[....] Starting enhanced syslogd: rsyslogd[ 12.107546] audit: type=1400 audit(1520759636.050:4): avc: denied { syslog } for pid=3515 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.1' (ECDSA) to the list of known hosts. 2018/03/11 09:14:12 fuzzer started 2018/03/11 09:14:12 dialing manager at 10.128.0.26:46025 2018/03/11 09:14:16 kcov=true, comps=false 2018/03/11 09:14:18 executing program 1: 2018/03/11 09:14:18 executing program 7: 2018/03/11 09:14:18 executing program 0: 2018/03/11 09:14:18 executing program 2: 2018/03/11 09:14:18 executing program 3: 2018/03/11 09:14:18 executing program 4: r0 = socket$inet6(0xa, 0x805, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x1}, 0x1c) 2018/03/11 09:14:18 executing program 5: syz_emit_ethernet(0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd601e10a500447f00fe8000000000000000000000000000bb00000000000000000000ffff000000000420880b0000000000000800000086dd080088be00000000100000000100000000000000080022de2e62aa4a67eb00000000200000000200000000000000000000000800"], &(0x7f00000001c0)) 2018/03/11 09:14:18 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000d01000)=0x7ff, 0x4) sendto$inet6(r0, &(0x7f0000586000)="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", 0x7f8, 0x4c080, &(0x7f00005fa000)={0xa, 0x4e23}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000a86ffc)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000adb000), 0x0, 0x0, &(0x7f0000809000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) syzkaller login: [ 34.523357] audit: type=1400 audit(1520759658.470:5): avc: denied { sys_admin } for pid=3729 comm="syz-executor1" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 34.553408] IPVS: Creating netns size=2536 id=1 [ 34.567143] audit: type=1400 audit(1520759658.510:6): avc: denied { net_admin } for pid=3732 comm="syz-executor7" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 34.603213] IPVS: Creating netns size=2536 id=2 [ 34.643327] IPVS: Creating netns size=2536 id=3 [ 34.679758] IPVS: Creating netns size=2536 id=4 [ 34.728888] IPVS: Creating netns size=2536 id=5 [ 34.778374] IPVS: Creating netns size=2536 id=6 [ 34.836282] IPVS: Creating netns size=2536 id=7 [ 34.912428] IPVS: Creating netns size=2536 id=8 [ 36.989971] audit: type=1400 audit(1520759660.940:7): avc: denied { sys_chroot } for pid=3732 comm="syz-executor7" capability=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/03/11 09:14:21 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x501201) 2018/03/11 09:14:21 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0x215, &(0x7f00000daff0)={&(0x7f0000417e08)=ANY=[@ANYBLOB="3c01000010000302000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000010000000033000000962b00e4ffaaf8ee0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c0014006d64350000000000000000000000000000000000000000000000000000000000000000000000049357c76d7199cd0000000000000000000000000000000000000000000000000000"], 0x13c}, 0x1}, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x8, 0x9, 0x1f, 0x2, 0x0, 0xffffffffffffff02, 0x8, 0x3, 0x3, 0x5d, 0x8, 0x187, 0x40, 0x770aaa39, 0x9, 0x8, 0x1, 0xffffffffffff0c49, 0xfffffffffffffffd, 0xae7f, 0x1, 0x1, 0x20, 0x3f, 0x9, 0x80000001, 0x100000001, 0xef2, 0x4, 0x34, 0xffffffff, 0x8, 0x80000000, 0x9693, 0x5, 0x5, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x10, 0xffffffffffffb0c6, 0x7, 0x1, 0xffff, 0x9, 0x4}, r1, 0x7ff, r0, 0xc) [ 37.143829] netlink: 76 bytes leftover after parsing attributes in process `syz-executor7'. [ 37.168648] netlink: 76 bytes leftover after parsing attributes in process `syz-executor7'. [ 37.390181] ------------[ cut here ]------------ [ 37.394982] WARNING: CPU: 1 PID: 5080 at net/core/dev.c:2466 skb_warn_bad_offload+0x2af/0x390 [ 37.403646] lo: caps=(0x000000a2803b7c69, 