[....] Starting enhanced syslogd: rsyslogd[ 15.795368] audit: type=1400 audit(1520631859.860:5): avc: denied { syslog } for pid=3958 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 21.940968] audit: type=1400 audit(1520631866.005:6): avc: denied { map } for pid=4097 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.22' (ECDSA) to the list of known hosts. [ 28.308573] audit: type=1400 audit(1520631872.373:7): avc: denied { map } for pid=4111 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16479 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2018/03/09 21:44:32 parsed 1 programs 2018/03/09 21:44:32 executed programs: 0 [ 28.568755] audit: type=1400 audit(1520631872.633:8): avc: denied { map } for pid=4111 comm="syz-execprog" path="/root/syzkaller-shm114526152" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 28.583933] IPVS: ftp: loaded support on port[0] = 21 [ 28.734945] ================================================================== [ 28.742412] BUG: KASAN: null-ptr-deref in rdma_resolve_addr+0x12e/0x26c0 [ 28.749235] Write of size 28 at addr 00000000000000a0 by task syz-executor0/4154 [ 28.756737] [ 28.758343] CPU: 0 PID: 4154 Comm: syz-executor0 Not tainted 4.16.0-rc4+ #257 [ 28.765586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 28.774912] Call Trace: [ 28.777479] dump_stack+0x194/0x24d [ 28.781086] ? arch_local_irq_restore+0x53/0x53 [ 28.785731] ? __might_sleep+0x95/0x190 [ 28.789686] ? rdma_resolve_addr+0x12e/0x26c0 [ 28.794158] kasan_report+0x140/0x360 [ 28.797936] check_memory_region+0x137/0x190 [ 28.802319] memcpy+0x37/0x50 [ 28.805411] rdma_resolve_addr+0x12e/0x26c0 [ 28.809717] ? perf_trace_lock_acquire+0xe3/0x980 [ 28.814546] ? find_held_lock+0x35/0x1d0 [ 28.818605] ? rdma_bind_addr+0x1b50/0x1b50 [ 28.822905] ? lock_downgrade+0x980/0x980 [ 28.827043] ? perf_trace_lock_acquire+0xe3/0x980 [ 28.831863] ? perf_trace_lock+0x900/0x900 [ 28.836078] ? __radix_tree_lookup+0x435/0x5e0 [ 28.840639] ? perf_trace_lock+0x900/0x900 [ 28.844871] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 28.849697] ? wait_for_completion+0x770/0x770 [ 28.854267] ? lock_release+0xa40/0xa40 [ 28.858232] ? find_held_lock+0x35/0x1d0 [ 28.862294] ucma_resolve_ip+0x142/0x1f0 [ 28.866328] ? ucma_resolve_ip+0x142/0x1f0 [ 28.870538] ? ucma_resolve_addr+0x330/0x330 [ 28.874932] ? kasan_check_write+0x14/0x20 [ 28.879158] ucma_write+0x2d6/0x3d0 [ 28.882764] ? ucma_resolve_addr+0x330/0x330 [ 28.887150] ? ucma_resolve_route+0x1a0/0x1a0 [ 28.891634] ? ucma_resolve_route+0x1a0/0x1a0 [ 28.896104] __vfs_write+0xef/0x970 [ 28.899714] ? rcu_note_context_switch+0x710/0x710 [ 28.904630] ? kernel_read+0x120/0x120 [ 28.908492] ? __might_sleep+0x95/0x190 [ 28.912442] ? _cond_resched+0x14/0x30 [ 28.916304] ? __inode_security_revalidate+0xd9/0x130 [ 28.921468] ? avc_policy_seqno+0x9/0x20 [ 28.925501] ? selinux_file_permission+0x82/0x460 [ 28.930322] ? security_file_permission+0x89/0x1e0 [ 28.935226] ? rw_verify_area+0xe5/0x2b0 [ 28.939257] ? __fdget_raw+0x20/0x20 [ 28.942948] vfs_write+0x189/0x510 [ 28.946470] SyS_write+0xef/0x220 [ 28.949900] ? exit_to_usermode_loop+0x198/0x2f0 [ 28.954635] ? SyS_read+0x220/0x220 [ 28.958245] ? do_fast_syscall_32+0x156/0xf9f [ 28.962729] ? SyS_read+0x220/0x220 [ 28.966330] do_fast_syscall_32+0x3ec/0xf9f [ 28.970626] ? _raw_spin_unlock_irq+0x27/0x70 [ 28.975100] ? do_int80_syscall_32+0x9c0/0x9c0 [ 28.979653] ? _raw_spin_unlock_irq+0x27/0x70 [ 28.984125] ? finish_task_switch+0x1c1/0x7e0 [ 28.988599] ? syscall_return_slowpath+0x2ac/0x550 [ 28.993516] ? prepare_exit_to_usermode+0x350/0x350 [ 28.998507] ? sysret32_from_system_call+0x5/0x3c [ 29.003331] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 29.008158] entry_SYSENTER_compat+0x70/0x7f [ 29.012537] RIP: 0023:0xf7efec99 [ 29.015874] RSP: 002b:00000000f7ed909c EFLAGS: 00000286 ORIG_RAX: 0000000000000004 [ 29.023555] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000200025c0 [ 29.030803] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 