[....] Starting enhanced syslogd: rsyslogd[ 13.616610] audit: type=1400 audit(1515931929.768:5): avc: denied { syslog } for pid=3503 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 19.758135] audit: type=1400 audit(1515931935.909:6): avc: denied { map } for pid=3643 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.20' (ECDSA) to the list of known hosts. net.ipv6.conf.syz0.accept_dad = 0 net.ipv6.conf.syz0.router_solicitations = 0 [ 25.996634] audit: type=1400 audit(1515931942.148:7): avc: denied { map } for pid=3657 comm="syzkaller286247" path="/root/syzkaller286247240" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 RTNETLINK answers: Operation not supported RTNETLINK answers: No buffer space available RTNETLINK answers: Operation not supported [ 26.275678] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument [ 26.618365] audit: type=1400 audit(1515931942.770:8): avc: denied { sys_admin } for pid=3657 comm="syzkaller286247" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 executing program [ 26.794456] audit: type=1400 audit(1515931942.946:9): avc: denied { sys_chroot } for pid=3813 comm="syzkaller286247" capability=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 26.819201] audit: type=1400 audit(1515931942.947:10): avc: denied { map_create } for pid=3813 comm="syzkaller286247" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 26.841920] audit: type=1400 audit(1515931942.947:11): avc: denied { map_read map_write } for pid=3813 comm="syzkaller286247" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 26.872359] kasan: CONFIG_KASAN_INLINE enabled [ 26.877037] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 26.884620] general protection fault: 0000 [#1] SMP KASAN [ 26.890136] Dumping ftrace buffer: [ 26.893650] (ftrace buffer empty) [ 26.897333] Modules linked in: [ 26.900519] CPU: 1 PID: 23 Comm: kworker/1:1 Not tainted 4.15.0-rc7+ #171 [ 26.907429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 26.916770] Workqueue: events bpf_map_free_deferred [ 26.921766] RIP: 0010:cgroup_fd_array_put_ptr+0x71/0x2a0 [ 26.927199] RSP: 0018:ffff8801d98af490 EFLAGS: 00010a02 [ 26.932544] RAX: 1830003a000001ea RBX: 1ffff1003b315e92 RCX: ffffffff8180f495 [ 26.939797] RDX: 0000000000000000 RSI: ffff8801d2d9b164 RDI: c18001d000000f51 [ 26.947054] RBP: ffff8801d98af518 R08: 1ffff1003b315e70 R09: 0000000000000000 [ 26.954301] R10: 0000000000000000 R11: 0000000000000000 R12: c18001d000000ee5 [ 26.961557] R13: ffff8801d98af4f0 R14: dffffc0000000000 R15: c18001d000000ee5 [ 26.968802] FS: 0000000000000000(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 [ 26.977002] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 26.982855] CR2: 00000000203e2fe4 CR3: 0000000006822001 CR4: 00000000001606e0 [ 26.990103] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 26.997351] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 27.004593] Call Trace: [ 27.007160] ? array_of_map_free+0x180/0x180 [ 27.011540] ? kfree+0xf0/0x260 [ 27.014793] ? selinux_bpf_map_free+0x39/0x50 [ 27.019262] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 27.024264] cgroup_fd_array_free+0xd2/0x150 [ 27.028670] bpf_map_free_deferred+0xb0/0xe0 [ 27.033070] process_one_work+0xbbf/0x1b10 [ 27.037278] ? trace_hardirqs_on+0xd/0x10 [ 27.041423] ? pwq_dec_nr_in_flight+0x450/0x450 [ 27.046071] ? __schedule+0x8f3/0x2060 [ 27.049944] ? update_curr+0x2e3/0xa60 [ 27.053809] ? check_noncircular+0x20/0x20 [ 27.058019] ? __lock_is_held+0xb6/0x140 [ 27.062065] ? lock_acquire+0x1d5/0x580 [ 27.066012] ? lock_acquire+0x1d5/0x580 [ 27.069958] ? worker_thread+0x4a3/0x1990 [ 27.074080] ? lock_downgrade+0x980/0x980 [ 27.078205] ? lock_release+0xa40/0xa40 [ 27.082151] ? retint_kernel+0x10/0x10 [ 27.086013] ? do_raw_spin_trylock+0x190/0x190 [ 27.090578] worker_thread+0x223/0x1990 [ 27.094540] ? process_one_work+0x1b10/0x1b10 [ 27.099011] ? _raw_spin_unlock_irq+0x27/0x70 [ 27.103480] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 27.108472] ? trace_hardirqs_on+0xd/0x10 [ 27.112594] ? _raw_spin_unlock_irq+0x27/0x70 [ 27.117075] ? finish_task_switch+0x1d3/0x740 [ 27.121542] ? finish_task_switch+0x1aa/0x740 [ 27.126012] ? copy_overflow+0x20/0x20 [ 27.129878] ? __schedule+0x8f3/0x2060 [ 27.133749] ? find_held_lock+0x35/0x1d0 [ 27.137799] ? find_held_lock+0x35/0x1d0 [ 27.141838] ? complete+0x62/0x80 [ 27.145282] ? __schedule+0x2060/0x2060 [ 27.149227] ? do_wait_intr_irq+0x3e0/0x3e0 [ 27.153520] ? __lockdep_init_map+0xe4/0x650 [ 27.157916] ? do_raw_spin_trylock+0x190/0x190 [ 27.162486] ? lockdep_init_map+0x9/0x10 [ 27.166523] ? _raw_spin_unlock_irqrestore+0x31/0xba [ 27.171599] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 27.176595] ? trace_hardirqs_on+0xd/0x10 [ 27.180718] ? __kthread_parkme+0x175/0x240 [ 27.185013] kthread+0x33c/0x400 [ 27.188353] ? process_one_work+0x1b10/0x1b10 [ 27.192823] ? kthread_stop+0x7a0/0x7a0 [ 27.196771] ret_from_fork+0x24/0x30 [ 27.200463] Code: 45 88 30 f4 80 81 c7 00 f1 f1 f1 f1 c7 40 04 00 f2 f2 f2 c7 40 08 f3 f3 f3 f3 e8 eb 22 ef ff 49 8d 7c 24 6c 48 89 f8 48 c1 e8 03 <42> 0f b6 14 30 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f [ 27.219544] RIP: cgroup_fd_array_put_ptr+0x71/0x2a0 RSP: ffff8801d98af490 [ 27.226504] ---[ end trace f6148ef503898dae ]--- [ 27.231454] Kernel panic - not syncing: Fatal exception [ 27.237183] Dumping ftrace buffer: [ 27.240718] (ftrace buffer empty) [ 27.244403] Kernel Offset: disabled [ 27.248022] Rebooting in 86400 seconds..