[....] Starting enhanced syslogd: rsyslogd[ 16.113523] audit: type=1400 audit(1517931755.162:5): avc: denied { syslog } for pid=4013 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 18.083402] audit: type=1400 audit(1517931757.132:6): avc: denied { map } for pid=4151 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.15.194' (ECDSA) to the list of known hosts. net.ipv6.conf.syz0.accept_dad = 0 net.ipv6.conf.syz0.router_solicitations = 0 [ 79.186284] audit: type=1400 audit(1517931818.235:7): avc: denied { map } for pid=4169 comm="syzkaller500962" path="/root/syzkaller500962576" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 RTNETLINK answers: Operation not supported RTNETLINK answers: No buffer space available RTNETLINK answers: Operation not supported [ 79.468804] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument executing program executing program [ 79.812721] kasan: CONFIG_KASAN_INLINE enabled [ 79.817421] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 79.824956] general protection fault: 0000 [#1] SMP KASAN [ 79.830471] Dumping ftrace buffer: [ 79.833980] (ftrace buffer empty) [ 79.837661] Modules linked in: [ 79.840830] CPU: 0 PID: 4169 Comm: syzkaller500962 Not tainted 4.15.0+ #221 [ 79.847902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 79.857237] RIP: 0010:ip6t_do_table+0x132d/0x1a30 [ 79.862056] RSP: 0018:ffff8801b042e808 EFLAGS: 00010246 [ 79.867390] RAX: 0000000000000000 RBX: ffff8801d8097b40 RCX: ffffffff84db22a1 [ 79.874652] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8801d8097c9e [ 79.881895] RBP: ffff8801b042ea50 R08: 1ffff10036085cca R09: 0000000000000000 [ 79.889137] R10: 00000000000000d0 R11: 0000000000000000 R12: 0000000000000001 [ 79.896387] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff8801d8097c10 [ 79.903631] FS: 0000000002693880(0000) GS:ffff8801db400000(0000) knlGS:0000000000000000 [ 79.911842] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 79.917695] CR2: 0000000020000000 CR3: 00000001b031b005 CR4: 00000000001606f0 [ 79.924939] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 79.932181] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 79.939423] Call Trace: [ 79.941986] ? ip6t_error+0x60/0x60 [ 79.945584] ? print_irqtrace_events+0x270/0x270 [ 79.950322] ? ip6t_error+0x60/0x60 [ 79.953929] ? ip6table_mangle_hook+0x117/0x920 [ 79.958571] ? check_noncircular+0x20/0x20 [ 79.962777] ? lock_acquire+0x1d5/0x580 [ 79.966727] ? ip6table_mangle_net_exit+0xa0/0xa0 [ 79.971546] ? lock_release+0xa40/0xa40 [ 79.975495] ip6table_security_hook+0x65/0x80 [ 79.979961] nf_hook_slow+0xba/0x1a0 [ 79.983662] ip6_input+0x35c/0x560 [ 79.987186] ? ip6_input_finish+0x17a0/0x17a0 [ 79.991653] ? ipv6_chk_mcast_addr+0x2f2/0x810 [ 79.996208] ? ip6_make_skb+0x5e0/0x5e0 [ 80.000158] ip6_mc_input+0x3a8/0xb10 [ 80.003940] ? ipv6_rcv+0x1fa0/0x1fa0 [ 80.007719] ip6_rcv_finish+0x297/0x8c0 [ 80.011665] ? ip6_input+0x560/0x560 [ 80.015361] ? ip6table_nat_in+0x2c/0x40 [ 80.019402] ? tcp_v6_mtu_reduced+0x60/0x60 [ 80.023695] ? nf_hook_slow+0xd3/0x1a0 [ 80.027556] ipv6_rcv+0xf37/0x1fa0 [ 80.031071] ? ip6_rcv_finish+0x8c0/0x8c0 [ 80.035196] ? __lock_acquire+0x664/0x3e00 [ 80.039408] ? ip6_input+0x560/0x560 [ 80.043093] ? ip6_rcv_finish+0x8c0/0x8c0 [ 80.047216] __netif_receive_skb_core+0x1a41/0x3460 [ 80.052204] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 80.057369] ? nf_ingress+0x9f0/0x9f0 [ 80.061169] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 80.066331] ? do_csum+0x288/0x360 [ 80.069842] ? check_noncircular+0x20/0x20 [ 80.074048] ? csum_partial+0x21/0x30 [ 80.077832] ? csum_partial_ext+0x25/0x30 [ 80.081961] ? check_noncircular+0x20/0x20 [ 80.086166] ? __skb_checksum+0x4a9/0x7e0 [ 