[....] Starting enhanced syslogd: rsyslogd[ 10.897455] audit: type=1400 audit(1514165941.450:5): avc: denied { syslog } for pid=2998 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 16.056739] audit: type=1400 audit(1514165946.609:6): avc: denied { map } for pid=3139 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added 'ci-upstream-kasan-gce-386-1,10.128.0.63' (ECDSA) to the list of known hosts. executing program [ 22.272299] audit: type=1400 audit(1514165952.824:7): avc: denied { map } for pid=3153 comm="syzkaller114448" path="/root/syzkaller114448108" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 22.280338] device syz0 entered promiscuous mode [ 22.306240] ------------[ cut here ]------------ [ 22.306259] syz0: caps=(0x00000800000058c1, 0x0000000000000000) len=28 data_len=0 gso_size=63464 gso_type=7 ip_summed=0 [ 22.306401] WARNING: CPU: 0 PID: 3153 at net/core/dev.c:2600 skb_warn_bad_offload+0x2bd/0x3c0 [ 22.306405] Kernel panic - not syncing: panic_on_warn set ... [ 22.306405] [ 22.306413] CPU: 0 PID: 3153 Comm: syzkaller114448 Not tainted 4.15.0-rc5+ #147 [ 22.306417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 22.306420] Call Trace: [ 22.306430] dump_stack+0x194/0x257 [ 22.306445] ? arch_local_irq_restore+0x53/0x53 [ 22.306461] ? vsnprintf+0x1ed/0x1900 [ 22.306477] panic+0x1e4/0x41c [ 22.306486] ? refcount_error_report+0x214/0x214 [ 22.306495] ? show_regs_print_info+0x18/0x18 [ 22.306515] ? __warn+0x1c1/0x200 [ 22.306530] ? skb_warn_bad_offload+0x2bd/0x3c0 [ 22.306536] __warn+0x1dc/0x200 [ 22.306544] ? skb_warn_bad_offload+0x2bd/0x3c0 [ 22.306556] report_bug+0x211/0x2d0 [ 22.306576] fixup_bug.part.11+0x37/0x80 [ 22.306587] do_error_trap+0x2d7/0x3e0 [ 22.306603] ? math_error+0x400/0x400 [ 22.306610] ? vprintk_emit+0x3ea/0x590 [ 22.306640] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 22.306659] do_invalid_op+0x1b/0x20 [ 22.306668] invalid_op+0x22/0x40 [ 22.306675] RIP: 0010:skb_warn_bad_offload+0x2bd/0x3c0 [ 22.306679] RSP: 0018:ffff8801cd38ef40 EFLAGS: 00010282 [ 22.306685] RAX: dffffc0000000008 RBX: ffff8801c8f302c0 RCX: ffffffff8159b57e [ 22.306690] RDX: 0000000000000000 RSI: 1ffff1003933ed70 RDI: 0000000000000293 [ 22.306694] RBP: ffff8801cd38ef98 R08: 1ffff10039a71d7b R09: 0000000000000000 [ 22.306698] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 22.306702] R13: ffff8801c8f302c0 R14: ffff8801c8f08ca0 R15: 0000000000000007 [ 22.306723] ? vprintk_func+0x5e/0xc0 [ 22.306754] __skb_gso_segment+0x612/0x800 [ 22.306768] ? skb_mac_gso_segment+0x660/0x660 [ 22.306786] ? sch_direct_xmit+0xc0/0x6d0 [ 22.306799] validate_xmit_skb+0x4ba/0xb20 [ 22.306813] ? netif_skb_features+0x8e0/0x8e0 [ 22.306829] ? do_raw_spin_trylock+0x190/0x190 [ 22.306840] ? lock_acquire+0x1d5/0x580 [ 22.306853] validate_xmit_skb_list+0xb7/0x120 [ 22.306868] sch_direct_xmit+0x3b6/0x6d0 [ 22.306884] ? dev_deactivate_queue.constprop.29+0x260/0x260 [ 22.306909] __dev_queue_xmit+0x16f4/0x2070 [ 22.306930] ? netdev_pick_tx+0x300/0x300 [ 22.306942] ? lock_release+0xa40/0xa40 [ 22.306951] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 