[....] Starting enhanced syslogd: rsyslogd[ 17.516157] audit: type=1400 audit(1517942948.869:5): avc: denied { syslog } for pid=4019 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 23.799608] audit: type=1400 audit(1517942955.152:6): avc: denied { map } for pid=4160 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.15.192' (ECDSA) to the list of known hosts. net.ipv6.conf.syz0.accept_dad = 0 net.ipv6.conf.syz0.router_solicitations = 0 [ 65.702236] audit: type=1400 audit(1517942997.055:7): avc: denied { map } for pid=4176 comm="syzkaller385839" path="/root/syzkaller385839557" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 RTNETLINK answers: Operation not supported RTNETLINK answers: No buffer space available RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported [ 65.972499] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument executing program executing program [ 66.279089] kasan: CONFIG_KASAN_INLINE enabled [ 66.283788] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 66.291284] general protection fault: 0000 [#1] SMP KASAN [ 66.296795] Dumping ftrace buffer: [ 66.300316] (ftrace buffer empty) [ 66.303996] Modules linked in: [ 66.307161] CPU: 0 PID: 4176 Comm: syzkaller385839 Not tainted 4.15.0+ #221 [ 66.314228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 66.323576] RIP: 0010:ip6t_do_table+0x132d/0x1a30 [ 66.328390] RSP: 0018:ffff8801b1f46808 EFLAGS: 00010246 [ 66.333727] RAX: 0000000000000000 RBX: ffff8801b0034500 RCX: ffffffff84db22a1 [ 66.340991] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8801b003465e [ 66.348347] RBP: ffff8801b1f46a50 R08: 1ffff100363e8cca R09: 0000000000000000 [ 66.355597] R10: 00000000000000d0 R11: 0000000000000000 R12: 0000000000000001 [ 66.362839] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff8801b00345d0 [ 66.370082] FS: 0000000001bdf880(0000) GS:ffff8801db400000(0000) knlGS:0000000000000000 [ 66.378275] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 66.384124] CR2: 0000000020000000 CR3: 00000001b1c7d004 CR4: 00000000001606f0 [ 66.391367] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 66.398604] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 66.405856] Call Trace: [ 66.408417] ? ip6t_error+0x60/0x60 [ 66.412015] ? print_irqtrace_events+0x270/0x270 [ 66.416778] ? ip6t_error+0x60/0x60 [ 66.420376] ? ip6table_mangle_hook+0x117/0x920 [ 66.425015] ? check_noncircular+0x20/0x20 [ 66.429217] ? lock_acquire+0x1d5/0x580 [ 66.433171] ? ip6table_mangle_net_exit+0xa0/0xa0 [ 66.437987] ? lock_release+0xa40/0xa40 [ 66.442316] ip6table_security_hook+0x65/0x80 [ 66.446787] nf_hook_slow+0xba/0x1a0 [ 66.450474] ip6_input+0x35c/0x560 [ 66.453984] ? ip6_input_finish+0x17a0/0x17a0 [ 66.458453] ? ipv6_chk_mcast_addr+0x2f2/0x810 [ 66.463006] ? ip6table_nat_fn+0x40/0x40 [ 66.467041] ? ip6_make_skb+0x5e0/0x5e0 [ 66.470988] ip6_mc_input+0x3a8/0xb10 [ 66.474760] ? ipv6_rcv+0x1fa0/0x1fa0 [ 66.478537] ip6_rcv_finish+0x297/0x8c0 [ 66.482479] ? ip6_input+0x560/0x560 [ 66.486164] ? ip6table_nat_in+0x2c/0x40 [ 66.490196] ? nf_hook_slow+0xd3/0x1a0 [ 66.494057] ipv6_rcv+0xf37/0x1fa0 [ 66.497571] ? ip6_rcv_finish+0x8c0/0x8c0 [ 66.501695] ? __lock_acquire+0x664/0x3e00 [ 66.505905] ? ip6_input+0x560/0x560 [ 66.509588] ? ip6_rcv_finish+0x8c0/0x8c0 [ 66.513707] __netif_receive_skb_core+0x1a41/0x3460 [ 66.518692] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 66.523855] ? nf_ingress+0x9f0/0x9f0 [ 66.527631] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 66.532801] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 66.537964] ? __free_insn_slot+0x5c0/0x5c0 [ 66.542255] ? print_irqtrace_events+0x270/0x270 [ 66.546981] ? check_noncircular+0x20/0x20 [ 66.551184] ? check_noncircular+0x20/0x20 [ 