[....] Starting enhanced syslogd: rsyslogd[ 10.572303] audit: type=1400 audit(1514588176.196:5): avc: denied { syslog } for pid=3034 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 16.089163] audit: type=1400 audit(1514588181.712:6): avc: denied { map } for pid=3173 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.6' (ECDSA) to the list of known hosts. executing program [ 22.302727] audit: type=1400 audit(1514588187.926:7): avc: denied { map } for pid=3187 comm="syzkaller954632" path="/root/syzkaller954632369" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 22.306499] IPv6: Can't replace route, no match found [ 22.306521] kasan: CONFIG_KASAN_INLINE enabled [ 22.306527] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 22.306535] general protection fault: 0000 [#1] SMP KASAN [ 22.306540] Dumping ftrace buffer: [ 22.306543] (ftrace buffer empty) [ 22.306545] Modules linked in: [ 22.306554] CPU: 1 PID: 3187 Comm: syzkaller954632 Not tainted 4.15.0-rc5+ #241 [ 22.306557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 22.306570] RIP: 0010:fib6_add+0x736/0x15a0 [ 22.306573] RSP: 0018:ffff8801c74b6c00 EFLAGS: 00010202 [ 22.306579] RAX: dffffc0000000000 RBX: 0000000000000020 RCX: ffffffff84794465 [ 22.306583] RDX: 0000000000000004 RSI: ffff8801d3f98a30 RDI: 0000000000000282 [ 22.306587] RBP: ffff8801c74b6f30 R08: 1ffff10038e96c67 R09: 0000000000000000 [ 22.306590] R10: ffff8801c74b6df8 R11: 0000000000000000 R12: 00000000fffffffe [ 22.306594] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000009 [ 22.306599] FS: 0000000000dad880(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 [ 22.306603] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 22.306606] CR2: 0000000020be1000 CR3: 00000001c91b6003 CR4: 00000000001606e0 [ 22.306613] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 22.306617] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 22.306618] Call Trace: [ 22.306635] ? fib6_force_start_gc+0xf0/0xf0 [ 22.306642] ? save_stack+0xa3/0xd0 [ 22.306648] ? save_stack+0x43/0xd0 [ 22.306653] ? kasan_kmalloc+0xad/0xe0 [ 22.306661] ? kmem_cache_alloc_trace+0x136/0x750 [ 22.306667] ? ip6_route_multipath_add+0x98d/0x16c0 [ 22.306672] ? inet6_rtm_newroute+0xdc/0x160 [ 22.306680] ? netlink_rcv_skb+0x21e/0x460 [ 22.306687] ? rtnetlink_rcv+0x1c/0x20 [ 22.306692] ? netlink_unicast+0x4e8/0x6f0 [ 22.306698] ? netlink_sendmsg+0xa4a/0xe60 [ 22.306704] ? sock_sendmsg+0xca/0x110 [ 22.306709] ? sock_write_iter+0x31a/0x5d0 [ 22.306715] ? do_iter_readv_writev+0x525/0x7f0 [ 22.306720] ? do_iter_write+0x154/0x540 [ 22.306725] ? vfs_writev+0x18a/0x340 [ 22.306729] ? do_writev+0xfc/0x2a0 [ 22.306734] ? SyS_writev+0x27/0x30 [ 22.306740] ? entry_SYSCALL_64_fastpath+0x1f/0x96 [ 22.306749] ? check_noncircular+0x20/0x20 [ 22.306756] ? print_irqtrace_events+0x270/0x270 [ 22.306764] ? __lock_is_held+0xb6/0x140 [ 22.306774] ? lock_acquire+0x1d5/0x580 [ 22.306779] ? lock_acquire+0x1d5/0x580 [ 22.306785] ? __ip6_ins_rt+0x56/0x90 [ 22.306791] ? ip6_convert_metrics+0x546/0x700 [ 22.306801] ? lock_release+0xa40/0xa40 [ 22.306812] ? dst_discard+0x50/0x50 [ 22.306824] ? ip6_route_multipath_add+0x98d/0x16c0 [ 22.306830] ? __ip6_ins_rt+0x56/0x90 [ 22.306841] __ip6_ins_rt+0x6c/0x90 [ 22.306851] ip6_route_multipath_add+0xd14/0x16c0 [ 22.306869] ? ip6_route_mpath_notify+0xd0/0xd0 [ 22.306878] ? lwtunnel_valid_encap_type_attr+0x196/0x210 [ 22.306887] ? rtm_to_fib6_config+0xdf0/0x1210 [ 22.306897] ? ip6_dst_gc+0x520/0x520 [ 22.306936] inet6_rtm_newroute+0xdc/0x160 [ 