[....] Starting enhanced syslogd: rsyslogd[ 11.930802] audit: type=1400 audit(1513834690.127:5): avc: denied { syslog } for pid=3001 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 16.970196] audit: type=1400 audit(1513834695.166:6): avc: denied { map } for pid=3140 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added 'ci-upstream-kasan-gce-386-1,10.128.0.20' (ECDSA) to the list of known hosts. [ 23.149605] audit: type=1400 audit(1513834701.346:7): avc: denied { map } for pid=3155 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16479 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2017/12/21 05:38:21 parsed 1 programs 2017/12/21 05:38:21 executed programs: 0 [ 23.248574] audit: type=1400 audit(1513834701.445:8): avc: denied { map } for pid=3155 comm="syz-execprog" path="/root/syzkaller-shm404858656" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 23.328463] ================================================================== [ 23.335847] BUG: KASAN: stack-out-of-bounds in rds_sendmsg+0x1f02/0x1f90 [ 23.342652] Read of size 8 at addr ffff8801c8cb79e0 by task syz-executor0/3164 [ 23.349973] [ 23.351570] CPU: 1 PID: 3164 Comm: syz-executor0 Not tainted 4.15.0-rc4+ #141 [ 23.358806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 23.368127] Call Trace: [ 23.370684] dump_stack+0x194/0x257 [ 23.374279] ? arch_local_irq_restore+0x53/0x53 [ 23.378919] ? show_regs_print_info+0x18/0x18 [ 23.383384] ? _raw_spin_unlock_bh+0x30/0x40 [ 23.387760] ? rds_sendmsg+0x1f02/0x1f90 [ 23.391789] print_address_description+0x73/0x250 [ 23.396600] ? rds_sendmsg+0x1f02/0x1f90 [ 23.400631] kasan_report+0x25b/0x340 [ 23.404403] __asan_report_load8_noabort+0x14/0x20 [ 23.409298] rds_sendmsg+0x1f02/0x1f90 [ 23.413165] ? rds_send_drop_to+0x19d0/0x19d0 [ 23.417630] ? lock_downgrade+0x980/0x980 [ 23.421753] ? sock_has_perm+0x2a4/0x420 [ 23.425786] ? selinux_secmark_relabel_packet+0xc0/0xc0 [ 23.431122] ? __might_sleep+0x95/0x190 [ 23.435068] ? kasan_check_write+0x14/0x20 [ 23.439274] ? _copy_from_user+0x99/0x110 [ 23.443392] ? selinux_socket_sendmsg+0x36/0x40 [ 23.448041] ? security_socket_sendmsg+0x89/0xb0 [ 23.452772] ? rds_send_drop_to+0x19d0/0x19d0 [ 23.457267] sock_sendmsg+0xca/0x110 [ 23.460950] ___sys_sendmsg+0x320/0x8b0 [ 23.464896] ? copy_msghdr_from_user+0x590/0x590 [ 23.469619] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 23.474604] ? exit_robust_list+0x240/0x240 [ 23.478890] ? finish_task_switch+0x1d3/0x740 [ 23.483348] ? finish_task_switch+0x1aa/0x740 [ 23.487815] ? copy_overflow+0x20/0x20 [ 23.491674] ? __fget_light+0x297/0x380 [ 23.495616] ? fget_raw+0x20/0x20 [ 23.499035] ? check_noncircular+0x20/0x20 [ 23.503250] ? check_noncircular+0x20/0x20 [ 23.507452] ? __pmd_alloc+0x4e0/0x4e0 [ 23.511312] ? __fdget+0x18/0x20 [ 23.514657] __sys_sendmmsg+0x31b/0x620 [ 23.518595] ? __sys_sendmmsg+0x31b/0x620 [ 23.522716] ? SyS_sendmsg+0x50/0x50 [ 23.526404] ? __do_page_fault+0x5f7/0xc90 [ 23.530606] ? lock_downgrade+0x980/0x980 [ 23.534737] ? compat_SyS_futex+0x288/0x380 [ 23.539042] ? compat_SyS_get_robust_list+0x300/0x300 [ 23.544198] ? __do_page_fault+0x3d6/0xc90 [ 23.548411] compat_SyS_sendmmsg+0x32/0x40 [ 23.552615] ? compat_SyS_sendmsg+0x40/0x40 [ 23.556904] do_fast_syscall_32+0x3ee/0xf9d [ 23.561197] ? do_int80_syscall_32+0x9d0/0x9d0 [ 23.565744] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 23.570470] ? syscall_return_slowpath+0x2ad/0x550 [ 23.575369] ? prepare_exit_to_usermode+0x340/0x340 [ 23.580354] ? sysret32_from_system_call+0x5/0x3b [ 23.585177] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 23.589993] entry_SYSENTER_compat+0x54/0x63 [ 23.594365] RIP: 0023:0xf7fb1c79 [ 23.597693] RSP: 002b:00000000ffe7721c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 23.605366] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000020573000 [ 23.612608] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 23.619848] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 23.627086] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 23.634321] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 23.641582] [ 23.643174] The buggy address belongs to the page: [ 23.648072] page:000000006314dfd8 count:0 mapcount:0 mapping: (null) index:0x0 [ 23.656183] flags: 0x2fffc0000000000() [ 23.660036] raw: 02fffc0000000000 0000000000000000 0000000000000000 00000000ffffffff [ 23.667882] raw: 0000000000000000 0000000100000001 0000000000000000 0000000000000000 [ 23.675727] page dumped because: kasan: bad access detected [ 23.681406] [ 23.682999] Memory state around the buggy address: [ 23.687893] ffff8801c8cb7880: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 f2 f2 f2 [ 23.695216] ffff8801c8cb7900: f2 f2 f2 f2 00 00 00 00 00 00 00 00 00 00 00 00 [ 23.702539] >ffff8801c8cb7980: 00 00 00 00 f2 f2 f2 f2 00 00 00 00 04 f2 f2 f2 [ 23.709862] ^ [ 23.716317] ffff8801c8cb7a00: f2 f2 f2 f2 00 00 00 00 00 00 00 00 00 00 00 00 [ 23.723641] ffff8801c8cb7a80: 00 00 00 00 f3 f3 f3 f3 00 00 00 00 00 00 00 00 [ 23.730967] ================================================================== [ 23.738290] Disabling lock debugging due to kernel taint [ 23.743793] Kernel panic - not syncing: panic_on_warn set ... [ 23.743793] [ 23.751129] CPU: 1 PID: 3164 Comm: syz-executor0 Tainted: G B 4.15.0-rc4+ #141 [ 23.759671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 23.768991] Call Trace: [ 23.771546] dump_stack+0x194/0x257 [ 23.775138] ? arch_local_irq_restore+0x53/0x53 [ 23.779776] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 23.784498] ? vsnprintf+0x1ed/0x1900 [ 23.788265] ? rds_sendmsg+0x1e50/0x1f90 [ 23.792290] panic+0x1e4/0x41c [ 23.795448] ? refcount_error_report+0x214/0x214 [ 23.800171] ? add_taint+0x1c/0x50 [ 23.803678] ? add_taint+0x1c/0x50 [ 23.807185] ? rds_sendmsg+0x1f02/0x1f90 [ 23.811212] kasan_end_report+0x50/0x50 [ 23.815152] kasan_report+0x144/0x340 [ 23.818919] __asan_report_load8_noabort+0x14/0x20 [ 23.823812] rds_sendmsg+0x1f02/0x1f90 [ 23.827674] ? rds_send_drop_to+0x19d0/0x19d0 [ 23.832135] ? lock_downgrade+0x980/0x980 [ 23.836254] ? sock_has_perm+0x2a4/0x420 [ 23.840283] ? selinux_secmark_relabel_packet+0xc0/0xc0 [ 23.845613] ? __might_sleep+0x95/0x190 [ 23.849559] ? kasan_check_write+0x14/0x20 [ 23.853760] ? _copy_from_user+0x99/0x110 [ 23.857876] ? selinux_socket_sendmsg+0x36/0x40 [ 23.862509] ? security_socket_sendmsg+0x89/0xb0 [ 23.867227] ? rds_send_drop_to+0x19d0/0x19d0 [ 23.871688] sock_sendmsg+0xca/0x110 [ 23.875366] ___sys_sendmsg+0x320/0x8b0 [ 23.879309] ? copy_msghdr_from_user+0x590/0x590 [ 23.884032] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 23.889015] ? exit_robust_list+0x240/0x240 [ 23.893301] ? finish_task_switch+0x1d3/0x740 [ 23.897767] ? finish_task_switch+0x1aa/0x740 [ 23.902230] ? copy_overflow+0x20/0x20 [ 23.906083] ? __fget_light+0x297/0x380 [ 23.910021] ? fget_raw+0x20/0x20 [ 23.913436] ? check_noncircular+0x20/0x20 [ 23.917642] ? check_noncircular+0x20/0x20 [ 23.921846] ? __pmd_alloc+0x4e0/0x4e0 [ 23.925700] ? __fdget+0x18/0x20 [ 23.929033] __sys_sendmmsg+0x31b/0x620 [ 23.932971] ? __sys_sendmmsg+0x31b/0x620 [ 23.937087] ? SyS_sendmsg+0x50/0x50 [ 23.940771] ? __do_page_fault+0x5f7/0xc90 [ 23.944970] ? lock_downgrade+0x980/0x980 [ 23.949096] ? compat_SyS_futex+0x288/0x380 [ 23.953392] ? compat_SyS_get_robust_list+0x300/0x300 [ 23.958546] ? __do_page_fault+0x3d6/0xc90 [ 23.962758] compat_SyS_sendmmsg+0x32/0x40 [ 23.966955] ? compat_SyS_sendmsg+0x40/0x40 [ 23.971243] do_fast_syscall_32+0x3ee/0xf9d [ 23.975532] ? do_int80_syscall_32+0x9d0/0x9d0 [ 23.980081] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 23.984803] ? syscall_return_slowpath+0x2ad/0x550 [ 23.989696] ? prepare_exit_to_usermode+0x340/0x340 [ 23.994688] ? sysret32_from_system_call+0x5/0x3b [ 23.999497] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 24.004307] entry_SYSENTER_compat+0x54/0x63 [ 24.008678] RIP: 0023:0xf7fb1c79 [ 24.012006] RSP: 002b:00000000ffe7721c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 24.019676] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000020573000 [ 24.026911] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 24.034146] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 24.041390] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 24.048627] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 24.055910] Dumping ftrace buffer: [ 24.059411] (ftrace buffer empty) [ 24.063092] Kernel Offset: disabled [ 24.066687] Rebooting in 86400 seconds..