[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 18.791121] audit: type=1400 audit(1520760951.017:6): avc: denied { map } for pid=4221 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.24' (ECDSA) to the list of known hosts. syzkaller login: [ 25.333507] audit: type=1400 audit(1520760957.560:7): avc: denied { map } for pid=4236 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16479 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2018/03/11 09:35:57 parsed 1 programs 2018/03/11 09:35:57 executed programs: 0 [ 25.581296] audit: type=1400 audit(1520760957.808:8): avc: denied { map } for pid=4236 comm="syz-execprog" path="/root/syzkaller-shm271350268" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 25.595768] IPVS: ftp: loaded support on port[0] = 21 [ 25.606896] audit: type=1400 audit(1520760957.815:9): avc: denied { sys_admin } for pid=4241 comm="syz-executor0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 25.645352] audit: type=1400 audit(1520760957.872:10): avc: denied { sys_chroot } for pid=4243 comm="syz-executor0" capability=18 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 25.669793] audit: type=1400 audit(1520760957.873:11): avc: denied { net_admin } for pid=4243 comm="syz-executor0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/03/11 09:36:02 executed programs: 596 [ 35.137075] ================================================================== [ 35.144526] BUG: KASAN: null-ptr-deref in rdma_resolve_addr+0x12e/0x26c0 [ 35.151335] Write of size 28 at addr 00000000000000a0 by task syz-executor0/10020 [ 35.158924] [ 35.160526] CPU: 1 PID: 10020 Comm: syz-executor0 Not tainted 4.16.0-rc4+ #259 [ 35.167855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 35.177177] Call Trace: [ 35.179737] dump_stack+0x194/0x24d [ 35.183337] ? arch_local_irq_restore+0x53/0x53 [ 35.187978] ? __might_sleep+0x95/0x190 [ 35.191929] ? rdma_resolve_addr+0x12e/0x26c0 [ 35.196396] kasan_report+0x140/0x360 [ 35.200171] check_memory_region+0x137/0x190 [ 35.204553] memcpy+0x37/0x50 [ 35.207637] rdma_resolve_addr+0x12e/0x26c0 [ 35.211935] ? find_held_lock+0x35/0x1d0 [ 35.215972] ? rdma_bind_addr+0x1b50/0x1b50 [ 35.220273] ? lock_downgrade+0x980/0x980 [ 35.224398] ? __radix_tree_lookup+0x435/0x5e0 [ 35.228963] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 35.233780] ? wait_for_completion+0x770/0x770 [ 35.238334] ? lock_release+0xa40/0xa40 [ 35.242279] ? check_same_owner+0x320/0x320 [ 35.246572] ? find_held_lock+0x35/0x1d0 [ 35.250624] ucma_resolve_ip+0x142/0x1f0 [ 35.254654] ? ucma_resolve_ip+0x142/0x1f0 [ 35.258862] ? ucma_resolve_addr+0x330/0x330 [ 35.263250] ? kasan_check_write+0x14/0x20 [ 35.267458] ucma_write+0x2d6/0x3d0 [ 35.271054] ? ucma_resolve_addr+0x330/0x330 [ 35.275435] ? ucma_resolve_route+0x1a0/0x1a0 [ 35.279907] ? ucma_resolve_route+0x1a0/0x1a0 [ 35.284370] __vfs_write+0xef/0x970 [ 35.287969] ? rcu_note_context_switch+0x710/0x710 [ 35.292872] ? kernel_read+0x120/0x120 [ 35.296730] ? __might_sleep+0x95/0x190 [ 35.300675] ? _cond_resched+0x14/0x30 [ 35.304536] ? __inode_security_revalidate+0xd9/0x130 [ 35.309698] ? avc_policy_seqno+0x9/0x20 [ 35.313728] ? selinux_file_permission+0x82/0x460 [ 35.318544] ? security_file_permission+0x89/0x1e0 [ 35.323443] ? rw_verify_area+0xe5/0x2b0 [ 35.327471] ? __fdget_raw+0x20/0x20 [ 35.331156] vfs_write+0x189/0x510 [ 35.334669] SyS_write+0xef/0x220 [ 35.338097] ? SyS_read+0x220/0x220 [ 35.341701] ? do_fast_syscall_32+0x156/0xf9f [ 35.346168] ? SyS_read+0x220/0x220 [ 35.349767] do_fast_syscall_32+0x3ec/0xf9f [ 35.354056] ? _raw_spin_unlock_irq+0x27/0x70 [ 35.358526] ? do_int80_syscall_32+0x9c0/0x9c0 [ 35.363076] ? _raw_spin_unlock_irq+0x27/0x70 [ 35.367541] ? finish_task_switch+0x1c1/0x7e0 [ 35.372015] ? syscall_return_slowpath+0x2ac/0x550 [ 35.376920] ? prepare_exit_to_usermode+0x350/0x350 [ 35.381909] ? sysret32_from_system_call+0x5/0x3c [ 35.386726] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 35.391544] entry_SYSENTER_compat+0x70/0x7f [ 