66.555391] ? check_noncircular+0x20/0x20 [ 66.559597] ? kernel_text_address+0x102/0x140 [ 66.564149] ? find_held_lock+0x35/0x1d0 [ 66.568182] ? print_irqtrace_events+0x270/0x270 [ 66.572915] ? lock_downgrade+0x980/0x980 [ 66.577040] ? pvclock_read_flags+0x160/0x160 [ 66.581503] ? mark_held_locks+0xaf/0x100 [ 66.585622] ? lock_acquire+0x1d5/0x580 [ 66.589564] ? lock_acquire+0x1d5/0x580 [ 66.593520] ? netif_receive_skb_internal+0xa2/0x670 [ 66.598606] ? ktime_get_with_offset+0x2c1/0x420 [ 66.603336] ? lock_release+0xa40/0xa40 [ 66.607277] ? do_gettimeofday+0x190/0x190 [ 66.611492] ? is_bpf_text_address+0x7b/0x120 [ 66.615957] ? lock_release+0xa40/0xa40 [ 66.619903] __netif_receive_skb+0x2c/0x1b0 [ 66.624203] ? __netif_receive_skb+0x2c/0x1b0 [ 66.628670] netif_receive_skb_internal+0x10b/0x670 [ 66.633656] ? dev_cpu_dead+0xb00/0xb00 [ 66.637602] ? net_rx_action+0x1910/0x1910 [ 66.641807] ? eth_type_trans+0x2b2/0x710 [ 66.645934] ? eth_gro_receive+0x820/0x820 [ 66.650154] napi_gro_frags+0x58a/0xaf0 [ 66.654103] ? napi_gro_receive+0x500/0x500 [ 66.658420] ? tun_get_user+0x2737/0x3940 [ 66.662546] tun_get_user+0x2760/0x3940 [ 66.666493] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 66.671659] ? tun_build_skb.isra.50+0x1810/0x1810 [ 66.676557] ? check_noncircular+0x20/0x20 [ 66.680781] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 66.685940] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 66.691113] ? find_held_lock+0x35/0x1d0 [ 66.695147] ? find_held_lock+0x35/0x1d0 [ 66.699180] ? tun_get+0x1ab/0x2e0 [ 66.702692] ? lock_release+0xa40/0xa40 [ 66.706641] ? __lock_is_held+0xb6/0x140 [ 66.710677] ? tun_get+0x1d4/0x2e0 [ 66.714189] ? tun_do_read+0x26c0/0x26c0 [ 66.718220] ? __check_object_size+0x8b/0x530 [ 66.722689] ? rcu_note_context_switch+0x710/0x710 [ 66.727599] tun_chr_write_iter+0xb9/0x160 [ 66.731807] do_iter_readv_writev+0x55c/0x830 [ 66.736274] ? vfs_dedupe_file_range+0x8f0/0x8f0 [ 66.741017] ? rw_verify_area+0xe5/0x2b0 [ 66.745050] do_iter_write+0x154/0x540 [ 66.748925] ? dup_iter+0x260/0x260 [ 66.752526] vfs_writev+0x18a/0x340 [ 66.756123] ? __fget_light+0x297/0x380 [ 66.760065] ? vfs_iter_write+0xb0/0xb0 [ 66.764018] ? up_read+0x1a/0x40 [ 66.767357] ? __do_page_fault+0x3d6/0xc90 [ 66.771565] ? mm_fault_error+0x2c0/0x2c0 [ 66.775688] ? __fdget_pos+0x130/0x190 [ 66.779542] ? __fdget_raw+0x20/0x20 [ 66.783224] ? __do_page_fault+0xc90/0xc90 [ 66.787429] do_writev+0xfc/0x2a0 [ 66.790849] ? do_writev+0xfc/0x2a0 [ 66.794446] ? vfs_writev+0x340/0x340 [ 66.798217] ? entry_SYSCALL_64_fastpath+0x5/0xa0 [ 66.803027] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 66.808013] SyS_writev+0x27/0x30 [ 66.811435] entry_SYSCALL_64_fastpath+0x29/0xa0 [ 66.816160] RIP: 0033:0x4462b0 [ 66.819320] RSP: 002b:00007ffe024347c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 66.826999] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00000000004462b0 [ 66.834250] RDX: 0000000000000001 RSI: 00007ffe024347d0 RDI: 0000000000000003 [ 66.841490] RBP: 0100000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 66.848735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 66.855976] R13: 0000000000403840 R14: 0000000000000000 R15: 0000000000000000 [ 66.863223] Code: 41 f6 87 83 00 00 00 04 75 37 e8 0f 83 95 fc 8b 85 14 fe ff ff 48 8b b5 50 fe ff ff 4c 8d 2c c6 44 8d 60 01 4c 89 e8 48 c1 e8 03 <42> 80 3c 30 00 0f 85 26 03 00 00 4d 89 7d 00 44 89 a5 14 fe ff [ 66.882291] RIP: ip6t_do_table+0x132d/0x1a30 RSP: ffff8801b1f46808 [ 66.888632] ---[ end trace 7a4f4ca26dc11e60 ]--- [ 66.893376] Kernel panic - not syncing: Fatal exception in interrupt [ 66.900252] Dumping ftrace buffer: [ 66.903765] (ftrace buffer empty) [ 66.907446] Kernel Offset: disabled [ 66.911044] Rebooting in 86400 seconds..