[....] Starting enhanced syslogd: rsyslogd[ 14.492259] audit: type=1400 audit(1519870808.774:4): avc: denied { syslog } for pid=3640 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.55' (ECDSA) to the list of known hosts. syzkaller login: [ 26.915554] audit: type=1400 audit(1519870821.194:5): avc: denied { sys_admin } for pid=3797 comm="syzkaller141115" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 26.951009] IPVS: Creating netns size=2536 id=1 [ 26.971710] IPVS: Creating netns size=2536 id=2 [ 26.982976] IPVS: Creating netns size=2536 id=3 [ 26.994076] IPVS: Creating netns size=2536 id=4 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 27.009880] audit: type=1400 audit(1519870821.294:6): avc: denied { sys_chroot } for pid=3805 comm="syzkaller141115" capability=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 27.045190] IPVS: Creating netns size=2536 id=5 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 27.076453] IPVS: Creating netns size=2536 id=6 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 27.099056] IPVS: Creating netns size=2536 id=7 [ 27.115469] IPVS: Creating netns size=2536 id=8 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 27.208287] kasan: CONFIG_KASAN_INLINE enabled [ 27.213126] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 27.222679] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 27.228909] Dumping ftrace buffer: [ 27.232418] (ftrace buffer empty) [ 27.236100] Modules linked in: [ 27.239384] CPU: 0 PID: 3831 Comm: syzkaller141115 Not tainted 4.9.85-g6e463bb #46 [ 27.247067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 27.256402] task: ffff8801d7413000 task.stack: ffff8801d8210000 [ 27.262428] RIP: 0010:[] [] __free_pages+0x21/0x80 [ 27.270668] RSP: 0018:ffff8801d8217ab0 EFLAGS: 00010a07 [ 27.276097] RAX: dffffc0000000000 RBX: dead4ead00000000 RCX: ffffffff82668d9b [ 27.283345] RDX: 1bd5a9d5a0000003 RSI: 0000000000000000 RDI: dead4ead0000001c [ 27.290586] RBP: ffff8801d8217ac0 R08: 0000000000000000 R09: ffffed0038b4fce9 [ 27.297828] R10: 0000000000000005 R11: ffffed0038b4fce8 R12: 0000000000000004 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 27.305070] R13: 0000000000000020 R14: ffff8801cb8e8000 R15: dffffc0000000000 [ 27.312313] FS: 00007f9220fd9700(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 [ 27.320512] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.326366] CR2: 00000000200004c0 CR3: 00000001c24ca000 CR4: 0000000000160670 [ 27.333614] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 27.340858] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 27.348099] Stack: [ 27.350219] 0000000000000001 ffff8801cb8e8158 ffff8801d8217b20 ffffffff82668dc1 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 27.358196] ffff8801cb8e8170 ffffed003971d02b ffffed003971d02e ffff8801cb8e8168 [ 27.366181] dead4ead00000000 ffff8801cb8e8140 0000000000000000 0000000000000000 [ 27.374166] Call Trace: [ 27.376733] [] sg_remove_scat.isra.19+0x1c1/0x2d0 [ 27.383204] [] sg_finish_rem_req+0x2b5/0x340 [ 27.389238] [] sg_read+0xa16/0x1440 [ 27.394490] [] ? sg_proc_seq_show_debug+0xd90/0xd90 [ 27.401131] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 27.408123] [] ? sg_proc_seq_show_debug+0xd90/0xd90 [ 27.414779] [] __vfs_read+0x103/0x670 [ 27.420204] [] ? default_llseek+0x290/0x290 [ 27.426148] [] ? fsnotify+0x86/0xf30 [ 27.431483] [] ? fsnotify+0xf30/0xf30 [ 27.436909] [] ? avc_policy_seqno+0x9/0x20 [ 27.442772] [] ? selinux_file_permission+0x82/0x460 [ 27.449415] [] ? security_file_permission+0x89/0x1e0 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 27.456144] [] ? rw_verify_area+0xe5/0x2b0 [ 27.462092] [] vfs_read+0x11e/0x380 [ 27.467345] [] SyS_read+0xd9/0x1b0 [ 27.472509] [] ? vfs_copy_file_range+0x740/0x740 [ 27.478891] [] ? do_syscall_64+0x48/0x490 [ 27.484666] [] ? vfs_copy_file_range+0x740/0x740 [ 27.491046] [] do_syscall_64+0x1a4/0x490 [ 27.496733] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb executing program executing program executing program executing program executing program executing program executing program executing program [ 27.503630] Code: e9 27 fc ff ff 0f 1f 44 00 00 48 b8 00 00 00 00 00 fc ff df 55 48 89 e5 53 48 89 fb 48 83 c7 1c 48 89 fa 48 83 ec 08 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 3d [ 27.530314] RIP [] __free_pages+0x21/0x80 [ 27.536210] RSP [ 27.541308] ---[ end trace 7028dfddad5cb784 ]--- [ 27.546211] Kernel panic - not syncing: Fatal exception [ 27.551971] Dumping ftrace buffer: [ 27.555484] (ftrace buffer empty) [ 27.559166] Kernel Offset: disabled [ 27.562761] Rebooting in 86400 seconds..