[....] Starting enhanced syslogd: rsyslogd[ 15.454383] audit: type=1400 audit(1521781003.514:5): avc: denied { syslog } for pid=3935 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 19.399820] audit: type=1400 audit(1521781007.459:6): avc: denied { map } for pid=4075 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.10.6' (ECDSA) to the list of known hosts. [ 25.702063] audit: type=1400 audit(1521781013.761:7): avc: denied { map } for pid=4089 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16479 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2018/03/23 04:56:54 parsed 1 programs 2018/03/23 04:56:54 executed programs: 0 [ 25.971945] audit: type=1400 audit(1521781014.031:8): avc: denied { map } for pid=4089 comm="syz-execprog" path="/root/syzkaller-shm572938300" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 26.009535] IPVS: ftp: loaded support on port[0] = 21 [ 26.040281] ================================================================== [ 26.047696] BUG: KASAN: stack-out-of-bounds in rdma_bind_addr+0x13b/0x1d60 [ 26.054708] Read of size 48 at addr ffff8801cc067a00 by task syz-executor0/4098 [ 26.062133] [ 26.063736] CPU: 0 PID: 4098 Comm: syz-executor0 Not tainted 4.16.0-rc6+ #272 [ 26.070981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 26.080314] Call Trace: [ 26.082887] dump_stack+0x194/0x24d [ 26.086494] ? arch_local_irq_restore+0x53/0x53 [ 26.091135] ? show_regs_print_info+0x18/0x18 [ 26.095608] ? lock_release+0xa40/0xa40 [ 26.099564] ? __radix_tree_lookup+0x435/0x5e0 [ 26.104123] ? get_futex_key+0x1d50/0x1d50 [ 26.108333] ? rdma_bind_addr+0x13b/0x1d60 [ 26.112552] print_address_description+0x73/0x250 [ 26.117368] ? rdma_bind_addr+0x13b/0x1d60 [ 26.121576] kasan_report+0x23c/0x360 [ 26.125351] check_memory_region+0x137/0x190 [ 26.129733] memcpy+0x23/0x50 [ 26.132811] rdma_bind_addr+0x13b/0x1d60 [ 26.136845] ? lock_release+0xa40/0xa40 [ 26.140790] ? check_same_owner+0x320/0x320 [ 26.145091] ? cma_ndev_work_handler+0x1a0/0x1a0 [ 26.149836] ucma_bind_ip+0x10a/0x190 [ 26.153607] ? ucma_bind+0x260/0x260 [ 26.157301] ? kasan_check_write+0x14/0x20 [ 26.161512] ucma_write+0x2d6/0x3d0 [ 26.165110] ? ucma_bind+0x260/0x260 [ 26.168798] ? ucma_close_id+0x60/0x60 [ 26.172664] ? ucma_close_id+0x60/0x60 [ 26.176522] __vfs_write+0xef/0x970 [ 26.180126] ? rcu_note_context_switch+0x710/0x710 [ 26.185036] ? kernel_read+0x120/0x120 [ 26.188897] ? __might_sleep+0x95/0x190 [ 26.192849] ? _cond_resched+0x14/0x30 [ 26.196710] ? __inode_security_revalidate+0xd9/0x130 [ 26.201873] ? avc_policy_seqno+0x9/0x20 [ 26.205905] ? selinux_file_permission+0x82/0x460 [ 26.210725] ? security_file_permission+0x89/0x1e0 [ 26.215632] ? rw_verify_area+0xe5/0x2b0 [ 26.219666] ? __fdget_raw+0x20/0x20 [ 26.223354] vfs_write+0x189/0x510 [ 26.226869] SyS_write+0xef/0x220 [ 26.230293] ? __do_page_fault+0x3d6/0xc90 [ 26.234502] ? SyS_read+0x220/0x220 [ 26.238103] ? do_fast_syscall_32+0x156/0xf9f [ 26.242578] ? SyS_read+0x220/0x220 [ 26.246180] do_fast_syscall_32+0x3ec/0xf9f [ 26.250479] ? do_int80_syscall_32+0x9c0/0x9c0 [ 26.255042] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 26.259779] ? syscall_return_slowpath+0x2ac/0x550 [ 26.264680] ? prepare_exit_to_usermode+0x350/0x350 [ 26.269679] ? sysret32_from_system_call+0x5/0x3c [ 26.274499] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 26.279320] entry_SYSENTER_compat+0x70/0x7f [ 26.283699] RIP: 0023:0xf7f27c99 [ 26.287036] RSP: 002b:00000000ff93cd3c EFLAGS: 00000282 ORIG_RAX: 0000000000000004 [ 26.294727] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000080 [ 26.301983] RDX: 0000000000000090 RSI: 0000000000000000 RDI: 0000000000000000 [ 26.309231] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 26.316474] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 26.323714] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 26.332716] [ 26.334317] The buggy address belongs to the page: [ 26.339217] page:ffffea00073019c0 