[ 10.367555] audit: type=1400 audit(1515392093.013:5): avc: denied { syslog } for pid=3314 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 16.036702] audit: type=1400 audit(1515392098.682:6): avc: denied { map } for pid=3454 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.14' (ECDSA) to the list of known hosts. executing program executing program [ 22.157565] audit: type=1400 audit(1515392104.803:7): avc: denied { map } for pid=3468 comm="syzkaller619543" path="/root/syzkaller619543140" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 22.192583] audit: type=1400 audit(1515392104.838:8): avc: denied { prog_load } for pid=3468 comm="syzkaller619543" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 22.192780] FAULT_INJECTION: forcing a failure. [ 22.192780] name failslab, interval 1, probability 0, space 0, times 1 [ 22.192790] CPU: 0 PID: 3468 Comm: syzkaller619543 Not tainted 4.15.0-rc6-next-20180108+ #90 [ 22.192793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 22.192796] Call Trace: [ 22.192807] dump_stack+0x137/0x198 [ 22.192825] should_fail+0x4d4/0x580 [ 22.192841] should_failslab+0xec/0x120 [ 22.192850] __kmalloc+0x63/0x760 [ 22.192867] ? bpf_check+0x1254/0x5580 [ 22.192881] bpf_check+0x1254/0x5580 [ 22.192900] ? bpf_prog_load+0x7cc/0x1260 [ 22.192912] ? do_check+0x9760/0x9760 [ 22.192928] ? memset+0x31/0x40 [ 22.192938] ? bpf_obj_name_cpy+0x199/0x1f0 [ 22.192954] bpf_prog_load+0xbb2/0x1260 [ 22.192966] ? bpf_prog_new_fd+0x50/0x50 [ 22.192982] ? avc_has_perm_noaudit+0x420/0x420 [ 22.192998] ? __might_fault+0x110/0x1d0 [ 22.193011] ? lock_downgrade+0x860/0x860 [ 22.193015] ? __might_fault+0xe0/0x1d0 [ 22.193038] ? selinux_bpf+0xc3/0x110 [ 22.193047] ? security_bpf+0x89/0xb0 [ 22.193060] SyS_bpf+0x861/0x32e0 [ 22.193074] ? bpf_prog_get+0x20/0x20 [ 22.193086] ? __sb_end_write+0xa0/0xd0 [ 22.193095] ? vfs_write+0x224/0x510 [ 22.193127] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 22.193146] entry_SYSCALL_64_fastpath+0x23/0x9a [ 22.193151] RIP: 0033:0x4406e9 [ 22.193154] RSP: 002b:00007ffd20275c18 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 22.193160] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000004406e9 [ 22.193163] RDX: 0000000000000048 RSI: 0000000020000000 RDI: 0000000000000005 [ 22.193166] RBP: 0000000000000004 R08: 0000000000000002 R09: 00007ffd20003032 [ 22.193169] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 22.193172] R13: ffffffffffffffff R14: 656c6c616b7a7973 R15: 0000000000000000 [ 22.197892] FAULT_INJECTION: forcing a failure. [ 22.197892] name failslab, interval 1, probability 0, space 0, times 0 [ 22.197900] CPU: 0 PID: 3468 Comm: syzkaller619543 Not tainted 4.15.0-rc6-next-20180108+ #90 [ 22.197903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 22.197905] Call Trace: [ 22.197918] dump_stack+0x137/0x198 [ 22.197936] should_fail+0x4d4/0x580 [ 22.197953] should_failslab+0xec/0x120 [ 22.197962] kmem_cache_alloc_trace+0x4b/0x750 [ 22.197972] ? kasan_kmalloc+0xad/0xe0 [ 22.197980] ? do_check+0x53c/0x9760 [ 22.197996] copy_verifier_state+0x3f0/0x590 [ 22.198019] do_check+0x55c/0x9760 [ 22.198024] ? save_stack+0xa3/0xd0 [ 22.198032] ? save_stack+0x43/0xd0 [ 22.198038] ? kasan_slab_free+0xe/0x10 [ 22.198041] ? kfree+0xd9/0x260 [ 22.198045] ? bpf_check+0x307a/0x5580 [ 22.198051] ? SyS_bpf+0x861/0x32e0 [ 22.198071] ? debug_check_no_obj_freed+0x2d1/0xac3 [ 22.198087] ? check_mem_access+0x2600/0x2600 [ 22.198102] ? trace_hardirqs_off+0xd/0x10 [ 22.198110] ? _raw_spin_unlock_irqrestore+0xa6/0xba [ 22.198119] ? debug_check_no_obj_freed+0x2d1/0xac3 [ 22.198126] ? __lock_is_held+0xb6/0x140 [ 22.198143] ? free_verifier_state+0x130/0x130 [ 22.198154] ? mark_held_locks+0xaf/0x100 [ 22.198162] ? kfree+0xf3/0x260 [ 22.198167] ? bpf_check+0x307a/0x5580 [ 22.198175] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 22.198194] bpf_check+0x3087/0x5580 [ 22.198222] ? do_check+0x9760/0x9760 [ 22.198239] ? memset+0x31/0x40 [ 22.198248] ? bpf_obj_name_cpy+0x199/0x1f0 [ 22.198265] bpf_prog_load+0xbb2/0x1260 [ 22.198277] ? bpf_prog_new_fd+0x50/0x50 [ 22.198292] ? avc_has_perm_noaudit+0x420/0x420 [ 22.198308] ? __might_fault+0x110/0x1d0 [ 22.198315] ? lock_downgrade+0x860/0x860 [ 22.198319] ? __might_fault+0xe0/0x1d0 [ 22.198343] ? selinux_bpf+0xc3/0x110 [ 22.198352] ? security_bpf+0x89/0xb0 [ 22.198365] SyS_bpf+0x861/0x32e0 [ 22.198380] ? bpf_prog_get+0x20/0x20 [ 22.198390] ? __sb_end_write+0xa0/0xd0 [ 22.198399] ? vfs_write+0x224/0x510 [ 22.198430] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 22.198449] entry_SYSCALL_64_fastpath+0x23/0x9a [ 22.198454] RIP: 0033:0x4406e9 [ 22.198457] RSP: 002b:00007ffd20275c18 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 22.198463] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000004406e9 [ 22.198466] RDX: 0000000000000048 RSI: 0000000020000000 RDI: 0000000000000005 [ 22.198469] RBP: 0000000000000006 R08: 0000000000000002 R09: 00007ffd20003032 [ 22.198472] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 22.198475] R13: ffffffffffffffff R14: 656c6c616b7a7973 R15: 0000000000000004 [ 22.198605] kasan: CONFIG_KASAN_INLINE enabled [ 22.198609] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 22.198614] general protection fault: 0000 [#1] SMP KASAN [ 22.198618] Dumping ftrace buffer: [ 22.198622] (ftrace buffer empty) [ 22.198624] Modules linked in: [ 22.198630] CPU: 0 PID: 3468 Comm: syzkaller619543 Not tainted 4.15.0-rc6-next-20180108+ #90 [ 22.198633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 22.198638] RIP: 0010:free_verifier_state+0x6d/0x130 [ 22.198640] RSP: 0018:ffff8801d48f77b8 EFLAGS: 00010206 [ 22.198644] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 1ffff1003b6384a0 [ 22.198647] RDX: 0000000000000000 RSI: 0000000000000071 RDI: 0000000000000388 [ 22.198649] RBP: ffff8801d48f7800 R08: ffff8801db427d00 R09: 0000000000000000 [ 22.198652] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8801db1c2500 [ 22.198654] R13: dffffc0000000000 R14: ffff8801db1c2500 R15: ffff8801db1c2500 [ 22.198658] FS: 000000000254e880(0000) GS:ffff8801db400000(0000) knlGS:0000000000000000 [ 22.198661] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 22.198668] CR2: 0000000020386000 CR3: 00000001cb32e002 CR4: 00000000001606f0 [ 22.198673] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 22.198675] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 22.198677] Call Trace: [ 22.198691] do_check+0x2442/0x9760 [ 22.198696] ? save_stack+0xa3/0xd0 [ 22.198702] ? save_stack+0x43/0xd0 [ 22.198707] ? kasan_slab_free+0xe/0x10 [ 22.198711] ? kfree+0xd9/0x260 [ 22.198715] ? bpf_check+0x307a/0x5580 [ 22.198719] ? SyS_bpf+0x861/0x32e0 [ 22.198734] ? debug_check_no_obj_freed+0x2d1/0xac3 [ 22.198747] ? check_mem_access+0x2600/0x2600 [ 22.198757] ? trace_hardirqs_off+0xd/0x10 [ 22.198763] ? _raw_spin_unlock_irqrestore+0xa6/0xba [ 22.198770] ? debug_check_no_obj_freed+0x2d1/0xac3 [ 22.198776] ? __lock_is_held+0xb6/0x140 [ 22.198789] ? free_verifier_state+0x130/0x130 [ 22.198798] ? mark_held_locks+0xaf/0x100 [ 22.198804] ? kfree+0xf3/0x260 [ 22.198809] ? bpf_check+0x307a/0x5580 [ 22.198815] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 22.198830] bpf_check+0x3087/0x5580 [ 22.198851] ? do_check+0x9760/0x9760 [ 22.198864] ? memset+0x31/0x40 [ 22.198872] ? bpf_obj_name_cpy+0x199/0x1f0 [ 22.198885] bpf_prog_load+0xbb2/0x1260 [ 22.198894] ? bpf_prog_new_fd+0x50/0x50 [ 22.198906] ? avc_has_perm_noaudit+0x420/0x420 [ 22.198918] ? __might_fault+0x110/0x1d0 [ 22.198924] ? lock_downgrade+0x860/0x860 [ 22.198928] ? __might_fault+0xe0/0x1d0 [ 22.198946] ? selinux_bpf+0xc3/0x110 [ 22.198952] ? security_bpf+0x89/0xb0 [ 22.198963] SyS_bpf+0x861/0x32e0 [ 22.198975] ? bpf_prog_get+0x20/0x20 [ 22.198983] ? __sb_end_write+0xa0/0xd0 [ 22.198990] ? vfs_write+0x224/0x510 [ 22.199016] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 22.199031] entry_SYSCALL_64_fastpath+0x23/0x9a [ 22.199034] RIP: 0033:0x4406e9 [ 22.199036] RSP: 002b:00007ffd20275c18 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 22.199041] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000004406e9 [ 22.199044] RDX: 0000000000000048 RSI: 0000000020000000 RDI: 0000000000000005 [ 22.199046] RBP: 0000000000000006 R08: 0000000000000002 R09: 00007ffd20003032 [ 22.199049] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 22.199051] R13: ffffffffffffffff R14: 656c6c616b7a7973 R15: 0000000000000004 [ 22.199074] Code: 1a 36 f4 ff 4c 89 f1 48 c1 e9 03 42 80 3c 29 00 0f 85 c1 00 00 00 4f 8d 3c fc 49 8b 07 48 8d b8 88 03 00 00 48 89 fe 48 c1 ee 03 <42> 80 3c 2e 00 0f 85 8f 00 00 00 48 8b b8 88 03 00 00 48 89 45 [ 22.199172] RIP: free_verifier_state+0x6d/0x130 RSP: ffff8801d48f77b8 [ 22.199209] ---[ end trace 4b8783cb068d7042 ]--- [ 22.199212] Kernel panic - not syncing: Fatal exception [ 22.215064] Dumping ftrace buffer: [ 22.215067] (ftrace buffer empty) [ 22.215069] Kernel Offset: disabled [ 23.007869] Rebooting in 86400 seconds..