80.090284] ? kernel_text_address+0x102/0x140 [ 80.094837] ? find_held_lock+0x35/0x1d0 [ 80.098872] ? print_irqtrace_events+0x270/0x270 [ 80.103626] ? lock_downgrade+0x980/0x980 [ 80.107751] ? pvclock_read_flags+0x160/0x160 [ 80.112215] ? mark_held_locks+0xaf/0x100 [ 80.116332] ? lock_acquire+0x1d5/0x580 [ 80.120276] ? lock_acquire+0x1d5/0x580 [ 80.124221] ? netif_receive_skb_internal+0xa2/0x670 [ 80.129293] ? ktime_get_with_offset+0x2c1/0x420 [ 80.134022] ? lock_release+0xa40/0xa40 [ 80.137966] ? do_gettimeofday+0x190/0x190 [ 80.142169] ? pte_alloc_one+0x59/0x100 [ 80.146125] ? lock_release+0xa40/0xa40 [ 80.150071] __netif_receive_skb+0x2c/0x1b0 [ 80.154362] ? __netif_receive_skb+0x2c/0x1b0 [ 80.158830] netif_receive_skb_internal+0x10b/0x670 [ 80.163839] ? dev_cpu_dead+0xb00/0xb00 [ 80.167787] ? net_rx_action+0x1910/0x1910 [ 80.171992] ? eth_type_trans+0x2b2/0x710 [ 80.176110] ? eth_gro_receive+0x820/0x820 [ 80.180318] napi_gro_frags+0x58a/0xaf0 [ 80.184276] ? napi_gro_receive+0x500/0x500 [ 80.188572] ? tun_get_user+0x2737/0x3940 [ 80.192691] tun_get_user+0x2760/0x3940 [ 80.196637] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 80.201797] ? do_huge_pmd_anonymous_page+0xb1e/0x1b00 [ 80.207052] ? tun_build_skb.isra.50+0x1810/0x1810 [ 80.211957] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 80.217119] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 80.222278] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 80.227275] ? find_held_lock+0x35/0x1d0 [ 80.231313] ? tun_get+0x1ab/0x2e0 [ 80.234829] ? lock_release+0xa40/0xa40 [ 80.238778] ? __lock_is_held+0xb6/0x140 [ 80.242822] ? tun_get+0x1d4/0x2e0 [ 80.246331] ? tun_do_read+0x26c0/0x26c0 [ 80.250363] ? __check_object_size+0x8b/0x530 [ 80.254829] ? rcu_note_context_switch+0x710/0x710 [ 80.259733] tun_chr_write_iter+0xb9/0x160 [ 80.263943] do_iter_readv_writev+0x55c/0x830 [ 80.268413] ? vfs_dedupe_file_range+0x8f0/0x8f0 [ 80.273142] ? rw_verify_area+0xe5/0x2b0 [ 80.277177] do_iter_write+0x154/0x540 [ 80.281036] ? dup_iter+0x260/0x260 [ 80.284637] vfs_writev+0x18a/0x340 [ 80.288249] ? __fget_light+0x297/0x380 [ 80.292203] ? vfs_iter_write+0xb0/0xb0 [ 80.296152] ? up_read+0x1a/0x40 [ 80.299489] ? __do_page_fault+0x3d6/0xc90 [ 80.303696] ? mm_fault_error+0x2c0/0x2c0 [ 80.307818] ? __fdget_pos+0x130/0x190 [ 80.311677] ? __fdget_raw+0x20/0x20 [ 80.315361] ? __do_page_fault+0xc90/0xc90 [ 80.319569] do_writev+0xfc/0x2a0 [ 80.322990] ? do_writev+0xfc/0x2a0 [ 80.326586] ? vfs_writev+0x340/0x340 [ 80.330356] ? entry_SYSCALL_64_fastpath+0x5/0xa0 [ 80.335184] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 80.340175] SyS_writev+0x27/0x30 [ 80.343599] entry_SYSCALL_64_fastpath+0x29/0xa0 [ 80.348327] RIP: 0033:0x446440 [ 80.351500] RSP: 002b:00007ffe9f069548 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 80.359177] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 0000000000446440 [ 80.366417] RDX: 0000000000000001 RSI: 00007ffe9f069560 RDI: 0000000000000003 [ 80.373659] RBP: 00007ffe9f069658 R08: 000000000000000f R09: 0000000000000000 [ 80.380899] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe9f069658 [ 80.388139] R13: 00000000004039d0 R14: 0000000000000000 R15: 0000000000000000 [ 80.395395] Code: 41 f6 87 83 00 00 00 04 75 37 e8 0f 83 95 fc 8b 85 14 fe ff ff 48 8b b5 50 fe ff ff 4c 8d 2c c6 44 8d 60 01 4c 89 e8 48 c1 e8 03 <42> 80 3c 30 00 0f 85 26 03 00 00 4d 89 7d 00 44 89 a5 14 fe ff [ 80.414470] RIP: ip6t_do_table+0x132d/0x1a30 RSP: ffff8801b042e808 [ 80.420808] ---[ end trace c5db45346ee0c8ed ]--- [ 80.425556] Kernel panic - not syncing: Fatal exception in interrupt [ 80.432396] Dumping ftrace buffer: [ 80.435909] (ftrace buffer empty) [ 80.439594] Kernel Offset: disabled [ 80.443192] Rebooting in 86400 seconds..