22.306942] ? inet6_rtm_newroute+0xdc/0x160 [ 22.306950] ? ip6_route_multipath_add+0x16c0/0x16c0 [ 22.306975] ? ip6_route_multipath_add+0x16c0/0x16c0 [ 22.306983] rtnetlink_rcv_msg+0x733/0x1020 [ 22.306994] ? validate_linkmsg+0x8e0/0x8e0 [ 22.307006] ? check_noncircular+0x20/0x20 [ 22.307016] ? find_held_lock+0x35/0x1d0 [ 22.307029] ? netlink_lookup+0x5f7/0xa90 [ 22.307036] ? lock_downgrade+0x980/0x980 [ 22.307045] ? find_held_lock+0x35/0x1d0 [ 22.307057] ? ip6_route_multipath_add+0x16c0/0x16c0 [ 22.307062] ? netlink_deliver_tap+0x148/0xcf0 [ 22.307069] ? lock_downgrade+0x980/0x980 [ 22.307078] ? lock_release+0xa40/0xa40 [ 22.307084] ? netlink_lookup+0x620/0xa90 [ 22.307095] ? ip6_route_multipath_add+0x16c0/0x16c0 [ 22.307108] ? netlink_deliver_tap+0x171/0xcf0 [ 22.307118] ? sock_has_perm+0x2a4/0x420 [ 22.307127] netlink_rcv_skb+0x21e/0x460 [ 22.307134] ? validate_linkmsg+0x8e0/0x8e0 [ 22.307142] ? netlink_ack+0xa10/0xa10 [ 22.307151] ? netlink_skb_destructor+0x1d0/0x1d0 [ 22.307164] rtnetlink_rcv+0x1c/0x20 [ 22.307171] netlink_unicast+0x4e8/0x6f0 [ 22.307181] ? netlink_attachskb+0x8a0/0x8a0 [ 22.307193] ? security_netlink_send+0x81/0xb0 [ 22.307202] netlink_sendmsg+0xa4a/0xe60 [ 22.307214] ? netlink_unicast+0x6f0/0x6f0 [ 22.307224] ? security_socket_sendmsg+0x89/0xb0 [ 22.307231] ? netlink_unicast+0x6f0/0x6f0 [ 22.307238] sock_sendmsg+0xca/0x110 [ 22.307247] sock_write_iter+0x31a/0x5d0 [ 22.307255] ? sock_sendmsg+0x110/0x110 [ 22.307268] ? bpf_fd_pass+0x280/0x280 [ 22.307275] ? __might_sleep+0x4c/0x190 [ 22.307284] do_iter_readv_writev+0x525/0x7f0 [ 22.307294] ? vfs_dedupe_file_range+0x8f0/0x8f0 [ 22.307305] ? rw_verify_area+0xe5/0x2b0 [ 22.307314] do_iter_write+0x154/0x540 [ 22.307322] ? dup_iter+0x260/0x260 [ 22.307336] vfs_writev+0x18a/0x340 [ 22.307342] ? __fget_light+0x297/0x380 [ 22.307350] ? vfs_iter_write+0xb0/0xb0 [ 22.307356] ? up_read+0x1a/0x40 [ 22.307364] ? __do_page_fault+0x3d6/0xc90 [ 22.307370] ? get_unused_fd_flags+0x190/0x190 [ 22.307382] ? mm_fault_error+0x2c0/0x2c0 [ 22.307389] ? sock_alloc_file+0x2a6/0x560 [ 22.307399] ? __fdget_pos+0x130/0x190 [ 22.307406] ? __fdget_raw+0x20/0x20 [ 22.307413] ? __alloc_fd+0x750/0x750 [ 22.307420] ? __do_page_fault+0xc90/0xc90 [ 22.307429] do_writev+0xfc/0x2a0 [ 22.307434] ? do_writev+0xfc/0x2a0 [ 22.307443] ? vfs_writev+0x340/0x340 [ 22.307448] ? entry_SYSCALL_64_fastpath+0x5/0x96 [ 22.307456] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 22.307467] SyS_writev+0x27/0x30 [ 22.307474] entry_SYSCALL_64_fastpath+0x1f/0x96 [ 22.307479] RIP: 0033:0x43fcd9 [ 22.307482] RSP: 002b:00007ffe75b6a858 EFLAGS: 00000203 ORIG_RAX: 0000000000000014 [ 22.307488] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043fcd9 [ 22.307491] RDX: 0000000000000001 RSI: 00000000204aaff0 RDI: 0000000000000003 [ 22.307495] RBP: 00000000006ca018 R08: 0000000000000000 R09: 0000000000000000 [ 22.307498] R10: 0000000000000000 R11: 0000000000000203 R12: 0000000000401640 [ 22.307502] R13: 00000000004016d0 R14: 0000000000000000 R15: 0000000000000000 [ 22.307516] Code: f1 a9 f6 fc e8 2c f2 e2 fc 85 c0 0f 85 d5 03 00 00 49 8d 5e 20 e8 db a9 f6 fc 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 5a 0c 00 00 4d 39 ee 4d 8b 7e 20 0f 95 c0 4c [ 22.307629] RIP: fib6_add+0x736/0x15a0 RSP: ffff8801c74b6c00 [ 22.307653] ---[ end trace 9dcc121e5348c8c5 ]--- [ 22.307657] Kernel panic - not syncing: Fatal exception in interrupt [ 22.329020] Dumping ftrace buffer: [ 22.329022] (ftrace buffer empty) [ 22.329025] Kernel Offset: disabled [ 22.958125] Rebooting in 86400 seconds..