0x0000000000000000) len=2102 data_len=2040 gso_size=1992 gso_type=2 ip_summed=0 [ 37.414727] Kernel panic - not syncing: panic_on_warn set ... [ 37.414727] [ 37.422065] CPU: 1 PID: 5080 Comm: syz-executor6 Not tainted 4.9.86-g00db063 #52 [ 37.429568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 37.438896] ffff8801c20c6f60 ffffffff81d956f9 ffffffff83a480c0 ffff8801c20c7038 [ 37.446877] ffffffff83ee3400 ffffffff82f3634f 0000000000000009 ffff8801c20c7028 [ 37.454850] ffffffff8142f531 0000000041b58ab3 ffffffff8418b470 ffffffff8142f375 [ 37.462821] Call Trace: [ 37.465384] [] dump_stack+0xc1/0x128 [ 37.470719] [] ? skb_warn_bad_offload+0x2af/0x390 [ 37.477181] [] panic+0x1bc/0x3a8 [ 37.482167] [] ? percpu_up_read_preempt_enable.constprop.53+0xd7/0xd7 [ 37.490366] [] ? vprintk_emit+0x3ad/0x750 [ 37.496136] [] ? __warn+0x1a9/0x1e0 [ 37.501385] [] ? skb_warn_bad_offload+0x2af/0x390 [ 37.507844] [] __warn+0x1c4/0x1e0 [ 37.512917] [] warn_slowpath_fmt+0xc4/0x110 [ 37.518860] [] ? __warn+0x1e0/0x1e0 [ 37.524109] [] ? _raw_spin_unlock_irqrestore+0x45/0x70 [ 37.531004] [] ? ___ratelimit+0x53/0x460 [ 37.536687] [] skb_warn_bad_offload+0x2af/0x390 [ 37.542975] [] __skb_gso_segment+0x541/0x680 [ 37.549001] [] validate_xmit_skb+0x44e/0x980 [ 37.555030] [] ? check_preemption_disabled+0x3b/0x200 [ 37.561838] [] ? check_preemption_disabled+0x3b/0x200 [ 37.568645] [] __dev_queue_xmit+0xb2c/0x20a0 [ 37.574674] [] ? __dev_queue_xmit+0x1e2/0x20a0 [ 37.580875] [] ? netdev_pick_tx+0x300/0x300 [ 37.586816] [] ? memcpy+0x45/0x50 [ 37.591890] [] dev_queue_xmit+0x17/0x20 [ 37.597483] [] neigh_resolve_output+0x469/0x770 [ 37.603771] [] ? ip6_finish_output2+0x930/0x1d20 [ 37.610149] [] ? eth_mac_addr+0x1a0/0x1a0 [ 37.615917] [] ip6_finish_output2+0x930/0x1d20 [ 37.622117] [] ? ip6_finish_output2+0x175/0x1d20 [ 37.628492] [] ? ip6_sk_dst_lookup_flow+0x590/0x590 [ 37.635131] [] ? check_preemption_disabled+0x3b/0x200 [ 37.641938] [] ? ip6_mtu+0x209/0x340 [ 37.647270] [] ip6_finish_output+0x2e6/0x750 [ 37.653304] [] ip6_output+0x1f3/0x6a0 [ 37.658726] [] ? ip6_output+0x40c/0x6a0 [ 37.664320] [] ? ip6_finish_output+0x750/0x750 [ 37.670522] [] ? ip6_fragment+0x3390/0x3390 [ 37.676465] [] ip6_local_out+0x95/0x170 [ 37.682059] [] ? ip_reply_glue_bits+0xb0/0xb0 [ 37.688173] [] ip6_send_skb+0xa1/0x340 [ 37.693679] [] udp_v6_send_skb+0x301/0xeb0 [ 37.699536] [] udp_v6_push_pending_frames+0x22f/0x340 [ 37.706346] [] ? udpv6_destroy_sock+0xd0/0xd0 [ 37.712463] [] ? ip_reply_glue_bits+0xb0/0xb0 [ 37.718576] [] udpv6_sendmsg+0x1f38/0x2540 [ 37.724431] [] ? ip_reply_glue_bits+0xb0/0xb0 [ 37.730547] [] ? udp_v6_rehash+0xa0/0xa0 [ 37.736237] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 37.743221] [] ? sock_has_perm+0x1c2/0x3e0 [ 37.749077] [] ? sock_has_perm+0x292/0x3e0 [ 37.754934] [] ? sock_has_perm+0x9f/0x3e0 [ 37.760702] [] ? selinux_file_send_sigiotask+0x310/0x310 [ 37.767775] [] ? check_preemption_disabled+0x3b/0x200 [ 37.774586] [] ? inet_sendmsg+0x201/0x4c0 [ 37.780355] [] inet_sendmsg+0x2bc/0x4c0 [ 37.785949] [] ? inet_sendmsg+0x73/0x4c0 [ 37.791630] [] ? inet_recvmsg+0x4c0/0x4c0 [ 37.797401] [] sock_sendmsg+0xca/0x110 [ 37.802906] [] SYSC_sendto+0x2c8/0x340 [ 37.808416] [] ? SYSC_connect+0x310/0x310 [ 37.814184] [] ? __might_fault+0xe4/0x1d0 [ 37.819951] [] ? udp_lib_setsockopt+0x17a/0x560 [ 37.826243] [] ? SyS_futex+0x22e/0x2d0 [ 37.831750] [] ? do_futex+0x15c0/0x15c0 [ 37.837343] [] ? move_addr_to_kernel+0x50/0x50 [ 37.843548] [] SyS_sendto+0x40/0x50 [ 37.848795] [] ? SyS_getpeername+0x30/0x30 [ 37.854650] [] do_syscall_64+0x1a4/0x490 [ 37.860331] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 37.867794] Dumping ftrace buffer: [ 37.871348] (ftrace buffer empty) [ 37.875026] Kernel Offset: disabled [ 37.878629] Rebooting in 86400 seconds..