPU: 1 PID: 3930 Comm: syzkaller073310 Not tainted 4.15.0-rc8+ #267 [ 56.224317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.233644] Call Trace: [ 56.236209] [ 56.238342] dump_stack+0x194/0x257 [ 56.241945] ? arch_local_irq_restore+0x53/0x53 [ 56.246589] ? tfrc_rx_handle_loss+0xb38/0x24d0 [ 56.251235] ? __lock_is_held+0xb6/0x140 [ 56.255276] tfrc_rx_hist_sample_rtt+0x407/0x4d0 [ 56.260009] ccid3_hc_rx_packet_recv+0x696/0xeb3 [ 56.264739] ? dccp_parse_options+0x3d8/0x1030 [ 56.269297] ? ccid3_hc_tx_packet_recv+0xd20/0xd20 [ 56.274199] dccp_deliver_input_to_ccids+0xd9/0x250 [ 56.279193] dccp_rcv_established+0x88/0xb0 [ 56.283487] dccp_v4_do_rcv+0x135/0x160 [ 56.287440] __sk_receive_skb+0x33e/0xc20 [ 56.291564] ? sk_free+0x40/0x40 [ 56.294910] ? sock_edemux+0x40/0x40 [ 56.298594] ? skb_send_sock+0x50/0x50 [ 56.302457] ? print_irqtrace_events+0x270/0x270 [ 56.307188] ? dccp_invalid_packet+0x55/0x7d0 [ 56.311655] ? mark_held_locks+0xaf/0x100 [ 56.315779] dccp_v4_rcv+0xf65/0x1c90 [ 56.319564] ? dccp_v4_err+0x1550/0x1550 [ 56.323599] ? lock_release+0xa40/0xa40 [ 56.327548] ? __lock_is_held+0xb6/0x140 [ 56.331591] ip_local_deliver_finish+0x2f1/0xc50 [ 56.336324] ? ip_rcv_finish+0x1e30/0x1e30 [ 56.340537] ? nf_hook_slow+0xd3/0x1a0 [ 56.344404] ip_local_deliver+0x1ce/0x6e0 [ 56.348526] ? ip_call_ra_chain+0x6d0/0x6d0 [ 56.352819] ? mark_held_locks+0xaf/0x100 [ 56.356943] ? check_noncircular+0x20/0x20 [ 56.361158] ? ip_rcv_finish+0x1e30/0x1e30 [ 56.365370] ? __local_bh_enable_ip+0x121/0x230 [ 56.370016] ? ipt_do_table+0xd75/0x1330 [ 56.374055] ip_rcv_finish+0x959/0x1e30 [ 56.378022] ? inet_del_offload+0x40/0x40 [ 56.382148] ? ip_rcv+0xf22/0x1840 [ 56.385674] ? lock_downgrade+0x980/0x980 [ 56.389797] ? nf_nat_ipv4_in+0x1cd/0x270 [ 56.393918] ? iptable_nat_ipv4_fn+0x40/0x40 [ 56.398306] ? nf_hook_slow+0xd3/0x1a0 [ 56.402172] ip_rcv+0xc5a/0x1840 [ 56.405517] ? ip_local_deliver+0x6e0/0x6e0 [ 56.409810] ? rb_insert_color+0x1580/0x1580 [ 56.414192] ? check_noncircular+0x20/0x20 [ 56.418412] ? inet_del_offload+0x40/0x40 [ 56.422535] ? ip_local_deliver+0x6e0/0x6e0 [ 56.426833] __netif_receive_skb_core+0x1a41/0x3460 [ 56.431825] ? find_held_lock+0x35/0x1d0 [ 56.435870] ? nf_ingress+0x9f0/0x9f0 [ 56.439650] ? lock_downgrade+0x980/0x980 [ 56.443784] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 56.448946] ? check_noncircular+0x20/0x20 [ 56.453163] ? update_curr+0x47b/0xa60 [ 56.457023] ? __lock_acquire+0x664/0x3e00 [ 56.461230] ? numa_migrate_preferred+0x250/0x250 [ 56.466052] ? _find_next_bit+0xee/0x120 [ 56.470092] ? __lock_is_held+0xb6/0x140 [ 56.474132] ? check_noncircular+0x20/0x20 [ 56.478342] ? check_noncircular+0x20/0x20 [ 56.482550] ? print_irqtrace_events+0x270/0x270 [ 56.487275] ? numa_migrate_preferred+0x250/0x250 [ 56.492092] ? enqueue_task_fair+0x3b7/0x2950 [ 56.496560] ? find_held_lock+0x35/0x1d0 [ 56.500597] ? __lock_is_held+0xb6/0x140 [ 56.504630] ? find_held_lock+0x35/0x1d0 [ 56.508673] ? lock_acquire+0x1d5/0x580 [ 56.512620] ? process_backlog+0x45f/0x740 [ 56.516828] ? lock_acquire+0x1d5/0x580 [ 56.520772] ? process_backlog+0x1ab/0x740 [ 56.524986] ? lock_release+0xa40/0xa40 [ 56.528943] __netif_receive_skb+0x2c/0x1b0 [ 56.533237] ? __netif_receive_skb+0x2c/0x1b0 [ 56.537709] process_backlog+0x203/0x740 [ 56.541739] ? mark_held_locks+0xaf/0x100 [ 56.545857] ? try_to_wake_up+0xf9/0x1600 [ 56.549985] net_rx_action+0x792/0x1910 [ 56.553941] ? napi_complete_done+0x6c0/0x6c0 [ 56.558405] ? trace_hardirqs_off+0xd/0x10 [ 56.562617] ? _raw_spin_unlock_irqrestore+0xa6/0xba [ 56.567692] ? try_to_wake_up+0xf9/0x1600 [ 56.571811] ? lock_downgrade+0x980/0x980 [ 56.575939] ? migrate_swap_stop+0x970/0x970 [ 56.580317] ? check_noncircular+0x20/0x20 [ 56.584526] ? check_noncircular+0x20/0x20 [ 56.588731] ? lock_acquire+0x1d5/0x580 [ 56.592675] ? lock_acquire+0x1d5/0x580 [ 56.596622] ? __hrtimer_run_queues+0x394/0xe20 [ 56.601268] ? lock_downgrade+0x980/0x980 [ 56.605392] ? lock_release+0xa40/0xa40 [ 56.609370] ? find_held_lock+0x35/0x1d0 [ 56.613411] ? clockevents_program_event+0x163/0x2e0 [ 56.618486] ? lock_downgrade+0x980/0x980 [ 56.622616] ? pvclock_read_flags+0x160/0x160 [ 56.627091] ? check_noncircular+0x20/0x20 [ 56.631298] ? print_irqtrace_events+0x270/0x270 [ 56.636030] ? ktime_get_resolution_ns+0x300/0x300 [ 56.640928] ? lock_downgrade+0x980/0x980 [ 56.645053] ? check_noncircular+0x20/0x20 [ 56.649260] ? do_timer+0x50/0x50 [ 56.652689] ? __lock_is_held+0xb6/0x140 [ 56.656734] __do_softirq+0x2d7/0xb85 [ 56.660503] ? task_prio+0x40/0x40 [ 56.664020] ? __irqentry_text_end+0x1f8cf4/0x1f8cf4 [ 56.669096] ? irq_exit+0xbb/0x200 [ 56.672618] ? smp_apic_timer_interrupt+0x16b/0x700 [ 56.677609] ? smp_reschedule_interrupt+0xe6/0x670 [ 56.682520] ? smp_call_function_single_interrupt+0x640/0x640 [ 56.688383] ? _raw_spin_lock+0x32/0x40 [ 56.692333] ? _raw_spin_unlock+0x22/0x30 [ 56.696452] ? handle_edge_irq+0x2b4/0x7c0 [ 56.700666] ? task_prio+0x40/0x40 [ 56.704187] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 56.709010] do_softirq_own_stack+0x2a/0x40 [ 56.713302] [ 56.715514] do_softirq.part.19+0x14d/0x190 [ 56.719812] ? ip_finish_output2+0x93b/0x1560 [ 56.724281] __local_bh_enable_ip+0x1ee/0x230 [ 56.728750] ip_finish_output2+0x96e/0x1560 [ 56.733050] ? ip_copy_metadata+0xac0/0xac0 [ 56.737343] ? check_noncircular+0x20/0x20 [ 56.741553] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 56.746542] ? ipt_do_table+0xd0a/0x1330 [ 56.750574] ? trace_hardirqs_on+0xd/0x10 [ 56.754695] ? ipt_do_table+0xd75/0x1330 [ 56.758729] ? __local_bh_enable_ip+0x121/0x230 [ 56.763372] ? ipv4_mtu+0x34d/0x4c0 [ 56.766973] ? rt_cpu_seq_show+0x2c0/0x2c0 [ 56.771181] ? __lock_is_held+0xb6/0x140 [ 56.775221] ip_finish_output+0x864/0xd10 [ 56.779340] ? ip_finish_output+0x864/0xd10 [ 56.783648] ? ip_fragment.constprop.47+0x200/0x200 [ 56.788638] ? iptable_mangle_hook+0xa9/0x560 [ 56.793111] ? nf_hook_slow+0xd3/0x1a0 [ 56.796975] ip_output+0x1d2/0x860 [ 56.800491] ? ip_mc_output+0x1360/0x1360 [ 56.804620] ? ip_fragment.constprop.47+0x200/0x200 [ 56.809617] ip_local_out+0x95/0x160 [ 56.813312] ip_queue_xmit+0x8c6/0x18e0 [ 56.817265] ? ip_build_and_send_pkt+0xc30/0xc30 [ 56.821995] ? skb_send_sock+0x50/0x50 [ 56.825852] ? reqsk_fastopen_remove+0x521/0x610 [ 56.830580] ? dccp_insert_option_padding+0xad/0xd0 [ 56.835580] ? dccp_insert_options+0x20f/0xcf0 [ 56.840137] ? dccp_v4_send_check+0x187/0x3c0 [ 56.844607] dccp_transmit_skb+0x9ac/0x10f0 [ 56.848908] dccp_xmit_packet+0x215/0x740 [ 56.853031] ? dccp_send_ack+0x350/0x350 [ 56.857064] ? ccid3_hc_tx_send_packet+0x2e4/0x840 [ 56.861973] dccp_write_xmit+0x17d/0x1d0 [ 56.866008] dccp_sendmsg+0x6d0/0xa80 [ 56.869782] ? rw_copy_check_uvector+0x1be/0x280 [ 56.874515] ? compat_dccp_getsockopt+0x70/0x70 [ 56.879157] ? sock_has_perm+0x2a4/0x420 [ 56.883191] ? selinux_secmark_relabel_packet+0xc0/0xc0 [ 