[....] Starting enhanced syslogd: rsyslogd[ 12.568320] audit: type=1400 audit(1520930131.437:4): avc: denied { syslog } for pid=3525 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.51' (ECDSA) to the list of known hosts. 2018/03/13 08:35:46 fuzzer started 2018/03/13 08:35:47 dialing manager at 10.128.0.26:41885 2018/03/13 08:35:51 kcov=true, comps=false 2018/03/13 08:35:53 executing program 0: munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc) 2018/03/13 08:35:53 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x6c) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x24000011, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r0, &(0x7f0000000d00)="c3", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) r1 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/access\x00', 0x2, 0x0) dup2(r1, r0) 2018/03/13 08:35:53 executing program 7: perf_event_open(&(0x7f0000740000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lsetxattr(&(0x7f0000fc0000)='./file0\x00', &(0x7f0000fc6ff7)=@known='user.syz\x00', &(0x7f0000fc0000)="2f2f73656c696e757800000101", 0xfd9a, 0x0) 2018/03/13 08:35:53 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000001c0)={{{@in, @in6=@loopback}}, {{@in=@remote}, 0x0, @in=@multicast1}}, &(0x7f00000002c0)=0xe8) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond0\x00'}) 2018/03/13 08:35:53 executing program 5: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000000)={0x5}, &(0x7f000044cfc0), &(0x7f0000000ff8), &(0x7f0000000ff8)={&(0x7f0000000ff8), 0x8}) 2018/03/13 08:35:53 executing program 6: r0 = socket(0x15, 0x80005, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt(r0, 0x200000000114, 0x2716, &(0x7f0000bd4fff)=""/1, &(0x7f0000000040)=0xfda3) 2018/03/13 08:35:53 executing program 1: perf_event_open(&(0x7f0000740000)={0x2, 0x78, 0x48, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000d01000)=0x7ff, 0x4) sendto$inet6(r0, &(0x7f0000586000)="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", 0x7f8, 0x4c080, &(0x7f00005fa000)={0xa, 0x4e23}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000a86ffc)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000adb000), 0x0, 0x0, &(0x7f0000809000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/03/13 08:35:53 executing program 2: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000000), &(0x7f000044cfc0), &(0x7f0000000ff8), &(0x7f0000000ff8)={&(0x7f0000000ff8), 0xffffffffffffff0d}) syzkaller login: [ 34.533396] audit: type=1400 audit(1520930153.407:5): avc: denied { sys_admin } for pid=3740 comm="syz-executor0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 34.571720] IPVS: Creating netns size=2536 id=1 [ 34.594059] audit: type=1400 audit(1520930153.467:6): avc: denied { net_admin } for pid=3744 comm="syz-executor6" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 34.626751] IPVS: Creating netns size=2536 id=2 [ 34.661649] IPVS: Creating netns size=2536 id=3 [ 34.694333] IPVS: Creating netns size=2536 id=4 [ 34.739437] IPVS: Creating netns size=2536 id=5 [ 34.775984] IPVS: Creating netns size=2536 id=6 [ 34.846886] IPVS: Creating netns size=2536 id=7 [ 34.914998] IPVS: Creating netns size=2536 id=8 [ 36.961555] audit: type=1400 audit(1520930155.837:7): avc: denied { sys_chroot } for pid=3744 comm="syz-executor6" capability=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/03/13 08:35:56 executing program 6: 2018/03/13 08:35:56 executing program 6: [ 37.149366] ------------[ cut here ]------------ [ 37.154200] WARNING: CPU: 0 PID: 4972 at net/core/dev.c:2473 skb_warn_bad_offload+0x2af/0x390 [ 37.162885] lo: caps=(0x000000a2803b7c69, 0x0000000000000000) len=2102 data_len=2040 gso_size=1992 gso_type=2 ip_summed=0 [ 37.174001] Kernel panic - not syncing: panic_on_warn set ... [ 37.174001] [ 37.181370] CPU: 0 PID: 4972 Comm: syz-executor1 Not tainted 4.9.87-ga290494 #53 [ 37.188900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 37.198252] ffff8801c2806f60 ffffffff81d95a19 ffffffff83a480c0 ffff8801c2807038 [ 37.206366] ffffffff83ee3400 ffffffff82f373bf 0000000000000009 ffff8801c2807028 [ 37.214440] ffffffff8142f7e1 0000000041b58ab3 ffffffff8418b658 ffffffff8142f625 [ 37.222520] Call Trace: [ 37.225104] [] dump_stack+0xc1/0x128 [ 37.230471] [] ? skb_warn_bad_offload+0x2af/0x390 [ 37.236965] [] panic+0x1bc/0x3a8 2018/03/13 08:35:56 executing program 6: [ 37.242072] [] ? percpu_up_read_preempt_enable.constprop.53+0xd7/0xd7 [ 37.250300] [] ? vprintk_emit+0x3ad/0x750 [ 37.256103] [] ? __warn+0x1a9/0x1e0 [ 37.261405] [] ? skb_warn_bad_offload+0x2af/0x390 [ 37.267895] [] __warn+0x1c4/0x1e0 [ 37.273004] [] warn_slowpath_fmt+0xc4/0x110 [ 37.278975] [] ? __warn+0x1e0/0x1e0 [ 37.284237] [] ? _raw_spin_unlock_irqrestore+0x45/0x70 [ 37.291147] [] ? ___ratelimit+0x53/0x460 [ 37.296838] [] skb_warn_bad_offload+0x2af/0x390 [ 37.303136] [] __skb_gso_segment+0x541/0x680 [ 37.309171] [] validate_xmit_skb+0x44e/0x980 [ 37.315221] [] ? check_preemption_disabled+0x3b/0x200 [ 37.323257] [] ? check_preemption_disabled+0x3b/0x200 [ 37.330076] [] __dev_queue_xmit+0xb2c/0x20a0 [ 37.336114] [] ? __dev_queue_xmit+0x1e2/0x20a0 [ 37.342323] [] ? netdev_pick_tx+0x300/0x300 [ 37.348274] [] ? memcpy+0x45/0x50 [ 37.353358] [] dev_queue_xmit+0x17/0x20 [ 37.358965] [] neigh_resolve_output+0x469/0x770 [ 37.365266] [] ? ip6_finish_output2+0x930/0x1d20 [ 37.371652] [] ? eth_mac_addr+0x1a0/0x1a0 [ 37.377429] [] ip6_finish_output2+0x930/0x1d20 [ 37.383641] [] ? ip6_finish_output2+0x175/0x1d20 [ 37.390057] [] ? ip6_sk_dst_lookup_flow+0x590/0x590 [ 37.396705] [] ? check_preemption_disabled+0x3b/0x200 [ 37.403524] [] ? ip6_mtu+0x209/0x340 [ 37.408867] [] ip6_finish_output+0x2e6/0x750 [ 37.414905] [] ip6_output+0x1f3/0x6a0 [ 37.420333] [] ? ip6_output+0x40c/0x6a0 [ 37.425935] [] ? ip6_finish_output+0x750/0x750 [ 37.432142] [] ? ip6_fragment+0x3390/0x3390 [ 37.438097] [] ip6_local_out+0x95/0x170 [ 37.443699] [] ? ip_reply_glue_bits+0xb0/0xb0 [ 37.449825] [] ip6_send_skb+0xa1/0x340 [ 37.455348] [] udp_v6_send_skb+0x301/0xeb0 [ 37.461218] [] udp_v6_push_pending_frames+0x22f/0x340 [ 37.468037] [] ? udpv6_destroy_sock+0xd0/0xd0 [ 37.474165] [] ? ip_reply_glue_bits+0xb0/0xb0 [ 37.480288] [] udpv6_sendmsg+0x1f38/0x2540 [ 37.486149] [] ? ip_reply_glue_bits+0xb0/0xb0 [ 37.492278] [] ? udp_v6_rehash+0xa0/0xa0 [ 37.497971] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 37.504968] [] ? sock_has_perm+0x1c2/0x3e0 [ 37.510832] [] ? sock_has_perm+0x292/0x3e0 [ 37.516693] [] ? sock_has_perm+0x9f/0x3e0 [ 37.522471] [] ? selinux_file_send_sigiotask+0x310/0x310 [ 37.529549] [] ? check_preemption_disabled+0x3b/0x200 [ 37.536368] [] ? inet_sendmsg+0x201/0x4c0 [ 37.542143] [] inet_sendmsg+0x2bc/0x4c0 [ 37.547744] [] ? inet_sendmsg+0x73/0x4c0 [ 37.553519] [] ? inet_recvmsg+0x4c0/0x4c0 [ 37.559309] [] sock_sendmsg+0xca/0x110 [ 37.564826] [] SYSC_sendto+0x2c8/0x340 [ 37.570342] [] ? SYSC_connect+0x310/0x310 [ 37.576124] [] ? __might_fault+0xe4/0x1d0 [ 37.581901] [] ? udp_lib_setsockopt+0x17a/0x560 [ 37.588199] [] ? SyS_futex+0x22e/0x2d0 [ 37.593720] [] ? do_futex+0x15c0/0x15c0 [ 37.599322] [] ? move_addr_to_kernel+0x50/0x50 [ 37.605531] [] SyS_sendto+0x40/0x50 [ 37.610785] [] ? SyS_getpeername+0x30/0x30 [ 37.616646] [] do_syscall_64+0x1a4/0x490 [ 37.622347] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 37.629879] Dumping ftrace buffer: [ 37.633447] (ftrace buffer empty) [ 37.637140] Kernel Offset: disabled [ 37.640753] Rebooting in 86400 seconds..