count:0 mapcount:0 mapping:0000000000000000 index:0x0 [ 26.347330] flags: 0x2fffc0000000000() [ 26.351200] raw: 02fffc0000000000 0000000000000000 0000000000000000 00000000ffffffff [ 26.359062] raw: 0000000000000000 ffffea0007300101 0000000000000000 0000000000000000 [ 26.366909] page dumped because: kasan: bad access detected [ 26.372584] [ 26.374183] Memory state around the buggy address: [ 26.379083] ffff8801cc067900: f1 f1 f1 f1 04 f2 f2 f2 f2 f2 f2 f2 04 f2 f2 f2 [ 26.386417] ffff8801cc067980: f3 f3 f3 f3 00 00 00 00 00 00 00 f1 f1 f1 f1 00 [ 26.393745] >ffff8801cc067a00: 00 00 00 00 f2 f2 f2 00 00 00 00 00 00 00 00 00 [ 26.401075] ^ [ 26.405456] ffff8801cc067a80: 00 00 00 00 00 f1 f1 f1 f1 00 f2 f2 f2 f3 f3 f3 [ 26.412785] ffff8801cc067b00: f3 00 00 00 00 00 00 00 00 00 00 00 00 f1 f1 f1 [ 26.420113] ================================================================== [ 26.427440] Disabling lock debugging due to kernel taint [ 26.432905] Kernel panic - not syncing: panic_on_warn set ... [ 26.432905] [ 26.440249] CPU: 0 PID: 4098 Comm: syz-executor0 Tainted: G B 4.16.0-rc6+ #272 [ 26.448793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 26.458118] Call Trace: [ 26.460683] dump_stack+0x194/0x24d [ 26.464285] ? arch_local_irq_restore+0x53/0x53 [ 26.468924] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 26.473652] ? vsnprintf+0x1ed/0x1900 [ 26.477424] ? rdma_bind_addr+0xe0/0x1d60 [ 26.481541] panic+0x1e4/0x41c [ 26.484703] ? refcount_error_report+0x214/0x214 [ 26.489431] ? add_taint+0x1c/0x50 [ 26.492940] ? add_taint+0x1c/0x50 [ 26.496455] ? rdma_bind_addr+0x13b/0x1d60 [ 26.500669] kasan_end_report+0x50/0x50 [ 26.504612] kasan_report+0x149/0x360 [ 26.508394] check_memory_region+0x137/0x190 [ 26.512770] memcpy+0x23/0x50 [ 26.515847] rdma_bind_addr+0x13b/0x1d60 [ 26.519889] ? lock_release+0xa40/0xa40 [ 26.523837] ? check_same_owner+0x320/0x320 [ 26.528136] ? cma_ndev_work_handler+0x1a0/0x1a0 [ 26.532870] ucma_bind_ip+0x10a/0x190 [ 26.536639] ? ucma_bind+0x260/0x260 [ 26.540326] ? kasan_check_write+0x14/0x20 [ 26.544534] ucma_write+0x2d6/0x3d0 [ 26.548130] ? ucma_bind+0x260/0x260 [ 26.551811] ? ucma_close_id+0x60/0x60 [ 26.555672] ? ucma_close_id+0x60/0x60 [ 26.559530] __vfs_write+0xef/0x970 [ 26.563127] ? rcu_note_context_switch+0x710/0x710 [ 26.568031] ? kernel_read+0x120/0x120 [ 26.571890] ? __might_sleep+0x95/0x190 [ 26.575850] ? _cond_resched+0x14/0x30 [ 26.579715] ? __inode_security_revalidate+0xd9/0x130 [ 26.584876] ? avc_policy_seqno+0x9/0x20 [ 26.588907] ? selinux_file_permission+0x82/0x460 [ 26.593739] ? security_file_permission+0x89/0x1e0 [ 26.598663] ? rw_verify_area+0xe5/0x2b0 [ 26.602695] ? __fdget_raw+0x20/0x20 [ 26.606382] vfs_write+0x189/0x510 [ 26.609895] SyS_write+0xef/0x220 [ 26.613326] ? __do_page_fault+0x3d6/0xc90 [ 26.617530] ? SyS_read+0x220/0x220 [ 26.621129] ? do_fast_syscall_32+0x156/0xf9f [ 26.625593] ? SyS_read+0x220/0x220 [ 26.629192] do_fast_syscall_32+0x3ec/0xf9f [ 26.633487] ? do_int80_syscall_32+0x9c0/0x9c0 [ 26.638044] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 26.642784] ? syscall_return_slowpath+0x2ac/0x550 [ 26.647686] ? prepare_exit_to_usermode+0x350/0x350 [ 26.652692] ? sysret32_from_system_call+0x5/0x3c [ 26.657506] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 26.662321] entry_SYSENTER_compat+0x70/0x7f [ 26.666698] RIP: 0023:0xf7f27c99 [ 26.670034] RSP: 002b:00000000ff93cd3c EFLAGS: 00000282 ORIG_RAX: 0000000000000004 [ 26.677716] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000080 [ 26.684957] RDX: 0000000000000090 RSI: 0000000000000000 RDI: 0000000000000000 [ 26.692205] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 26.699450] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 26.706690] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 26.714342] Dumping ftrace buffer: [ 26.717855] (ftrace buffer empty) [ 26.721535] Kernel Offset: disabled [ 26.725132] Rebooting in 86400 seconds..