[....] Starting enhanced syslogd: rsyslogd[ 16.854483] audit: type=1400 audit(1521189072.892:5): avc: denied { syslog } for pid=4092 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 23.034273] audit: type=1400 audit(1521189079.071:6): avc: denied { map } for pid=4232 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.10.8' (ECDSA) to the list of known hosts. [ 38.635723] audit: type=1400 audit(1521189094.673:7): avc: denied { map } for pid=4249 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16479 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2018/03/16 08:31:34 parsed 1 programs 2018/03/16 08:31:34 executed programs: 0 [ 38.877187] audit: type=1400 audit(1521189094.914:8): avc: denied { map } for pid=4249 comm="syz-execprog" path="/root/syzkaller-shm187984219" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 38.888663] IPVS: ftp: loaded support on port[0] = 21 [ 38.937253] IPVS: ftp: loaded support on port[0] = 21 [ 38.964262] IPVS: ftp: loaded support on port[0] = 21 [ 38.991112] IPVS: ftp: loaded support on port[0] = 21 [ 39.017166] IPVS: ftp: loaded support on port[0] = 21 [ 39.044894] IPVS: ftp: loaded support on port[0] = 21 [ 39.075518] IPVS: ftp: loaded support on port[0] = 21 [ 39.107705] IPVS: ftp: loaded support on port[0] = 21 [ 40.195008] kasan: CONFIG_KASAN_INLINE enabled [ 40.199846] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 40.207510] general protection fault: 0000 [#1] SMP KASAN [ 40.213026] Dumping ftrace buffer: [ 40.216537] (ftrace buffer empty) [ 40.220218] Modules linked in: [ 40.223386] CPU: 1 PID: 5547 Comm: syz-executor4 Not tainted 4.16.0-rc5+ #265 [ 40.230629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 40.239962] RIP: 0010:ucma_connect+0x49d/0x870 [ 40.244513] RSP: 0018:ffff8801ae9ef8a8 EFLAGS: 00010202 [ 40.249853] RAX: 0000000000000000 RBX: ffff8801ae9efa58 RCX: 0000000000000004 [ 40.257093] RDX: dffffc0000000000 RSI: 1ffff10035d3df1d RDI: 0000000000000020 [ 40.264331] RBP: ffff8801ae9efa80 R08: 0000000000000000 R09: 0000000000000000 [ 40.271571] R10: ffffffff886133c0 R11: 0000000000000000 R12: 1ffff10035d3df17 [ 40.278813] R13: ffff8801ae9ef918 R14: ffff8801cbdb6ac0 R15: ffff8801ae9ef8d8 [ 40.286202] FS: 0000000000000000(0000) GS:ffff8801db300000(0063) knlGS:00000000f7f27b40 [ 40.294400] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 40.300251] CR2: 0000000008138024 CR3: 00000001af121001 CR4: 00000000001606e0 [ 40.307512] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 40.314752] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 40.321990] Call Trace: [ 40.324551] ? find_held_lock+0x35/0x1d0 [ 40.328587] ? ucma_listen+0x1f0/0x1f0 [ 40.332454] ? __might_fault+0x110/0x1d0 [ 40.336513] ? kasan_check_write+0x14/0x20 [ 40.340724] ucma_write+0x2d6/0x3d0 [ 40.344322] ? ucma_listen+0x1f0/0x1f0 [ 40.348181] ? ucma_resolve_route+0x1a0/0x1a0 [ 40.352651] ? ucma_resolve_route+0x1a0/0x1a0 [ 40.357116] __vfs_write+0xef/0x970 [ 40.360717] ? rcu_note_context_switch+0x710/0x710 [ 40.365617] ? kernel_read+0x120/0x120 [ 40.369476] ? __might_sleep+0x95/0x190 [ 40.373424] ? _cond_resched+0x14/0x30 [ 40.377285] ? __inode_security_revalidate+0xd9/0x130 [ 40.382444] ? avc_policy_seqno+0x9/0x20 [ 40.386475] ? selinux_file_permission+0x82/0x460 [ 40.391290] ? security_file_permission+0x89/0x1e0 [ 40.396189] ? rw_verify_area+0xe5/0x2b0 [ 40.400220] ? __fdget_raw+0x20/0x20 [ 40.403904] vfs_write+0x189/0x510 [ 40.407415] SyS_write+0xef/0x220 [ 40.410840] ? SyS_read+0x220/0x220 [ 40.414442] ? do_fast_syscall_32+0x156/0xf9f [ 40.418909] ? SyS_read+0x220/0x220 [ 40.422855] do_fast_syscall_32+0x3ec/0xf9f [ 40.427146] ? _raw_spin_unlock_irq+0x27/0x70 [ 40.431616] ? do_int80_syscall_32+0x9c0/0x9c0 [ 40.436166] ? _raw_spin_unlock_irq+0x27/0x70 [ 40.440630] ? finish_task_switch+0x1c1/0x7e0 [ 40.445095] ? syscall_return_slowpath+0x2ac/0x550 [ 40.449995] ? prepare_exit_to_usermode+0x350/0x350 [ 40.454983] ? sysret32_from_system_call+0x5/0x3c [ 40.459797] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 40.464613] entry_SYSENTER_compat+0x70/0x7f [ 40.468993] RIP: 0023:0xf7f4cc99 [ 40.472325] RSP: 002b:00000000f7f2709c EFLAGS: 00000286 ORIG_RAX: 0000000000000004 [ 40.480016] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200001c0 [ 40.487256] RDX: 0000000000000120 RSI: 0000000000000000 RDI: 0000000000000000 [ 40.494496] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 40.501736] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 40.508975] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 40.516221] Code: b6 14 16 84 d2 74 09 80 fa 03 0f 8e a5 01 00 00 48 8d 78 20 89 8b 90 fe ff ff 48 ba 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 <0f> b6 0c 11 48 89 fa 83 e2 07 83 c2 01 38 ca 7c 08 84 c9 0f 85 [ 40.535290] RIP: ucma_connect+0x49d/0x870 RSP: ffff8801ae9ef8a8 [ 40.541368] ---[ end trace c11d3e7205366f87 ]--- [ 40.546103] Kernel panic - not syncing: Fatal exception [ 40.551976] Dumping ftrace buffer: [ 40.555489] (ftrace buffer empty) [ 40.559176] Kernel Offset: disabled [ 40.562775] Rebooting in 86400 seconds..