[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 18.044047] audit: type=1400 audit(1521611317.878:6): avc: denied { map } for pid=4215 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.33' (ECDSA) to the list of known hosts. syzkaller login: [ 31.041411] audit: type=1400 audit(1521611330.876:7): avc: denied { map } for pid=4231 comm="syzkaller848700" path="/root/syzkaller848700036" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 31.058055] IPVS: ftp: loaded support on port[0] = 21 net.ipv6.conf.syz_tun.accept_dad = 0 net.ipv6.conf.syz_tun.router_solicitations = 0 [ 31.095731] IPVS: ftp: loaded support on port[0] = 21 net.ipv6.conf.syz_tun.accept_dad = 0 [ 31.121314] IPVS: ftp: loaded support on port[0] = 21 net.ipv6.conf.syz_tun.router_solicitations = 0 net.ipv6.conf.syz_tun.accept_dad = 0 [ 31.154338] IPVS: ftp: loaded support on port[0] = 21 net.ipv6.conf.syz_tun.router_solicitations = 0 [ 31.195963] IPVS: ftp: loaded support on port[0] = 21 net.ipv6.conf.syz_tun.accept_dad = 0 net.ipv6.conf.syz_tun.accept_dad = 0 net.ipv6.conf.syz_tun.router_solicitations = 0 net.ipv6.conf.syz_tun.router_solicitations = 0 [ 31.231172] IPVS: ftp: loaded support on port[0] = 21 net.ipv6.conf.syz_tun.accept_dad = 0 [ 31.281427] IPVS: ftp: loaded support on port[0] = 21 net.ipv6.conf.syz_tun.router_solicitations = 0 [ 31.330449] IPVS: ftp: loaded support on port[0] = 21 net.ipv6.conf.syz_tun.accept_dad = 0 RTNETLINK answers: File exists net.ipv6.conf.syz_tun.router_solicitations = 0 net.ipv6.conf.syz_tun.accept_dad = 0 net.ipv6.conf.syz_tun.router_solicitations = 0 RTNETLINK answers: File exists RTNETLINK answers: File exists RTNETLINK answers: Operation not supported RTNETLINK answers: File exists RTNETLINK answers: File exists RTNETLINK answers: File exists RTNETLINK answers: File exists RTNETLINK answers: File exists [ 31.897384] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: No buffer space available RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported [ 32.143617] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 32.158725] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 32.168118] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready RTNETLINK answers: Operation not supported RTNETLINK answers: No buffer space available RTNETLINK answers: No buffer space available RTNETLINK answers: No buffer space available [ 32.202915] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: No buffer space available [ 32.259716] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: No buffer space available RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported [ 32.341138] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 32.364967] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready RTNETLINK answers: Operation not supported RTNETLINK answers: No buffer space available RTNETLINK answers: Operation not supported RTNETLINK answers: No buffer space available RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Invalid argument RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Invalid argument RTNETLINK answers: Operation not supported RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument [ 34.077493] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 34.083650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.301618] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 34.307887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.319459] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 34.325579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.346177] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 34.352476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.379309] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 34.391010] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 34.397293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.488086] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 34.494386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.525591] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 34.574285] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 34.584652] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 34.590871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.606171] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 34.614739] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready executing program [ 34.655538] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 