[....] Starting enhanced syslogd: rsyslogd[ 11.474290] audit: type=1400 audit(1513734288.927:5): avc: denied { syslog } for pid=2996 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 15.991450] audit: type=1400 audit(1513734293.444:6): avc: denied { map } for pid=3135 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added 'ci-upstream-mmots-kasan-gce-0,10.128.15.204' (ECDSA) to the list of known hosts. executing program [ 22.298857] audit: type=1400 audit(1513734299.751:7): avc: denied { map } for pid=3149 comm="syzkaller972641" path="/root/syzkaller972641602" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 22.310343] device syz0 entered promiscuous mode [ 22.332207] ------------[ cut here ]------------ [ 22.332227] syz0: caps=(0x00000800000058c1, 0x0000000000000000) len=56 data_len=0 gso_size=3 gso_type=18 ip_summed=0 [ 22.332381] WARNING: CPU: 1 PID: 3149 at net/core/dev.c:2600 skb_warn_bad_offload+0x2bd/0x3c0 [ 22.332388] Kernel panic - not syncing: panic_on_warn set ... [ 22.332388] [ 22.332399] CPU: 1 PID: 3149 Comm: syzkaller972641 Not tainted 4.15.0-rc2-mm1+ #39 [ 22.332405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 22.332410] Call Trace: [ 22.332425] dump_stack+0x194/0x257 [ 22.332441] ? arch_local_irq_restore+0x53/0x53 [ 22.332460] ? vsnprintf+0x1ed/0x1900 [ 22.332481] panic+0x1e4/0x41c [ 22.332493] ? refcount_error_report+0x214/0x214 [ 22.332505] ? show_regs_print_info+0x18/0x18 [ 22.332530] ? __warn+0x1c1/0x200 [ 22.332547] ? skb_warn_bad_offload+0x2bd/0x3c0 [ 22.332557] __warn+0x1dc/0x200 [ 22.332569] ? skb_warn_bad_offload+0x2bd/0x3c0 [ 22.332585] report_bug+0x211/0x2d0 [ 22.332609] fixup_bug.part.11+0x37/0x80 [ 22.332623] do_error_trap+0x2d7/0x3e0 [ 22.332633] ? __down_trylock_console_sem+0x10d/0x1e0 [ 22.332651] ? math_error+0x400/0x400 [ 22.332662] ? vprintk_emit+0x3ea/0x590 [ 22.332696] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 22.332716] do_invalid_op+0x1b/0x20 [ 22.332726] invalid_op+0x22/0x40 [ 22.332735] RIP: 0010:skb_warn_bad_offload+0x2bd/0x3c0 [ 22.332741] RSP: 0018:ffff8801c42970f8 EFLAGS: 00010286 [ 22.332753] RAX: dffffc0000000008 RBX: ffff8801c29a02c0 RCX: ffffffff815a03fe [ 22.332759] RDX: 0000000000000000 RSI: 1ffff10038503973 RDI: 0000000000000293 [ 22.332766] RBP: ffff8801c4297150 R08: 1ffff10038852db2 R09: 0000000000000000 [ 22.332773] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 22.332780] R13: ffff8801c29a02c0 R14: ffff8801c4b7ce58 R15: 0000000000000012 [ 22.332803] ? vprintk_func+0x5e/0xc0 [ 22.332822] ? skb_warn_bad_offload+0x2bd/0x3c0 [ 22.332848] __skb_gso_segment+0x612/0x800 [ 22.332865] ? skb_mac_gso_segment+0x660/0x660 [ 22.332881] ? lock_downgrade+0x980/0x980 [ 22.332904] validate_xmit_skb+0x4ba/0xb20 [ 22.332928] ? netif_skb_features+0x8e0/0x8e0 [ 22.332942] ? do_raw_spin_trylock+0x190/0x190 [ 22.332965] validate_xmit_skb_list+0xb7/0x120 [ 22.332987] sch_direct_xmit+0x3b6/0x6d0 [ 22.333009] ? dev_deactivate_queue.constprop.29+0x260/0x260 [ 