[....] Starting enhanced syslogd: rsyslogd[ 11.936447] audit: type=1400 audit(1515254180.378:5): avc: denied { syslog } for pid=3328 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 18.334828] audit: type=1400 audit(1515254186.776:6): avc: denied { map } for pid=3467 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.15.247' (ECDSA) to the list of known hosts. [ 24.525485] audit: type=1400 audit(1515254192.967:7): avc: denied { map } for pid=3482 comm="syzkaller038745" path="/root/syzkaller038745956" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 24.551484] audit: type=1400 audit(1515254192.967:8): avc: denied { sys_admin } for pid=3482 comm="syzkaller038745" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 executing program [ 24.741384] audit: type=1400 audit(1515254193.183:9): avc: denied { sys_chroot } for pid=3483 comm="syzkaller038745" capability=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 24.748952] device syz0 entered promiscuous mode [ 24.770642] audit: type=1400 audit(1515254193.185:10): avc: denied { net_raw } for pid=3483 comm="syzkaller038745" capability=13 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 24.795310] audit: type=1400 audit(1515254193.186:11): avc: denied { net_admin } for pid=3483 comm="syzkaller038745" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 24.825220] kasan: CONFIG_KASAN_INLINE enabled [ 24.829827] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 24.837194] general protection fault: 0000 [#1] SMP KASAN [ 24.842706] Dumping ftrace buffer: [ 24.846215] (ftrace buffer empty) [ 24.849893] Modules linked in: [ 24.853060] CPU: 1 PID: 3483 Comm: syzkaller038745 Not tainted 4.15.0-rc6+ #159 [ 24.860469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 24.869801] RIP: 0010:skb_segment+0x67c/0x3020 [ 24.874347] RSP: 0018:ffff8801bf666920 EFLAGS: 00010202 [ 24.879673] RAX: 0000000000000010 RBX: 0000000000000000 RCX: ffffffff8430c8d7 [ 24.886905] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000080 [ 24.894142] RBP: ffff8801bf666bd8 R08: 0000000000000020 R09: 0000000000000002 [ 24.901383] R10: ffff8801bf666c60 R11: 0000000000000000 R12: 0000000000000008 [ 24.908625] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8801bf751500 [ 24.915864] FS: 0000000000000000(0000) GS:ffff8801db300000(0063) knlGS:0000000008792840 [ 24.924059] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 24.929909] CR2: 0000000020b13000 CR3: 00000001bff2c001 CR4: 00000000001606e0 [ 24.937148] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 24.944385] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 24.951620] Call Trace: [ 24.954188] ? check_noncircular+0x20/0x20 [ 24.958398] ? pskb_extract+0x1c0/0x1c0 [ 24.962341] ? find_held_lock+0x35/0x1d0 [ 24.966375] ? __lock_acquire+0x664/0x3e00 [ 24.970576] ? check_noncircular+0x20/0x20 [ 24.974783] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 24.979943] sctp_gso_segment+0x222/0x8b0 [ 24.984062] ? sctp_csum_update+0x30/0x30 [ 24.988177] ? sctp_csum_update+0x30/0x30 [ 24.992291] inet_gso_segment+0x61e/0x11e0 [ 24.996502] ? inet_sock_destruct+0x950/0x950 [ 25.000968] ? trace_hardirqs_on+0xd/0x10 [ 25.005086] skb_mac_gso_segment+0x34e/0x670 [ 25.009463] ? inet_sock_destruct+0x950/0x950 [ 25.013931] ? skb_network_protocol+0x4b0/0x4b0 [ 25.018573] ? check_noncircular+0x20/0x20 [ 25.022774] ? kasan_kmalloc+0xad/0xe0 [ 25.026626] ? __kmalloc_node_track_caller+0x47/0x70 [ 25.031694] ? __kmalloc_reserve.isra.39+0x41/0xd0 [ 25.036594] ? __alloc_skb+0x13b/0x780 [ 25.040450] ? alloc_skb_with_frags+0x10d/0x750 [ 25.045083] ? sock_sendmsg+0xca/0x110 [ 25.048933] ? sock_write_iter+0x31a/0x5d0 [ 25.053133] ? __vfs_write+0x684/0x970 [ 25.056984] ? vfs_write+0x189/0x510 [ 25.060664] ? skb_network_protocol+0xef/0x4b0 [ 25.065210] ? reacquire_held_locks+0x1f9/0x3e0 [ 25.069847] ? reacquire_held_locks+0x1f9/0x3e0 [ 25.074483] __skb_gso_segment+0x363/0x800 [ 