[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 18.918570] audit: type=1400 audit(1520361753.095:6): avc: denied { map } for pid=4262 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.28' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 40.909416] audit: type=1400 audit(1520361775.086:7): avc: denied { map } for pid=4279 comm="syzkaller371547" path="/root/syzkaller371547686" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 40.935933] kasan: CONFIG_KASAN_INLINE enabled [ 40.940762] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 40.948131] general protection fault: 0000 [#1] SMP KASAN [ 40.953639] Dumping ftrace buffer: [ 40.957146] (ftrace buffer empty) [ 40.960829] Modules linked in: [ 40.963998] CPU: 1 PID: 4279 Comm: syzkaller371547 Not tainted 4.16.0-rc4+ #343 [ 40.971412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 40.980745] RIP: 0010:rdma_init_qp_attr+0x8b/0x720 [ 40.985640] RSP: 0018:ffff8801b098f840 EFLAGS: 00010202 [ 40.990971] RAX: dffffc0000000000 RBX: ffff8801b11be040 RCX: ffffffff841b86df [ 40.998209] RDX: 0000000000000029 RSI: ffff8801b098f9c8 RDI: 0000000000000148 [ 41.005451] RBP: ffff8801b098f880 R08: ffffed0036131f4e R09: ffff8801b098f9cc [ 41.012689] R10: 0000000000000000 R11: ffffed0036131f4d R12: ffff8801b098f9c8 [ 41.019928] R13: ffff8801b098f908 R14: 0000000000000000 R15: ffff8801b098f908 [ 41.027166] FS: 0000000001a6e880(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 [ 41.035360] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.041208] CR2: 000056045ae76110 CR3: 00000001c5436001 CR4: 00000000001606e0 [ 41.048452] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 41.055691] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 41.062932] Call Trace: [ 41.065497] ucma_init_qp_attr+0x20b/0x3e0 [ 41.069704] ? ucma_notify+0x1a0/0x1a0 [ 41.073563] ? find_held_lock+0x35/0x1d0 [ 41.077601] ? __might_fault+0x110/0x1d0 [ 41.081631] ? lock_downgrade+0x980/0x980 [ 41.085748] ? lock_release+0xa40/0xa40 [ 41.089692] ? check_same_owner+0x320/0x320 [ 41.093989] ? kasan_check_write+0x14/0x20 [ 41.098195] ucma_write+0x2d6/0x3d0 [ 41.101789] ? ucma_notify+0x1a0/0x1a0 [ 41.105646] ? ucma_resolve_route+0x1a0/0x1a0 [ 41.110113] ? ucma_resolve_route+0x1a0/0x1a0 [ 41.114578] __vfs_write+0xef/0x970 [ 41.118176] ? rcu_note_context_switch+0x710/0x710 [ 41.123074] ? kernel_read+0x120/0x120 [ 41.126929] ? __might_sleep+0x95/0x190 [ 41.130875] ? _cond_resched+0x14/0x30 [ 41.134735] ? __inode_security_revalidate+0xd9/0x130 [ 41.139892] ? avc_policy_seqno+0x9/0x20 [ 41.143922] ? selinux_file_permission+0x82/0x460 [ 41.148735] ? security_file_permission+0x89/0x1e0 [ 41.153634] ? rw_verify_area+0xe5/0x2b0 [ 41.157661] ? __fdget_raw+0x20/0x20 [ 41.161343] vfs_write+0x189/0x510 [ 41.164853] SyS_write+0xef/0x220 [ 41.168277] ? filp_open+0x70/0x70 [ 41.171788] ? SyS_read+0x220/0x220 [ 41.175385] ? do_syscall_64+0xb7/0x940 [ 41.179345] ? SyS_read+0x220/0x220 [ 41.182939] do_syscall_64+0x281/0x940 [ 41.186795] ? __do_page_fault+0xc90/0xc90 [ 41.191088] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 41.195812] ? syscall_return_slowpath+0x550/0x550 [ 41.200711] ? syscall_return_slowpath+0x2ac/0x550 [ 41.205611] ? prepare_exit_to_usermode+0x350/0x350 [ 41.210598] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 41.215931] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 41.220747] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 41.225903] RIP: 0033:0x43fdc9 [ 41.229059] RSP: 002b:00007ffeb5f8c318 EFLAGS: 00000217 ORIG_RAX: 0000000000000001 [ 41.236734] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043fdc9 [ 41.243973] RDX: 0000000000000018 RSI: 0000000020001ec0 RDI: 0000000000000003 [ 41.251213] RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8 [ 41.258457] R10: 00000000004002c8 R11: 0000000000000217 R12: 00000000004016f0 [ 41.265694] R13: 0000000000401780 R14: 0000000000000000 R15: 0000000000000000 [ 41.272937] Code: 00 00 00 fc ff df 80 3c 02 00 0f 85 8c 06 00 00 4c 8b 33 48 b8 00 00 00 00 00 fc ff df 49 8d be 48 01 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 5d 06 00 00 44 0f b6 7d d4 48 b8 00 00 00 00 [ 41.292003] RIP: rdma_init_qp_attr+0x8b/0x720 RSP: ffff8801b098f840 [ 41.298589] ---[ end trace 0f5852a827212152 ]--- [ 41.303373] Kernel panic - not syncing: Fatal exception [ 41.309016] Dumping ftrace buffer: [ 41.312524] (ftrace buffer empty) [ 41.316203] Kernel Offset: disabled [ 41.319801] Rebooting in 86400 seconds..