[....] Starting enhanced syslogd: rsyslogd[ 16.696597] audit: type=1400 audit(1522008288.043:5): avc: denied { syslog } for pid=4085 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 22.739528] audit: type=1400 audit(1522008294.086:6): avc: denied { map } for pid=4226 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.38' (ECDSA) to the list of known hosts. [ 29.120970] audit: type=1400 audit(1522008300.467:7): avc: denied { map } for pid=4240 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16479 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2018/03/25 20:05:00 parsed 1 programs 2018/03/25 20:05:00 executed programs: 0 [ 29.388873] audit: type=1400 audit(1522008300.733:8): avc: denied { map } for pid=4240 comm="syz-execprog" path="/root/syzkaller-shm807968202" dev="sda1" ino=16483 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 29.424084] audit: type=1400 audit(1522008300.770:9): avc: denied { sys_admin } for pid=4245 comm="syz-executor3" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 29.430683] IPVS: ftp: loaded support on port[0] = 21 [ 29.498608] IPVS: ftp: loaded support on port[0] = 21 [ 29.506618] audit: type=1400 audit(1522008300.853:10): avc: denied { sys_chroot } for pid=4247 comm="syz-executor3" capability=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 29.531089] audit: type=1400 audit(1522008300.853:11): avc: denied { net_admin } for pid=4247 comm="syz-executor3" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 29.565767] kasan: CONFIG_KASAN_INLINE enabled [ 29.570494] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 29.577899] general protection fault: 0000 [#1] SMP KASAN [ 29.581267] IPVS: ftp: loaded support on port[0] = 21 [ 29.583419] Dumping ftrace buffer: [ 29.583423] (ftrace buffer empty) [ 29.583429] Modules linked in: [ 29.598987] CPU: 0 PID: 4264 Comm: syz-executor3 Not tainted 4.16.0-rc6+ #280 [ 29.606243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 29.613170] IPVS: ftp: loaded support on port[0] = 21 [ 29.615585] RIP: 0010:tipc_sk_fill_sock_diag+0x42d/0xc00 [ 29.615592] RSP: 0018:ffff8801b5df6ff0 EFLAGS: 00010206 [ 29.631524] RAX: 0000000000000000 RBX: 1ffff10036bbee04 RCX: 000000000000002b [ 29.638777] RDX: dffffc0000000000 RSI: 1ffff100365d4977 RDI: 0000000000000158 [ 29.645125] IPVS: ftp: loaded support on port[0] = 21 [ 29.646027] RBP: ffff8801b5df72a8 R08: 1ffff10036bbedbf R09: 0000000000000000 [ 29.646032] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8801d1634040 [ 29.646036] R13: ffff8801c1b18080 R14: ffff8801b5df7280 R15: 0000000000000000 [ 29.646043] FS: 00007feca3ebe700(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 [ 29.676039] IPVS: ftp: loaded support on port[0] = 21 [ 29.681147] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.681152] CR2: 0000000020005000 CR3: 00000001c8532002 CR4: 00000000001606f0 [ 29.681161] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.706684] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 29.713935] Call Trace: [ 29.716265] IPVS: ftp: loaded support on port[0] = 21 [ 29.716508] ? tipc_diag_dump+0x30/0x30 [ 29.725620] ? __tipc_nl_add_sk+0x3e0/0x3e0 [ 29.729934] ? save_stack+0xa3/0xd0 [ 29.733551] ? save_stack+0x43/0xd0 [ 29.737167] ? kasan_kmalloc+0xad/0xe0 [ 29.741040] ? trace_hardirqs_off+0x10/0x10 [ 29.745348] ? netlink_dump+0x545/0xcf0 [ 29.746272] IPVS: ftp: loaded support on port[0] = 21 [ 29.749303] ? netlink_rcv_skb+0x14b/0x380 [ 29.749309] ? sock_diag_rcv+0x2a/0x40 [ 29.749317] ? netlink_unicast+0x4c4/0x6b0 [ 29.766766] ? netlink_sendmsg+0xa4a/0xe60 [ 29.770989] ? sock_sendmsg+0xca/0x110 [ 29.774865] ? __sys_sendmsg+0xe5/0x210 [ 29.778826] ? do_syscall_64+0x281/0x940 [ 29.782867] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 29.788204] ? lock_release+0xa40/0xa40 [ 29.792151] ? lock_acquire+0x1d5/0x580 [ 29.796093] ? trace_hardirqs_off+0x10/0x10 [ 