29.038053] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 29.045294] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 29.052536] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 29.059799] ================================================================== [ 29.067126] Disabling lock debugging due to kernel taint [ 29.072652] Kernel panic - not syncing: panic_on_warn set ... [ 29.072652] [ 29.080012] CPU: 0 PID: 4154 Comm: syz-executor0 Tainted: G B 4.16.0-rc4+ #257 [ 29.088565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 29.097890] Call Trace: [ 29.100448] dump_stack+0x194/0x24d [ 29.104047] ? arch_local_irq_restore+0x53/0x53 [ 29.108688] ? kasan_end_report+0x32/0x50 [ 29.112807] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 29.117534] ? vsnprintf+0x1ed/0x1900 [ 29.121307] ? rdma_resolve_addr+0xf0/0x26c0 [ 29.125689] panic+0x1e4/0x41c [ 29.128856] ? refcount_error_report+0x214/0x214 [ 29.133591] ? add_taint+0x1c/0x50 [ 29.137102] ? add_taint+0x1c/0x50 [ 29.140618] ? rdma_resolve_addr+0x12e/0x26c0 [ 29.145087] kasan_end_report+0x50/0x50 [ 29.149036] kasan_report+0x149/0x360 [ 29.152811] check_memory_region+0x137/0x190 [ 29.157190] memcpy+0x37/0x50 [ 29.160276] rdma_resolve_addr+0x12e/0x26c0 [ 29.164583] ? perf_trace_lock_acquire+0xe3/0x980 [ 29.169414] ? find_held_lock+0x35/0x1d0 [ 29.173460] ? rdma_bind_addr+0x1b50/0x1b50 [ 29.177757] ? lock_downgrade+0x980/0x980 [ 29.181886] ? perf_trace_lock_acquire+0xe3/0x980 [ 29.186705] ? perf_trace_lock+0x900/0x900 [ 29.190924] ? __radix_tree_lookup+0x435/0x5e0 [ 29.195479] ? perf_trace_lock+0x900/0x900 [ 29.199699] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 29.204532] ? wait_for_completion+0x770/0x770 [ 29.209093] ? lock_release+0xa40/0xa40 [ 29.213047] ? find_held_lock+0x35/0x1d0 [ 29.217118] ucma_resolve_ip+0x142/0x1f0 [ 29.221152] ? ucma_resolve_ip+0x142/0x1f0 [ 29.225361] ? ucma_resolve_addr+0x330/0x330 [ 29.229748] ? kasan_check_write+0x14/0x20 [ 29.233958] ucma_write+0x2d6/0x3d0 [ 29.237556] ? ucma_resolve_addr+0x330/0x330 [ 29.241950] ? ucma_resolve_route+0x1a0/0x1a0 [ 29.246435] ? ucma_resolve_route+0x1a0/0x1a0 [ 29.250906] __vfs_write+0xef/0x970 [ 29.254510] ? rcu_note_context_switch+0x710/0x710 [ 29.259411] ? kernel_read+0x120/0x120 [ 29.263271] ? __might_sleep+0x95/0x190 [ 29.267227] ? _cond_resched+0x14/0x30 [ 29.271090] ? __inode_security_revalidate+0xd9/0x130 [ 29.276252] ? avc_policy_seqno+0x9/0x20 [ 29.280284] ? selinux_file_permission+0x82/0x460 [ 29.285101] ? security_file_permission+0x89/0x1e0 [ 29.290004] ? rw_verify_area+0xe5/0x2b0 [ 29.294040] ? __fdget_raw+0x20/0x20 [ 29.297725] vfs_write+0x189/0x510 [ 29.301239] SyS_write+0xef/0x220 [ 29.304663] ? exit_to_usermode_loop+0x198/0x2f0 [ 29.309390] ? SyS_read+0x220/0x220 [ 29.312989] ? do_fast_syscall_32+0x156/0xf9f [ 29.317457] ? SyS_read+0x220/0x220 [ 29.321055] do_fast_syscall_32+0x3ec/0xf9f [ 29.325346] ? _raw_spin_unlock_irq+0x27/0x70 [ 29.329816] ? do_int80_syscall_32+0x9c0/0x9c0 [ 29.334369] ? _raw_spin_unlock_irq+0x27/0x70 [ 29.338838] ? finish_task_switch+0x1c1/0x7e0 [ 29.343309] ? syscall_return_slowpath+0x2ac/0x550 [ 29.348213] ? prepare_exit_to_usermode+0x350/0x350 [ 29.353199] ? sysret32_from_system_call+0x5/0x3c [ 29.358025] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 29.362847] entry_SYSENTER_compat+0x70/0x7f [ 29.367225] RIP: 0023:0xf7efec99 [ 29.370558] RSP: 002b:00000000f7ed909c EFLAGS: 00000286 ORIG_RAX: 0000000000000004 [ 29.378235] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000200025c0 [ 29.385489] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 29.392731] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 29.399981] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 29.407223] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 29.415024] Dumping ftrace buffer: [ 29.418553] (ftrace buffer empty) [ 29.422232] Kernel Offset: disabled [ 29.425838] Rebooting in 86400 seconds..