22.333038] __dev_queue_xmit+0x16eb/0x2070 [ 22.333066] ? netdev_pick_tx+0x300/0x300 [ 22.333082] ? lock_release+0xda0/0xda0 [ 22.333093] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 22.333103] ? refcount_add+0x24/0x60 [ 22.333119] ? skb_set_owner_w+0x232/0x330 [ 22.333138] ? __might_sleep+0x95/0x190 [ 22.333152] ? kasan_check_write+0x14/0x20 [ 22.333163] ? copyin+0x91/0xb0 [ 22.333179] ? _copy_from_iter+0x367/0xf30 [ 22.333196] ? __check_object_size+0x25d/0x4f0 [ 22.333215] ? check_stack_object+0x140/0x140 [ 22.333235] ? copy_page_to_iter+0xe10/0xe10 [ 22.333250] ? _copy_from_iter_full+0x22b/0xbb0 [ 22.333273] ? skb_copy_datagram_from_iter+0x3a5/0x5a0 [ 22.333286] ? iov_iter_advance+0x13f0/0x13f0 [ 22.333295] ? _cond_resched+0x14/0x30 [ 22.333308] ? clear_huge_page+0x309/0x730 [ 22.333328] dev_queue_xmit+0x17/0x20 [ 22.333343] packet_sendmsg+0x3ab1/0x6060 [ 22.333366] ? lock_downgrade+0x980/0x980 [ 22.333382] ? __lock_acquire+0x6e9/0x47f0 [ 22.333394] ? is_bpf_text_address+0xa4/0x120 [ 22.333435] ? packet_cached_dev_get+0x2b0/0x2b0 [ 22.333455] ? avc_has_perm+0x43e/0x680 [ 22.333475] ? avc_has_perm_noaudit+0x520/0x520 [ 22.333482] ? check_noncircular+0x20/0x20 [ 22.333496] ? __raw_spin_lock_init+0x2d/0x100 [ 22.333518] ? find_held_lock+0x39/0x1d0 [ 22.333548] ? lock_downgrade+0x980/0x980 [ 22.333562] ? avc_has_perm+0xd0/0x680 [ 22.333581] ? sock_has_perm+0x29c/0x400 [ 22.333597] ? selinux_secmark_relabel_packet+0xc0/0xc0 [ 22.333608] ? find_held_lock+0x39/0x1d0 [ 22.333652] ? security_socket_sendmsg+0x89/0xb0 [ 22.333663] ? packet_cached_dev_get+0x2b0/0x2b0 [ 22.333677] sock_sendmsg+0xca/0x110 [ 22.333692] sock_write_iter+0x320/0x5e0 [ 22.333706] ? sock_sendmsg+0x110/0x110 [ 22.333735] ? iov_iter_init+0xaf/0x1d0 [ 22.333753] __vfs_write+0x68a/0x970 [ 22.333772] ? kernel_read+0x120/0x120 [ 22.333781] ? bpf_fd_pass+0x280/0x280 [ 22.333799] ? _cond_resched+0x14/0x30 [ 22.333818] ? selinux_file_permission+0x82/0x460 [ 22.333845] ? rw_verify_area+0xe5/0x2b0 [ 22.333857] ? __fdget_raw+0x20/0x20 [ 22.333872] vfs_write+0x18f/0x510 [ 22.333892] SyS_write+0xef/0x220 [ 22.333901] ? lockdep_sys_exit+0x47/0xf0 [ 22.333919] ? SyS_read+0x220/0x220 [ 22.333928] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 22.333943] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 22.333966] entry_SYSCALL_64_fastpath+0x1f/0x96 [ 22.333975] RIP: 0033:0x4442c9 [ 22.333981] RSP: 002b:00007ffcc3e70d88 EFLAGS: 00000297 ORIG_RAX: 0000000000000001 [ 22.333994] RAX: ffffffffffffffda RBX: 00000000004002e0 RCX: 00000000004442c9 [ 22.334001] RDX: 0000000000000042 RSI: 00000000204f0000 RDI: 0000000000000005 [ 22.334008] RBP: 00000000006ce018 R08: 00007ffcc3e70f08 R09: 00007ffc00001e32 [ 22.334014] R10: 000000000000000f R11: 0000000000000297 R12: 0000000000401fb0 [ 22.334021] R13: 0000000000402040 R14: 0000000000000000 R15: 0000000000000000 [ 22.334614] Dumping ftrace buffer: [ 22.334660] (ftrace buffer empty) [ 22.334664] Kernel Offset: disabled [ 22.842266] Rebooting in 86400 seconds..