[....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Sh[ 31.167851] kauditd_printk_skb: 9 callbacks suppressed ell server: sshd[ 31.167863] audit: type=1800 audit(1542391542.815:33): pid=5951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [?25l[?1c7[1[ 31.197421] audit: type=1800 audit(1542391542.825:34): pid=5951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 G[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 34.550662] audit: type=1400 audit(1542391546.205:35): avc: denied { map } for pid=6129 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 34.576647] sshd (6127) used greatest stack depth: 15744 bytes left Warning: Permanently added '10.128.0.100' (ECDSA) to the list of known hosts. [ 75.948039] audit: type=1400 audit(1542391587.595:36): avc: denied { map } for pid=6143 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2018/11/16 18:06:28 parsed 1 programs [ 76.474069] audit: type=1400 audit(1542391588.125:37): avc: denied { map } for pid=6143 comm="syz-execprog" path="/sys/kernel/debug/kcov" dev="debugfs" ino=13931 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 77.843345] ld (6153) used greatest stack depth: 15296 bytes left 2018/11/16 18:06:29 executed programs: 0 [ 78.009647] IPVS: ftp: loaded support on port[0] = 21 [ 78.267880] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.275429] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.283022] device bridge_slave_0 entered promiscuous mode [ 78.303312] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.309754] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.316722] device bridge_slave_1 entered promiscuous mode [ 78.333901] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 78.352300] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 78.405780] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 78.426330] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 78.497878] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 78.505982] team0: Port device team_slave_0 added [ 78.525002] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 78.533199] team0: Port device team_slave_1 added [ 78.551542] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.573402] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.593896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.614621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.748397] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.754947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.762318] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.768786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.237230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.290482] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 79.343369] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 79.349576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.357970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.402873] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.694269] audit: type=1400 audit(1542391591.345:38): avc: denied { associate } for pid=6156 comm="syz-executor0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 80.442620] kasan: CONFIG_KASAN_INLINE enabled [ 80.447490] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 80.455555] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 80.461782] CPU: 1 PID: 6578 Comm: syz-executor0 Not tainted 4.20.0-rc2+ #116 [ 80.469026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 80.478366] RIP: 0010:rdma_listen+0x357/0x990 [ 80.482848] Code: 4c 8b ab c8 01 00 00 31 f6 48 c7 c7 60 3b db 89 e8 9e eb 25 02 48 b8 00 00 00 00 00 fc ff df 49 8d 7d 08 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 64 05 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b [ 80.501733] RSP: 0018:ffff8881bf747970 EFLAGS: 00010202 [ 80.507089] RAX: dffffc0000000000 RBX: ffff8881bc32a140 RCX: 0000000000000000 [ 80.514333] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000000008 [ 80.521584] RBP: ffff8881bf747a10 R08: fffffbfff13b6775 R09: fffffbfff13b6774 [ 80.528830] R10: ffff8881bf747960 R11: ffffffff89db3ba3 R12: 1ffff11037ee8f31 [ 80.536075] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8881d832c2c0 [ 80.543324] FS: 00007f918e84e700(0000) GS:ffff8881daf00000(0000) knlGS:0000000000000000 [ 80.551537] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 80.557420] CR2: 00000000004cef08 CR3: 00000001c2980000 CR4: 00000000001406e0 [ 80.564676] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 80.571947] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 80.579199] Call Trace: [ 80.581777] ? rdma_resolve_addr+0x2870/0x2870 [ 80.586346] ucma_listen+0x1a4/0x260 [ 80.590042] ? ucma_notify+0x210/0x210 [ 80.593912] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 80.599457] ? _copy_from_user+0xdf/0x150 [ 80.603596] ? ucma_notify+0x210/0x210 [ 80.607478] ucma_write+0x365/0x460 [ 80.611086] ? ucma_open+0x3f0/0x3f0 [ 80.614785] __vfs_write+0x119/0x9f0 [ 80.618526] ? __fget_light+0x2e9/0x430 [ 80.622514] ? ucma_open+0x3f0/0x3f0 [ 80.626208] ? kernel_read+0x120/0x120 [ 80.630078] ? __might_sleep+0x95/0x190 [ 80.634041] ? perf_trace_sched_process_exec+0x860/0x860 [ 80.639478] ? posix_ktime_get_ts+0x15/0x20 [ 80.643795] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 80.649320] ? __inode_security_revalidate+0xd9/0x120 [ 80.654492] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 80.659603] ? selinux_file_permission+0x90/0x540 [ 80.664424] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 80.670042] ? security_file_permission+0x1c2/0x220 [ 80.675042] ? rw_verify_area+0x118/0x360 [ 80.679170] vfs_write+0x1fc/0x560 [ 80.682689] ksys_write+0x101/0x260 [ 80.686295] ? __ia32_sys_read+0xb0/0xb0 [ 80.690335] ? trace_hardirqs_off_caller+0x310/0x310 [ 80.695421] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 80.700942] __x64_sys_write+0x73/0xb0 [ 80.704814] do_syscall_64+0x1b9/0x820 [ 80.708692] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 80.714042] ? syscall_return_slowpath+0x5e0/0x5e0 [ 80.718954] ? trace_hardirqs_on_caller+0x310/0x310 [ 80.723946] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 80.728945] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 80.735591] ? __switch_to_asm+0x40/0x70 [ 80.739631] ? __switch_to_asm+0x34/0x70 [ 80.743686] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 80.748516] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 80.753689] RIP: 0033:0x457569 [ 80.756865] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 80.775756] RSP: 002b:00007f918e84dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 80.783463] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 80.790716] RDX: 0000000000000010 RSI: 0000000020000200 RDI: 0000000000000005 [ 80.797963] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 80.805210] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f918e84e6d4 [ 80.812461] R13: 00000000004c571f R14: 00000000004d9360 R15: 00000000ffffffff [ 80.819728] Modules linked in: [ 80.824188] ---[ end trace f0acd35fd95f0acc ]--- [ 80.828991] RIP: 0010:rdma_listen+0x357/0x990 [ 80.833477] Code: 4c 8b ab c8 01 00 00 31 f6 48 c7 c7 60 3b db 89 e8 9e eb 25 02 48 b8 00 00 00 00 00 fc ff df 49 8d 7d 08 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 64 05 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b [ 80.852577] RSP: 0018:ffff8881bf747970 EFLAGS: 00010202 [ 80.857930] RAX: dffffc0000000000 RBX: ffff8881bc32a140 RCX: 0000000000000000 [ 80.865213] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000000008 [ 80.872536] RBP: ffff8881bf747a10 R08: fffffbfff13b6775 R09: fffffbfff13b6774 [ 80.879808] R10: ffff8881bf747960 R11: ffffffff89db3ba3 R12: 1ffff11037ee8f31 [ 80.887060] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8881d832c2c0 [ 80.894335] FS: 00007f918e84e700(0000) GS:ffff8881daf00000(0000) knlGS:0000000000000000 [ 80.902784] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 80.908695] CR2: 00000000004cef08 CR3: 00000001c2980000 CR4: 00000000001406e0 [ 80.915960] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 80.923415] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 80.930743] Kernel panic - not syncing: Fatal exception [ 80.937333] Kernel Offset: disabled [ 80.940956] Rebooting in 86400 seconds..