35.395919] RIP: 0023:0xf7fe1c99 [ 35.399250] RSP: 002b:00000000f7fbc09c EFLAGS: 00000286 ORIG_RAX: 0000000000000004 [ 35.406929] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200003c0 [ 35.414169] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 35.421406] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 35.428646] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 35.435883] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 35.443138] ================================================================== [ 35.450461] Disabling lock debugging due to kernel taint [ 35.456027] Kernel panic - not syncing: panic_on_warn set ... [ 35.456027] [ 35.463373] CPU: 1 PID: 10020 Comm: syz-executor0 Tainted: G B 4.16.0-rc4+ #259 [ 35.472002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 35.481331] Call Trace: [ 35.483891] dump_stack+0x194/0x24d [ 35.487488] ? arch_local_irq_restore+0x53/0x53 [ 35.492123] ? kasan_end_report+0x32/0x50 [ 35.496243] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 35.500967] ? vsnprintf+0x1ed/0x1900 [ 35.504740] ? rdma_resolve_addr+0xa0/0x26c0 [ 35.509117] panic+0x1e4/0x41c [ 35.512279] ? refcount_error_report+0x214/0x214 [ 35.517008] ? add_taint+0x1c/0x50 [ 35.520523] ? add_taint+0x1c/0x50 [ 35.524034] ? rdma_resolve_addr+0x12e/0x26c0 [ 35.528497] kasan_end_report+0x50/0x50 [ 35.532440] kasan_report+0x149/0x360 [ 35.536211] check_memory_region+0x137/0x190 [ 35.540588] memcpy+0x37/0x50 [ 35.543668] rdma_resolve_addr+0x12e/0x26c0 [ 35.547966] ? find_held_lock+0x35/0x1d0 [ 35.552004] ? rdma_bind_addr+0x1b50/0x1b50 [ 35.556299] ? lock_downgrade+0x980/0x980 [ 35.560422] ? __radix_tree_lookup+0x435/0x5e0 [ 35.564979] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 35.569791] ? wait_for_completion+0x770/0x770 [ 35.574346] ? lock_release+0xa40/0xa40 [ 35.578292] ? check_same_owner+0x320/0x320 [ 35.582581] ? find_held_lock+0x35/0x1d0 [ 35.586624] ucma_resolve_ip+0x142/0x1f0 [ 35.590656] ? ucma_resolve_ip+0x142/0x1f0 [ 35.594863] ? ucma_resolve_addr+0x330/0x330 [ 35.599242] ? kasan_check_write+0x14/0x20 [ 35.603446] ucma_write+0x2d6/0x3d0 [ 35.607043] ? ucma_resolve_addr+0x330/0x330 [ 35.611421] ? ucma_resolve_route+0x1a0/0x1a0 [ 35.615890] ? ucma_resolve_route+0x1a0/0x1a0 [ 35.620353] __vfs_write+0xef/0x970 [ 35.623948] ? rcu_note_context_switch+0x710/0x710 [ 35.628855] ? kernel_read+0x120/0x120 [ 35.632711] ? __might_sleep+0x95/0x190 [ 35.636656] ? _cond_resched+0x14/0x30 [ 35.640515] ? __inode_security_revalidate+0xd9/0x130 [ 35.645674] ? avc_policy_seqno+0x9/0x20 [ 35.649703] ? selinux_file_permission+0x82/0x460 [ 35.654517] ? security_file_permission+0x89/0x1e0 [ 35.659416] ? rw_verify_area+0xe5/0x2b0 [ 35.663443] ? __fdget_raw+0x20/0x20 [ 35.667126] vfs_write+0x189/0x510 [ 35.670639] SyS_write+0xef/0x220 [ 35.674060] ? SyS_read+0x220/0x220 [ 35.677658] ? do_fast_syscall_32+0x156/0xf9f [ 35.682122] ? SyS_read+0x220/0x220 [ 35.685718] do_fast_syscall_32+0x3ec/0xf9f [ 35.690007] ? _raw_spin_unlock_irq+0x27/0x70 [ 35.694479] ? do_int80_syscall_32+0x9c0/0x9c0 [ 35.699027] ? _raw_spin_unlock_irq+0x27/0x70 [ 35.703493] ? finish_task_switch+0x1c1/0x7e0 [ 35.707959] ? syscall_return_slowpath+0x2ac/0x550 [ 35.712855] ? prepare_exit_to_usermode+0x350/0x350 [ 35.717839] ? sysret32_from_system_call+0x5/0x3c [ 35.722658] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 35.727473] entry_SYSENTER_compat+0x70/0x7f [ 35.731847] RIP: 0023:0xf7fe1c99 [ 35.735180] RSP: 002b:00000000f7fbc09c EFLAGS: 00000286 ORIG_RAX: 0000000000000004 [ 35.742856] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200003c0 [ 35.750093] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 35.757336] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 35.764574] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 35.771813] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 35.779491] Dumping ftrace buffer: [ 35.783002] (ftrace buffer empty) [ 35.786679] Kernel Offset: disabled [ 35.790281] Rebooting in 86400 seconds..