[....] Starting enhanced syslogd: rsyslogd[ 10.903680] audit: type=1400 audit(1514708225.971:5): avc: denied { syslog } for pid=3031 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 16.400972] audit: type=1400 audit(1514708231.468:6): avc: denied { map } for pid=3171 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.15.205' (ECDSA) to the list of known hosts. executing program [ 37.415050] audit: type=1400 audit(1514708252.482:7): avc: denied { map } for pid=3189 comm="syzkaller869912" path="/root/syzkaller869912958" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 37.421714] device syz0 entered promiscuous mode [ 37.452563] ------------[ cut here ]------------ [ 37.457392] syz0: caps=(0x00000800000058c1, 0x0000000000000000) len=28 data_len=0 gso_size=8 gso_type=3 ip_summed=0 [ 37.468097] WARNING: CPU: 1 PID: 3189 at net/core/dev.c:2600 skb_warn_bad_offload+0x2bd/0x3c0 [ 37.476727] Kernel panic - not syncing: panic_on_warn set ... [ 37.476727] [ 37.484053] CPU: 1 PID: 3189 Comm: syzkaller869912 Not tainted 4.15.0-rc5+ #243 [ 37.491463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 37.500784] Call Trace: [ 37.503352] dump_stack+0x194/0x257 [ 37.506960] ? arch_local_irq_restore+0x53/0x53 [ 37.511625] ? vsnprintf+0x1ed/0x1900 [ 37.515404] panic+0x1e4/0x41c [ 37.518565] ? refcount_error_report+0x214/0x214 [ 37.523287] ? show_regs_print_info+0x18/0x18 [ 37.527755] ? __warn+0x1c1/0x200 [ 37.531178] ? skb_warn_bad_offload+0x2bd/0x3c0 [ 37.535813] __warn+0x1dc/0x200 [ 37.539060] ? console_unlock+0x983/0xd80 [ 37.543185] ? skb_warn_bad_offload+0x2bd/0x3c0 [ 37.547824] report_bug+0x211/0x2d0 [ 37.551425] fixup_bug.part.11+0x37/0x80 [ 37.555457] do_error_trap+0x2d7/0x3e0 [ 37.559310] ? __down_trylock_console_sem+0x10d/0x1e0 [ 37.564472] ? math_error+0x400/0x400 [ 37.568238] ? vprintk_emit+0x3ea/0x590 [ 37.572191] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 37.577015] do_invalid_op+0x1b/0x20 [ 37.580696] invalid_op+0x22/0x40 [ 37.584118] RIP: 0010:skb_warn_bad_offload+0x2bd/0x3c0 [ 37.589359] RSP: 0018:ffff8801c6c5f098 EFLAGS: 00010286 [ 37.594692] RAX: dffffc0000000008 RBX: ffff8801c64c8300 RCX: ffffffff8159b75e [ 37.601926] RDX: 0000000000000000 RSI: 1ffff10038d8bdce RDI: ffff8801c6c5eda0 [ 37.609172] RBP: ffff8801c6c5f0f0 R08: 1ffff10038d8bd90 R09: 0000000000000000 [ 37.616410] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 37.623645] R13: ffff8801c64c8300 R14: ffff8801c640cee0 R15: 0000000000000003 [ 37.630898] ? vprintk_func+0x5e/0xc0 [ 37.634672] ? skb_warn_bad_offload+0x2bd/0x3c0 [ 37.639315] __skb_gso_segment+0x612/0x800 [ 37.643516] ? skb_mac_gso_segment+0x660/0x660 [ 37.648071] ? sch_direct_xmit+0xc0/0x6d0 [ 37.652189] validate_xmit_skb+0x4ba/0xb20 [ 37.656388] ? __skb_flow_get_ports+0x400/0x400 [ 37.661027] ? netif_skb_features+0x8e0/0x8e0 [ 37.665492] ? do_raw_spin_trylock+0x190/0x190 [ 37.670038] ? lock_acquire+0x1d5/0x580 [ 37.673980] ? __dev_queue_xmit+0xaeb/0x2370 [ 37.678357] validate_xmit_skb_list+0xb7/0x120 [ 37.682908] sch_direct_xmit+0x3b6/0x6d0 [ 37.686937] ? dev_deactivate_queue.constprop.30+0x260/0x260 [ 37.692712] __dev_queue_xmit+0x196d/0x2370 [ 37.697006] ? netdev_pick_tx+0x300/0x300 [ 37.701122] ? __might_fault+0x110/0x1d0 [ 37.705153] ? lock_downgrade+0x980/0x980 [ 37.709287] ? lock_release+0xa40/0xa40 [ 37.713235] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 37.719093] ? refcount_add+0x24/0x60 [ 37.722866] ? skb_set_owner_w+0x232/0x330 [ 37.727071] ? __might_sleep+0x95/0x190 [ 37.731012] ? kasan_check_write+0x14/0x20 [ 37.735229] ? copyin+0x91/0xb0 [ 37.738479] ? _copy_from_iter+0x367/0xf30 [ 37.742682] ? __check_object_size+0x25d/0x4f0 [ 37.747233] ? check_stack_object+0x140/0x140 [ 37.751695] ? copy_page_to_iter+0xe10/0xe10 [ 37.756069] ? _copy_from_iter_full+0x22b/0xbb0 [ 37.760710] ? skb_copy_datagram_from_iter+0x3a5/0x5a0 [ 37.765953] ? iov_iter_advance+0x13f0/0x13f0 [ 37.770425] dev_queue_xmit+0x17/0x20 [ 37.774195] packet_sendmsg+0x3ad5/0x60a0 [ 37.778316] ? find_held_lock+0x35/0x1d0 [ 37.782356] ? avc_has_perm+0x35e/0x680 [ 37.786313] ? packet_cached_dev_get+0x2b0/0x2b0 [ 37.791033] ? mark_held_locks+0xaf/0x100 [ 37.795150] ? avc_has_perm+0x43e/0x680 [ 37.799093] ? avc_has_perm_noaudit+0x520/0x520 [ 37.803735] ? locks_remove_posix+0x518/0x820 [ 37.808202] ? find_held_lock+0x35/0x1d0 [ 37.812240] ? avc_has_perm+0x35e/0x680 [ 37.816185] ? sock_has_perm+0x2a4/0x420 [ 37.820213] ? selinux_secmark_relabel_packet+0xc0/0xc0 [ 37.825559] ? selinux_socket_sendmsg+0x36/0x40 [ 37.830198] ? security_socket_sendmsg+0x89/0xb0 [ 37.834924] ? packet_cached_dev_get+0x2b0/0x2b0 [ 37.839649] sock_sendmsg+0xca/0x110 [ 37.843331] sock_write_iter+0x31a/0x5d0 [ 37.847361] ? sock_sendmsg+0x110/0x110 [ 37.851310] ? iov_iter_init+0xaf/0x1d0 [ 37.855254] __vfs_write+0x684/0x970 [ 37.858936] ? kernel_read+0x120/0x120 [ 37.862789] ? bpf_fd_pass+0x280/0x280 [ 37.866647] ? _cond_resched+0x14/0x30 [ 37.870504] ? selinux_file_permission+0x82/0x460 [ 37.875320] ? rw_verify_area+0xe5/0x2b0 [ 37.879346] ? __fdget_raw+0x20/0x20 [ 37.883032] vfs_write+0x189/0x510 [ 37.886544] SyS_write+0xef/0x220 [ 37.889965] ? SyS_read+0x220/0x220 [ 37.893566] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 37.898553] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 37.903294] entry_SYSCALL_64_fastpath+0x1f/0x96 [ 37.908021] RIP: 0033:0x4441a9 [ 37.911178] RSP: 002b:00007fff581d1318 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 37.918850] RAX: ffffffffffffffda RBX: 00000000004002e0 RCX: 00000000004441a9 [ 37.926086] RDX: 0000000000000026 RSI: 0000000020384000 RDI: 0000000000000005 [ 37.933321] RBP: 00000000006ce018 R08: 0000000000401e90 R09: 0000000000401e90 [ 37.940557] R10: 0000000000401e90 R11: 0000000000000293 R12: 0000000000401e90 [ 37.947797] R13: 0000000000401f20 R14: 0000000000000000 R15: 0000000000000000 [ 37.955214] Dumping ftrace buffer: [ 37.958769] (ftrace buffer empty) [ 37.962446] Kernel Offset: disabled [ 37.966041] Rebooting in 86400 seconds..