25.078683] ? skb_mac_gso_segment+0x670/0x670 [ 25.083230] ? sch_direct_xmit+0xc0/0x6d0 [ 25.087344] validate_xmit_skb+0x4ba/0xb30 [ 25.091543] ? rcu_read_lock_sched_held+0x108/0x120 [ 25.096524] ? netif_skb_features+0x9b0/0x9b0 [ 25.100984] ? do_raw_spin_trylock+0x190/0x190 [ 25.105532] ? lock_acquire+0x1d5/0x580 [ 25.109473] ? __dev_queue_xmit+0xb37/0x2920 [ 25.113848] validate_xmit_skb_list+0xb7/0x120 [ 25.118397] sch_direct_xmit+0x3b6/0x6d0 [ 25.122423] ? dev_deactivate_queue.constprop.30+0x260/0x260 [ 25.128193] __dev_queue_xmit+0x1ce2/0x2920 [ 25.132483] ? netdev_pick_tx+0x300/0x300 [ 25.136600] ? find_held_lock+0x35/0x1d0 [ 25.140643] ? __might_fault+0x110/0x1d0 [ 25.144667] ? lock_downgrade+0x980/0x980 [ 25.148780] ? lock_release+0xa40/0xa40 [ 25.152722] ? refcount_add+0x24/0x60 [ 25.156491] ? skb_set_owner_w+0x232/0x330 [ 25.160705] ? __might_sleep+0x95/0x190 [ 25.164648] ? kasan_check_write+0x14/0x20 [ 25.168852] ? copyin+0x91/0xb0 [ 25.172098] ? _copy_from_iter+0x367/0xf30 [ 25.176297] ? __check_object_size+0x25d/0x4f0 [ 25.180852] ? _copy_from_iter_full+0x22b/0xbb0 [ 25.185490] ? skb_copy_datagram_from_iter+0x3b1/0x5c0 [ 25.190733] ? iov_iter_advance+0x13f0/0x13f0 [ 25.195197] dev_queue_xmit+0x17/0x20 [ 25.198961] ? dev_queue_xmit+0x17/0x20 [ 25.202901] packet_sendmsg+0x3aed/0x60b0 [ 25.207020] ? find_held_lock+0x35/0x1d0 [ 25.211051] ? avc_has_perm+0x35e/0x680 [ 25.214999] ? packet_cached_dev_get+0x2b0/0x2b0 [ 25.219723] ? mark_held_locks+0xaf/0x100 [ 25.223837] ? avc_has_perm+0x43e/0x680 [ 25.227777] ? avc_has_perm_noaudit+0x520/0x520 [ 25.232414] ? locks_remove_posix+0x518/0x820 [ 25.236886] ? find_held_lock+0x35/0x1d0 [ 25.240916] ? avc_has_perm+0x35e/0x680 [ 25.244855] ? sock_has_perm+0x2a4/0x420 [ 25.248882] ? selinux_secmark_relabel_packet+0xc0/0xc0 [ 25.254225] ? selinux_socket_sendmsg+0x36/0x40 [ 25.258860] ? security_socket_sendmsg+0x89/0xb0 [ 25.263586] ? packet_cached_dev_get+0x2b0/0x2b0 [ 25.268307] sock_sendmsg+0xca/0x110 [ 25.271987] sock_write_iter+0x31a/0x5d0 [ 25.276028] ? sock_sendmsg+0x110/0x110 [ 25.279978] ? iov_iter_init+0xaf/0x1d0 [ 25.283919] __vfs_write+0x684/0x970 [ 25.287604] ? kernel_read+0x120/0x120 [ 25.291460] ? bpf_fd_pass+0x280/0x280 [ 25.295316] ? _cond_resched+0x14/0x30 [ 25.299172] ? selinux_file_permission+0x82/0x460 [ 25.303989] ? rw_verify_area+0xe5/0x2b0 [ 25.308018] ? __fdget_raw+0x20/0x20 [ 25.311703] vfs_write+0x189/0x510 [ 25.315211] SyS_write+0xef/0x220 [ 25.318631] ? SyS_read+0x220/0x220 [ 25.322227] ? do_fast_syscall_32+0x156/0xf9d [ 25.326690] ? SyS_read+0x220/0x220 [ 25.330287] do_fast_syscall_32+0x3ee/0xf9d [ 25.334579] ? do_int80_syscall_32+0x9d0/0x9d0 [ 25.339130] ? syscall_return_slowpath+0x2ad/0x550 [ 25.344029] ? prepare_exit_to_usermode+0x340/0x340 [ 25.349017] ? sysret32_from_system_call+0x5/0x3b [ 25.353836] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 25.358649] entry_SYSENTER_compat+0x54/0x63 [ 25.363025] RIP: 0023:0xf7f5cc79 [ 25.366357] RSP: 002b:000000000820ff2c EFLAGS: 00000297 ORIG_RAX: 0000000000000004 [ 25.374042] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020634000 [ 25.381277] RDX: 000000000000002a RSI: 000000000000003f RDI: 0000000000000006 [ 25.388511] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000 [ 25.395745] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 25.402984] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 25.410226] Code: 8d 14 fe ff ff 39 8d 38 fe ff ff 0f 8f a5 00 00 00 e8 a9 4e 3f fd 48 8b 85 48 fe ff ff 48 8d b8 80 00 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 14 28 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f [ 25.429304] RIP: skb_segment+0x67c/0x3020 RSP: ffff8801bf666920 [ 25.435372] ---[ end trace 3cd6012e1e56c54f ]--- [ 25.440125] Kernel panic - not syncing: Fatal exception in interrupt [ 25.447075] Dumping ftrace buffer: [ 25.450584] (ftrace buffer empty) [ 25.454261] Kernel Offset: disabled [ 25.457852] Rebooting in 86400 seconds..