22.306961] ? refcount_add+0x24/0x60 [ 22.306972] ? skb_set_owner_w+0x232/0x330 [ 22.306989] ? __might_sleep+0x95/0x190 [ 22.307005] ? kasan_check_write+0x14/0x20 [ 22.307011] ? copyin+0x91/0xb0 [ 22.307025] ? _copy_from_iter+0x367/0xf30 [ 22.307056] ? __check_object_size+0x25d/0x4f0 [ 22.307072] ? check_stack_object+0x140/0x140 [ 22.307088] ? copy_page_to_iter+0xe10/0xe10 [ 22.307100] ? _copy_from_iter_full+0x22b/0xbb0 [ 22.307119] ? skb_copy_datagram_from_iter+0x3a5/0x5a0 [ 22.307129] ? iov_iter_advance+0x13f0/0x13f0 [ 22.307151] dev_queue_xmit+0x17/0x20 [ 22.307161] packet_sendmsg+0x3ad5/0x60a0 [ 22.307176] ? find_held_lock+0x35/0x1d0 [ 22.307199] ? avc_has_perm+0x35e/0x680 [ 22.307226] ? do_raw_spin_trylock+0x8/0x190 [ 22.307242] ? packet_cached_dev_get+0x2b0/0x2b0 [ 22.307262] ? avc_has_perm+0x43e/0x680 [ 22.307278] ? avc_has_perm_noaudit+0x520/0x520 [ 22.307289] ? __thp_get_unmapped_area+0x130/0x130 [ 22.307297] ? __lock_acquire+0x664/0x3e00 [ 22.307304] ? __lock_acquire+0x664/0x3e00 [ 22.307319] ? locks_remove_posix+0x518/0x820 [ 22.307338] ? find_held_lock+0x35/0x1d0 [ 22.307360] ? avc_has_perm+0x35e/0x680 [ 22.307375] ? sock_has_perm+0x2a4/0x420 [ 22.307389] ? selinux_secmark_relabel_packet+0xc0/0xc0 [ 22.307431] ? selinux_socket_sendmsg+0x36/0x40 [ 22.307440] ? security_socket_sendmsg+0x89/0xb0 [ 22.307449] ? packet_cached_dev_get+0x2b0/0x2b0 [ 22.307462] sock_sendmsg+0xca/0x110 [ 22.307475] sock_write_iter+0x31a/0x5d0 [ 22.307488] ? sock_sendmsg+0x110/0x110 [ 22.307513] ? iov_iter_init+0xaf/0x1d0 [ 22.307530] __vfs_write+0x684/0x970 [ 22.307544] ? kernel_read+0x120/0x120 [ 22.307551] ? bpf_fd_pass+0x280/0x280 [ 22.307569] ? _cond_resched+0x14/0x30 [ 22.307586] ? selinux_file_permission+0x82/0x460 [ 22.307611] ? rw_verify_area+0xe5/0x2b0 [ 22.307620] ? __fdget_raw+0x20/0x20 [ 22.307634] vfs_write+0x189/0x510 [ 22.307651] SyS_write+0xef/0x220 [ 22.307660] ? __do_page_fault+0x3d6/0xc90 [ 22.307673] ? SyS_read+0x220/0x220 [ 22.307686] ? do_fast_syscall_32+0x156/0xf9d [ 22.307700] ? SyS_read+0x220/0x220 [ 22.307710] do_fast_syscall_32+0x3ee/0xf9d [ 22.307731] ? do_int80_syscall_32+0x9d0/0x9d0 [ 22.307740] ? kasan_check_read+0x11/0x20 [ 22.307753] ? syscall_return_slowpath+0x550/0x550 [ 22.307764] ? SyS_rt_sigaction+0x94/0x1b0 [ 22.307775] ? SyS_sigprocmask+0x4b0/0x4b0 [ 22.307781] ? SyS_read+0x184/0x220 [ 22.307791] ? retint_user+0x18/0x18 [ 22.307808] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 22.307830] entry_SYSENTER_compat+0x54/0x63 [ 22.307836] RIP: 0023:0xf7f1ac79 [ 22.307840] RSP: 002b:00000000ff99276c EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 22.307848] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020217f75 [ 22.307853] RDX: 0000000000000026 RSI: 00000000080ef00c RDI: 000000000000003f [ 22.307857] RBP: 0000000000001000 R08: 0000000000000000 R09: 0000000000000000 [ 22.307861] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 22.307865] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 22.308057] Dumping ftrace buffer: [ 22.308096] (ftrace buffer empty) [ 22.308098] Kernel Offset: disabled [ 22.844679] Rebooting in 86400 seconds..