[....] Starting enhanced syslogd: rsyslogd[ 12.418798] audit: type=1400 audit(1514736451.042:5): avc: denied { syslog } for pid=3345 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 17.538633] audit: type=1400 audit(1514736456.162:6): avc: denied { map } for pid=3486 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.15.235' (ECDSA) to the list of known hosts. executing program [ 30.252158] audit: type=1400 audit(1514736468.875:7): avc: denied { map } for pid=3503 comm="syzkaller824997" path="/root/syzkaller824997366" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 30.255356] netlink: 11 bytes leftover after parsing attributes in process `syzkaller824997'. [ 30.255438] kasan: CONFIG_KASAN_INLINE enabled [ 30.255447] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 30.255453] general protection fault: 0000 [#1] SMP KASAN [ 30.255458] Dumping ftrace buffer: [ 30.255461] (ftrace buffer empty) [ 30.255463] Modules linked in: [ 30.255470] CPU: 1 PID: 3503 Comm: syzkaller824997 Not tainted 4.15.0-rc5+ #171 [ 30.255473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 30.255486] RIP: 0010:nf_tables_dump_obj_done+0x3d/0x70 [ 30.255489] RSP: 0018:ffff8801bffd72a0 EFLAGS: 00010246 [ 30.255493] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff8460d25d [ 30.255495] RDX: 0000000000000000 RSI: 0000000000000003 RDI: ffff8801bfddd330 [ 30.255498] RBP: ffff8801bffd72a8 R08: 0000000000000000 R09: 1ffff10037ffae0d [ 30.255500] R10: ffff8801bffd7030 R11: 0000000000000002 R12: 1ffff10037ffae5d [ 30.255503] R13: ffffffff8460d250 R14: ffff8801bfddd301 R15: ffff8801bfddd380 [ 30.255506] FS: 000000000196b880(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 [ 30.255509] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.255511] CR2: 000055be9060e120 CR3: 00000001d5a3a004 CR4: 00000000001606e0 [ 30.255517] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.255519] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.255520] Call Trace: [ 30.255528] netlink_dump+0x97a/0xcf0 [ 30.255535] ? netlink_broadcast+0x50/0x50 [ 30.255545] __netlink_dump_start+0x4f0/0x6d0 [ 30.255554] nf_tables_getobj+0x401/0xa00 [ 30.255560] ? nfnetlink_rcv_msg+0x8c8/0xd70 [ 30.255566] ? nf_tables_dump_obj+0xee0/0xee0 [ 30.255574] ? nla_parse+0x29a/0x3d0 [ 30.255580] ? nft_obj_notify+0x100/0x100 [ 30.255583] ? list_add_tail_rcu+0x1d0/0x1d0 [ 30.255590] ? nf_tables_dump_obj+0xee0/0xee0 [ 30.255596] nfnetlink_rcv_msg+0xbf0/0xd70 [ 30.255604] ? nfnetlink_rcv_msg+0x30a/0xd70 [ 30.255622] ? nfnetlink_bind+0x310/0x310 [ 30.255640] netlink_rcv_skb+0x224/0x470 [ 30.255646] ? nfnetlink_bind+0x310/0x310 [ 30.255652] ? netlink_ack+0xa10/0xa10 [ 30.255659] ? ns_capable_common+0xcf/0x160 [ 30.255669] ? __netlink_ns_capable+0xe1/0x120 [ 30.255679] nfnetlink_rcv+0x200/0x1920 [ 30.255688] ? __lock_is_held+0xb6/0x140 [ 30.255698] ? nfnl_err_reset+0x2b0/0x2b0 [ 30.255707] ? __might_fault+0x110/0x1d0 [ 30.255712] ? netlink_tap_init_net+0x350/0x350 [ 30.255717] ? lock_release+0xa40/0xa40 [ 30.255728] ? iov_iter_copy_from_user_atomic+0xe30/0xe30 [ 30.255733] ? netlink_skb_destructor+0x1d0/0x1d0 [ 30.255740] ? selinux_nlmsg_lookup+0x32b/0x430 [ 30.255747] netlink_unicast+0x4c4/0x6b0 [ 30.255754] ? netlink_attachskb+0x8a0/0x8a0 [ 30.255763] ? security_netlink_send+0x81/0xb0 [ 30.255768] netlink_sendmsg+0xa4a/0xe60 [ 30.255776] ? netlink_unicast+0x6b0/0x6b0 [ 30.255782] ? security_socket_sendmsg+0x89/0xb0 [ 30.255786] ? netlink_unicast+0x6b0/0x6b0 [ 30.255795] sock_sendmsg+0xca/0x110 [ 30.255801] sock_write_iter+0x31a/0x5d0 [ 30.255806] ? sock_sendmsg+0x110/0x110 [ 30.255815] ? iov_iter_init+0xaf/0x1d0 [ 30.255823] __vfs_write+0x684/0x970 [ 30.255829] ? kernel_read+0x120/0x120 [ 30.255834] ? bpf_fd_pass+0x280/0x280 [ 30.255844] ? _cond_resched+0x14/0x30 [ 30.255850] ? selinux_file_permission+0x82/0x460 [ 30.255858] ? rw_verify_area+0xe5/0x2b0 [ 30.255864] ? __fdget_raw+0x20/0x20 [ 30.255870] vfs_write+0x189/0x510 [ 30.255877] SyS_write+0xef/0x220 [ 30.255880] ? SyS_socket+0x12d/0x1d0 [ 30.255886] ? SyS_read+0x220/0x220 [ 30.255889] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 30.255896] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 30.255903] entry_SYSCALL_64_fastpath+0x23/0x9a [ 30.255906] RIP: 0033:0x43fc89 [ 30.255908] RSP: 002b:00007ffed50ea488 EFLAGS: 00000203 ORIG_RAX: 0000000000000001 [ 30.255912] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043fc89 [ 30.255914] RDX: 000000000000009c RSI: 0000000020a35000 RDI: 0000000000000003 [ 30.255916] RBP: 00000000006ca018 R08: 0000000000000000 R09: 0000000000000000 [ 30.255918] R10: 0000000000000000 R11: 0000000000000203 R12: 00000000004015f0 [ 30.255920] R13: 0000000000401680 R14: 0000000000000000 R15: 0000000000000000 [ 30.255929] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 30 48 8b 5b 28 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 <80> 3c 02 00 75 1c 48 8b 3b e8 55 ca 46 fd 48 89 df e8 4d ca 46 [ 30.255999] RIP: nf_tables_dump_obj_done+0x3d/0x70 RSP: ffff8801bffd72a0 [ 30.256037] ---[ end trace 2097eede423b1b20 ]--- [ 30.256040] Kernel panic - not syncing: Fatal exception [ 30.278057] Dumping ftrace buffer: [ 30.278061] (ftrace buffer empty) [ 30.278064] Kernel Offset: disabled [ 30.726794] Rebooting in 86400 seconds..