56.888525] ? dup_iter+0x192/0x260 [ 56.892127] ? kasan_check_write+0x14/0x20 [ 56.896336] inet_sendmsg+0x11f/0x5e0 [ 56.900119] ? copy_msghdr_from_user+0x3a6/0x590 [ 56.904846] ? inet_recvmsg+0x5f0/0x5f0 [ 56.908794] ? selinux_socket_sendmsg+0x36/0x40 [ 56.913434] ? security_socket_sendmsg+0x89/0xb0 [ 56.918163] ? inet_recvmsg+0x5f0/0x5f0 [ 56.922109] sock_sendmsg+0xca/0x110 [ 56.925795] ___sys_sendmsg+0x767/0x8b0 [ 56.929749] ? copy_msghdr_from_user+0x590/0x590 [ 56.934483] ? __do_page_fault+0x5f7/0xc90 [ 56.938690] ? lock_downgrade+0x980/0x980 [ 56.942817] ? __fget_light+0x297/0x380 [ 56.946763] ? fget_raw+0x20/0x20 [ 56.950191] ? __handle_mm_fault+0x3ce0/0x3ce0 [ 56.954744] ? vmacache_find+0x5f/0x280 [ 56.958696] ? up_read+0x1a/0x40 [ 56.962037] ? __do_page_fault+0x3d6/0xc90 [ 56.966251] ? __fdget+0x18/0x20 [ 56.969595] __sys_sendmsg+0xe5/0x210 [ 56.973365] ? __sys_sendmsg+0xe5/0x210 [ 56.977323] ? SyS_shutdown+0x290/0x290 [ 56.981269] ? __local_bh_enable_ip+0x121/0x230 [ 56.985908] ? __do_page_fault+0xc90/0xc90 [ 56.990116] ? SyS_futex+0x269/0x390 [ 56.993799] ? fput+0xd2/0x140 [ 56.996978] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 57.001978] SyS_sendmsg+0x2d/0x50 executing program executing program [ 57.005491] entry_SYSCALL_64_fastpath+0x29/0xa0 [ 57.010218] RIP: 0033:0x446469 [ 57.013380] RSP: 002b:00007f97bc44dda8 EFLAGS: 00000293 ORIG_RAX: 000000000000002e [ 57.021059] RAX: ffffffffffffffda RBX: 00000000006dbc3c RCX: 0000000000446469 [ 57.028302] RDX: 0000000000000080 RSI: 00000000206c8000 RDI: 0000000000000005 [ 57.035544] RBP: 00000000006dbc38 R08: 0000000000000000 R09: 0000000000000000 [ 57.042785] R10: 0000000000000000 R11: 0000000000000293 R12: f8e4cbe49e572d45 [ 57.050028] R13: 54c1b85d98aba1df R14: a6eaa24dbeb18c29 R15: 000000000000000c executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 60.076597] net_ratelimit: 213 callbacks suppressed [ 60.076601] dccp_close: ABORT with 24 bytes unread [ 60.108189] dccp_close: ABORT with 24 bytes unread executing program [ 60.134246] dccp_close: ABORT with 24 bytes unread executing program [ 60.160335] dccp_close: ABORT with 24 bytes unread executing program [ 60.186298] dccp_close: ABORT with 24 bytes unread executing program [ 60.211169] dccp_close: ABORT with 24 bytes unread executing program [ 60.237657] dccp_close: ABORT with 24 bytes unread executing program [ 60.262750] dccp_close: ABORT with 24 bytes unread executing program [ 60.289965] dccp_close: ABORT with 24 bytes unread executing program executing program [ 60.317398] dccp_close: ABORT with 24 bytes unread executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 65.089997] net_ratelimit: 236 callbacks suppressed [ 65.090000] dccp_close: ABORT with 24 bytes unread [ 65.120336] dccp_close: ABORT with 24 bytes unread executing program [ 65.146006] dccp_close: ABORT with 24 bytes unread executing program [ 65.170320] dccp_close: ABORT with 24 bytes unread executing program [ 65.194611] dccp_close: ABORT with 24 bytes unread executing program [ 65.219848] dccp_close: ABORT with 24 bytes unread executing program [ 65.244902] dccp_close: ABORT with 24 bytes unread executing program [ 65.273200] dccp_close: ABORT with 24 bytes unread executing program [ 65.298570] dccp_close: ABORT with 24 bytes unread executing program executing program [ 65.323093] dccp_close: ABORT with 24 bytes unread executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program