29.800381] ? lock_acquire+0x1d5/0x580 [ 29.804326] ? tipc_nl_sk_walk+0x53d/0xb60 [ 29.808529] ? tipc_nl_sk_walk+0x2bd/0xb60 [ 29.812736] ? lock_release+0xa40/0xa40 [ 29.816679] ? skb_put+0x155/0x1d0 [ 29.820188] ? memset+0x31/0x40 [ 29.823438] ? __nlmsg_put+0x14c/0x1b0 [ 29.827297] __tipc_add_sock_diag+0x20e/0x330 [ 29.831764] tipc_nl_sk_walk+0x565/0xb60 [ 29.835796] ? tipc_sock_diag_handler_dump+0x2c0/0x2c0 [ 29.841048] ? tipc_release+0xff0/0xff0 [ 29.844994] ? skb_copy_and_csum_dev+0x370/0x370 [ 29.849727] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 29.854540] ? sock_diag_rcv+0x1b/0x40 [ 29.858398] ? lock_downgrade+0x980/0x980 [ 29.862514] ? wait_for_completion+0x770/0x770 [ 29.867070] ? mutex_lock_io_nested+0x1900/0x1900 [ 29.871886] tipc_diag_dump+0x24/0x30 [ 29.875661] netlink_dump+0x492/0xcf0 [ 29.879432] ? netlink_broadcast+0x50/0x50 [ 29.883640] __netlink_dump_start+0x4ec/0x710 [ 29.888109] tipc_sock_diag_handler_dump+0x206/0x2c0 [ 29.893182] ? __tipc_diag_gen_cookie+0xb0/0xb0 [ 29.897819] ? tipc_unregister_sysctl+0x20/0x20 [ 29.902459] ? netlink_deliver_tap+0x2e9/0xf90 [ 29.907018] sock_diag_rcv_msg+0x204/0x360 [ 29.911227] netlink_rcv_skb+0x14b/0x380 [ 29.915258] ? sock_diag_bind+0x70/0x70 [ 29.919202] ? netlink_ack+0xa10/0xa10 [ 29.923064] ? netlink_skb_destructor+0x1d0/0x1d0 [ 29.927882] sock_diag_rcv+0x2a/0x40 [ 29.931572] netlink_unicast+0x4c4/0x6b0 [ 29.935606] ? netlink_attachskb+0x8a0/0x8a0 [ 29.939987] ? security_netlink_send+0x81/0xb0 [ 29.944543] netlink_sendmsg+0xa4a/0xe60 [ 29.948582] ? netlink_unicast+0x6b0/0x6b0 [ 29.952790] ? security_socket_sendmsg+0x89/0xb0 [ 29.957514] ? netlink_unicast+0x6b0/0x6b0 [ 29.961725] sock_sendmsg+0xca/0x110 [ 29.965408] ___sys_sendmsg+0x767/0x8b0 [ 29.969354] ? copy_msghdr_from_user+0x590/0x590 [ 29.974081] ? __schedule+0x903/0x1ec0 [ 29.977941] ? __sched_text_start+0x8/0x8 [ 29.982062] ? __fget_light+0x2b2/0x3c0 [ 29.986007] ? fget_raw+0x20/0x20 [ 29.989441] ? __fd_install+0x288/0x740 [ 29.993383] ? get_unused_fd_flags+0x190/0x190 [ 29.997943] __sys_sendmsg+0xe5/0x210 [ 30.001713] ? __sys_sendmsg+0xe5/0x210 [ 30.005659] ? SyS_shutdown+0x290/0x290 [ 30.009615] ? exit_to_usermode_loop+0x8c/0x2f0 [ 30.014259] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 30.019768] SyS_sendmsg+0x2d/0x50 [ 30.023277] ? __sys_sendmsg+0x210/0x210 [ 30.027306] do_syscall_64+0x281/0x940 [ 30.031160] ? __do_page_fault+0xc90/0xc90 [ 30.035363] ? _raw_spin_unlock_irq+0x27/0x70 [ 30.039830] ? finish_task_switch+0x1c1/0x7e0 [ 30.044300] ? syscall_return_slowpath+0x550/0x550 [ 30.049198] ? syscall_return_slowpath+0x2ac/0x550 [ 30.054097] ? prepare_exit_to_usermode+0x350/0x350 [ 30.059085] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 30.064424] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 30.069241] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 30.074400] RIP: 0033:0x454879 [ 30.077561] RSP: 002b:00007feca3ebdc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 30.085235] RAX: ffffffffffffffda RBX: 00007feca3ebe6d4 RCX: 0000000000454879 [ 30.092473] RDX: 0000000000000000 RSI: 0000000020005000 RDI: 0000000000000003 [ 30.099709] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 30.106948] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 30.114186] R13: 00000000000004d0 R14: 00000000006f8420 R15: 0000000000000000 [ 30.121433] Code: f9 48 c1 e9 03 80 3c 11 00 0f 85 b5 07 00 00 4d 8b 7f 18 48 ba 00 00 00 00 00 fc ff df 49 8d bf 58 01 00 00 48 89 f9 48 c1 e9 03 <80> 3c 11 00 0f 85 2b 07 00 00 4d 8b bf 58 01 00 00 48 ba 00 00 [ 30.140500] RIP: tipc_sk_fill_sock_diag+0x42d/0xc00 RSP: ffff8801b5df6ff0 [ 30.147435] ---[ end trace cfaeb47d53a959a4 ]--- [ 30.152174] Kernel panic - not syncing: Fatal exception in interrupt [ 30.159010] Dumping ftrace buffer: [ 30.162526] (ftrace buffer empty) [ 30.166205] Kernel Offset: disabled [ 30.169798] Rebooting in 86400 seconds..