[....] Starting enhanced syslogd: rsyslogd[ 13.493743] audit: type=1400 audit(1516003663.394:5): avc: denied { syslog } for pid=3508 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 19.473834] audit: type=1400 audit(1516003669.374:6): avc: denied { map } for pid=3648 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.47' (ECDSA) to the list of known hosts. [ 25.707675] audit: type=1400 audit(1516003675.608:7): avc: denied { map } for pid=3662 comm="syzkaller833331" path="/root/syzkaller833331241" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 25.733634] audit: type=1400 audit(1516003675.612:8): avc: denied { sys_admin } for pid=3662 comm="syzkaller833331" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 25.924400] audit: type=1400 audit(1516003675.825:9): avc: denied { sys_chroot } for pid=3663 comm="syzkaller833331" capability=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 25.931862] device syz0 entered promiscuous mode [ 25.932928] ------------[ cut here ]------------ [ 25.932934] PF_CAN: dropped non conform CAN FD skbuf: dev type 65534, len 128, datalen 0 [ 25.933100] WARNING: CPU: 1 PID: 3663 at net/can/af_can.c:750 canfd_rcv+0x1c5/0x200 [ 25.933105] Kernel panic - not syncing: panic_on_warn set ... [ 25.933105] [ 25.933112] CPU: 1 PID: 3663 Comm: syzkaller833331 Not tainted 4.15.0-rc8+ #173 [ 25.933116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 25.933119] Call Trace: [ 25.933130] dump_stack+0x194/0x257 [ 25.933143] ? arch_local_irq_restore+0x53/0x53 [ 25.933159] ? vsnprintf+0x1ed/0x1900 [ 25.933174] panic+0x1e4/0x41c [ 25.933183] ? refcount_error_report+0x214/0x214 [ 25.933191] ? show_regs_print_info+0x18/0x18 [ 25.933210] ? __warn+0x1c1/0x200 [ 25.933223] ? canfd_rcv+0x1c5/0x200 [ 25.933229] __warn+0x1dc/0x200 [ 25.933237] ? canfd_rcv+0x1c5/0x200 [ 25.933249] report_bug+0x211/0x2d0 [ 25.933267] fixup_bug.part.11+0x37/0x80 [ 25.933277] do_error_trap+0x2d7/0x3e0 [ 25.933284] ? __down_trylock_console_sem+0x10d/0x1e0 [ 25.933298] ? math_error+0x400/0x400 [ 25.933305] ? vprintk_emit+0x3ea/0x590 [ 25.933331] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 25.933347] do_invalid_op+0x1b/0x20 [ 25.933354] invalid_op+0x22/0x40 [ 25.933360] RIP: 0010:canfd_rcv+0x1c5/0x200 [ 25.933364] RSP: 0018:ffff8801bb38eed8 EFLAGS: 00010286 [ 25.933371] RAX: dffffc0000000008 RBX: ffff8801bb2330c0 RCX: ffffffff8159dade [ 25.933376] RDX: 0000000000000000 RSI: ffff8801bb0f4bf8 RDI: 0000000000000293 [ 25.933379] RBP: ffff8801bb38ef00 R08: 0000000000000000 R09: 0000000000000000 [ 25.933384] R10: ffff8801bb38f418 R11: 0000000000000000 R12: ffff8801bb2d8380 [ 25.933388] R13: ffff8801bb24e2c0 R14: 000000000000fffe R15: ffffffff8704d7c0 [ 25.933408] ? vprintk_func+0x5e/0xc0 [ 25.933424] ? canfd_rcv+0x1c5/0x200 [ 25.933431] ? can_rcv+0x200/0x200 [ 25.933443] __netif_receive_skb_core+0x1a41/0x3460 [ 25.933450] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 25.933472] ? nf_ingress+0x9f0/0x9f0 [ 25.933502] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 25.933511] ? is_bpf_text_address+0x7b/0x120 [ 25.933536] ? check_noncircular+0x20/0x20 [ 25.933544] ? __skb_flow_get_ports+0x420/0x420 [ 25.933552] ? __lock_is_held+0xb6/0x140 [ 25.933577] ? find_held_lock+0x35/0x1d0 [ 25.933595] ? find_held_lock+0x35/0x1d0 [ 25.933620] ? lock_downgrade+0x980/0x980 [ 25.933643] ? pvclock_read_flags+0x160/0x160 [ 25.933663] ? lock_acquire+0x1d5/0x580 [ 25.933668] ? lock_acquire+0x1d5/0x580 [ 25.933676] ? netif_receive_skb_internal+0xa2/0x670 [ 25.933685] ? ktime_get_with_offset+0x2c1/0x420 [ 25.933700] ? lock_release+0xa40/0xa40 [ 25.933706] ? do_gettimeofday+0x190/0x190 [ 25.933719] ? debug_object_fixup+0x30/0x30 [ 25.933725] ? find_held_lock+0x35/0x1d0 [ 25.933743] __netif_receive_skb+0x2c/0x1b0 [ 25.933749] ? __netif_receive_skb+0x2c/0x1b0 [ 25.933761] netif_receive_skb_internal+0x10b/0x670 [ 25.933771] ? dev_cpu_dead+0xb00/0xb00 [ 25.933787] ? __do_once_done+0xf2/0x300 [ 25.933797] ? rcu_pm_notify+0xc0/0xc0 [ 25.933826] netif_receive_skb+0xae/0x390 [ 25.933836] ? netif_receive_skb_internal+0x670/0x670 [ 25.933857] ? __skb_get_hash_symmetric+0xd1/0xa70 [ 25.933867] ? tun_rx_batched.isra.50+0x5c4/0x870 [ 25.933882] tun_rx_batched.isra.50+0x5ee/0x870 [ 25.933889] ? skb_probe_transport_header.constprop.68+0x14a/0x2f0 [ 25.933903] ? tun_sock_write_space+0x370/0x370 [ 25.933938] tun_get_user+0x24ac/0x3710 [ 25.933979] ? tun_build_skb.isra.48+0x17d0/0x17d0 [ 25.933995] ? lock_release+0xa40/0xa40 [ 25.934006] ? do_raw_spin_trylock+0x190/0x190 [ 25.934018] ? _raw_spin_unlock_irq+0x27/0x70 [ 25.934050] ? tun_get+0x1ab/0x2e0 [ 25.934069] ? lock_release+0xa40/0xa40 [ 25.934082] ? __lock_is_held+0xb6/0x140 [ 25.934109] ? tun_get+0x1d4/0x2e0 [ 25.934117] ? tun_chr_close+0x60/0x60 [ 25.934141] tun_chr_write_iter+0xb9/0x160 [ 25.934154] __vfs_write+0x684/0x970 [ 25.934169] ? kernel_read+0x120/0x120 [ 25.934184] ? _cond_resched+0x14/0x30 [ 25.934197] ? avc_policy_seqno+0x9/0x20 [ 25.934204] ? selinux_file_permission+0x82/0x460 [ 25.934228] ? rw_verify_area+0xe5/0x2b0 [ 25.934233] ? __fdget_raw+0x20/0x20 [ 25.934247] vfs_write+0x189/0x510 [ 25.934262] SyS_write+0xef/0x220 [ 25.934269] ? exit_to_usermode_loop+0x198/0x310 [ 25.934281] ? SyS_read+0x220/0x220 [ 25.934292] ? do_fast_syscall_32+0x156/0xf9d [ 25.934306] ? SyS_read+0x220/0x220 [ 25.934315] do_fast_syscall_32+0x3ee/0xf9d [ 25.934334] ? do_int80_syscall_32+0x9d0/0x9d0 [ 25.934355] ? syscall_return_slowpath+0x2ad/0x550 [ 25.934364] ? prepare_exit_to_usermode+0x340/0x340 [ 25.934374] ? sysret32_from_system_call+0x5/0x3b [ 25.934390] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 25.934409] entry_SYSENTER_compat+0x54/0x63 [ 25.934414] RIP: 0023:0xf7fddc79 [ 25.934418] RSP: 002b:000000000820ff3c EFLAGS: 00000297 ORIG_RAX: 0000000000000004 [ 25.934424] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020ab08cd [ 25.934428] RDX: 0000000000000084 RSI: 0000000010002100 RDI: 00000000000023dd [ 25.934432] RBP: 000000000000664d R08: 0000000000000000 R09: 0000000000000000 [ 25.934436] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 25.934440] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 25.950066] Dumping ftrace buffer: [ 25.950096] (ftrace buffer empty) [ 25.950099] Kernel Offset: disabled [ 26.471137] Rebooting in 86400 seconds..