34.661822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.670388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready executing program executing program [ 34.759783] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 34.766094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.777546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.798143] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 34.804252] 8021q: adding VLAN 0 to HW filter on device bond0 executing program executing program [ 34.820103] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready executing program [ 34.876889] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 34.883112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.892661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.907093] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 34.920127] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready executing program executing program executing program executing program [ 34.926422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.950431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready executing program executing program executing program [ 34.984800] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 34.996451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready executing program executing program executing program executing program executing program [ 35.056531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready executing program executing program executing program executing program executing program executing program executing program executing program [ 35.171963] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 35.178423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.190774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready executing program executing program executing program executing program executing program executing program [ 35.279385] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready executing program executing program executing program executing program executing program [ 35.333269] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 35.339665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.354322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 35.741666] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 35.748603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.764752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 36.109460] kasan: CONFIG_KASAN_INLINE enabled [ 36.114262] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 36.122356] general protection fault: 0000 [#1] SMP KASAN [ 36.127621] kasan: CONFIG_KASAN_INLINE enabled [ 36.127880] Dumping ftrace buffer: [ 36.132612] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 36.135951] (ftrace buffer empty) [ 36.135955] Modules linked in: [ 36.135966] CPU: 1 PID: 5966 Comm: syzkaller848700 Not tainted 4.16.0-rc4+ #275 [ 36.135972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 36.167007] RIP: 0010:rds_ib_get_mr+0x5c/0x230 [ 36.171560] RSP: 0018:ffff8801d2fc7890 EFLAGS: 00010202 [ 36.176898] RAX: dffffc0000000000 RBX: ffff8801af970700 RCX: ffffffff85634cae [ 36.184142] RDX: 000000000000000d RSI: 0000000000000001 RDI: 0000000000000068 [ 36.191382] RBP: ffff8801d2fc78b8 R08: ffffed003ae05a2c R09: ffff8801d702d140 [ 36.198623] R10: 0000000000000004 R11: ffffed003ae05a2b R12: ffff8801d702d140 [ 36.205862] R13: 0000000000000001 R14: ffff8801b35cde1c R15: 0000000000000000 [ 36.213104] FS: 00007f2640cfc700(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 [ 36.221301] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.227156] CR2: 00007f2640d3ddb8 CR3: 00000001b10ed003 CR4: 00000000001606e0 [ 36.234399] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.241640] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.248881] Call Trace: [ 36.251444] __rds_rdma_map+0x710/0x1050 [ 36.255482] ? rds_pin_pages+0x300/0x300 [ 36.259956] ? __might_sleep+0x95/0x190 [ 36.263908] ? kasan_check_write+0x14/0x20 [ 36.268116] ? _copy_from_user+0x99/0x110 [ 36.272240] rds_get_mr_for_dest+0x1d4/0x2c0 [ 36.276619] ? rds_get_mr+0xf0/0xf0 [ 36.280221] ? iterate_fd+0x3f0/0x3f0 [ 36.284011] rds_setsockopt+0x6cc/0x980 [ 36.287969] ? rds_setsockopt+0x6cc/0x980 [ 36.292092] ? selinux_netlbl_socket_setsockopt+0x10c/0x460 [ 36.297779] ? rds_getsockopt+0x280/0x280 [ 36.301908] ? selinux_socket_setsockopt+0x64/0x80 [ 36.306813] ? security_socket_setsockopt+0x89/0xb0 [ 36.311804] SyS_setsockopt+0x189/0x360 [ 36.315755] ? SyS_recv+0x40/0x40 [ 36.319183] ? lock_release+0xa40/0xa40 [ 36.323135] ? __switch_to+0x6df/0x13c0 [ 36.327101] ? do_syscall_64+0xb7/0x940 [ 36.331049] ? SyS_recv+0x40/0x40 [ 36.334476] do_syscall_64+0x281/0x940 [ 36.338336] ? _raw_spin_unlock_irq+0x27/0x70 [ 36.342805] ? finish_task_switch+0x1c1/0x7e0 [ 36.347273] ? syscall_return_slowpath+0x550/0x550 [ 36.352178] ? syscall_return_slowpath+0x2ac/0x550 [ 36.357078] ? prepare_exit_to_usermode+0x350/0x350 [ 36.362067] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 36.367404] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 36.372222] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 36.377383] RIP: 0033:0x448ce9 [ 36.380545] RSP: 002b:00007f2640cfbce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 36.388227] RAX: ffffffffffffffda RBX: 00000000006e5a34 RCX: 0000000000448ce9 [ 36.395472] RDX: 0000000000000007 RSI: 0000000000000114 RDI: 0000000000000003 [ 36.402712] RBP: 00000000006e5a30 R08: 00000000000000a0 R09: 0000000000000000 [ 36.409954] R10: 0000000020000380 R11: 0000000000000246 R12: 0000000000000000 [ 36.417193] R13: 00007ffdade6ea7f R14: 00007f2640cfc9c0 R15: 0000000000000001 [ 36.424451] Code: fa 48 c1 ea 03 80 3c 02 00 0f 85 cc 01 00 00 4c 8b bb 88 04 00 00 48 b8 00 00 00 00 00 fc ff df 49 8d 7f 68 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 9c 01 00 00 4d 8b 7f 68 48 b8 00 00 00 00 00 [ 36.443672] RIP: rds_ib_get_mr+0x5c/0x230 RSP: ffff8801d2fc7890 [ 36.449713] general protection fault: 0000 [#2] SMP KASAN [ 36.450123] ---[ end trace 63f147b62c0f843b ]--- [ 36.455239] Dumping ftrace buffer: [ 36.455244] (ftrace buffer empty) [ 36.455248] Modules linked in: [ 36.459986] Kernel panic - not syncing: Fatal exception [ 36.475663] CPU: 0 PID: 5973 Comm: syzkaller848700 Tainted: G D 4.16.0-rc4+ #275 [ 36.484383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 36.493719] RIP: 0010:rds_ib_get_mr+0x5c/0x230 [ 36.498271] RSP: 0018:ffff8801b01b7890 EFLAGS: 00010202 [ 36.503610] RAX: dffffc0000000000 RBX: ffff8801af970040 RCX: ffffffff85634cae [ 36.510855] RDX: 000000000000000d RSI: 0000000000000001 RDI: 0000000000000068 [ 36.518101] RBP: ffff8801b01b78b8 R08: ffffed003ae05b94 R09: ffff8801d702dc80 [ 36.525347] R10: 0000000000000004 R11: ffffed003ae05b93 R12: ffff8801d702dc80 [ 36.532589] R13: 0000000000000001 R14: ffff8801b79e139c R15: 0000000000000000 [ 36.539836] FS: 00007f2640cfc700(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 [ 36.548037] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.553892] CR2: 00007f48d20c4000 CR3: 00000001b249c003 CR4: 00000000001606f0 [ 36.561138] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.568384] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.575626] Call Trace: [ 36.578194] __rds_rdma_map+0x710/0x1050 [ 36.582238] ? rds_pin_pages+0x300/0x300 [ 36.586278] ? __might_sleep+0x95/0x190 [ 36.590230] ? kasan_check_write+0x14/0x20 [ 36.594450] ? _copy_from_user+0x99/0x110 [ 36.598577] rds_get_mr_for_dest+0x1d4/0x2c0 [ 36.602962] ? rds_get_mr+0xf0/0xf0 [ 36.606567] ? iterate_fd+0x3f0/0x3f0 [ 36.610360] rds_setsockopt+0x6cc/0x980 [ 36.614306] ? rds_setsockopt+0x6cc/0x980 [ 36.618431] ? selinux_netlbl_socket_setsockopt+0x10c/0x460 [ 36.624115] ? rds_getsockopt+0x280/0x280 [ 36.628249] ? selinux_socket_setsockopt+0x64/0x80 [ 36.633156] ? security_socket_setsockopt+0x89/0xb0 [ 36.638149] SyS_setsockopt+0x189/0x360 [ 36.642101] ? SyS_recv+0x40/0x40 [ 36.645532] ? lock_release+0xa40/0xa40 [ 36.649480] ? __switch_to+0x6cd/0x13c0 [ 36.653435] ? compat_start_thread+0x80/0x80 [ 36.657818] ? SyS_recv+0x40/0x40 [ 36.661247] do_syscall_64+0x281/0x940 [ 36.665110] ? _raw_spin_unlock_irq+0x27/0x70 [ 36.669579] ? finish_task_switch+0x1c1/0x7e0 [ 36.674050] ? syscall_return_slowpath+0x550/0x550 [ 36.678959] ? syscall_return_slowpath+0x2ac/0x550 [ 36.683864] ? prepare_exit_to_usermode+0x350/0x350 [ 36.688862] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 36.693685] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 36.698848] RIP: 0033:0x448ce9 [ 36.702010] RSP: 002b:00007f2640cfbce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 36.709779] RAX: ffffffffffffffda RBX: 00000000006e5a34 RCX: 0000000000448ce9 [ 36.717209] RDX: 0000000000000007 RSI: 0000000000000114 RDI: 0000000000000003 [ 36.724453] RBP: 00000000006e5a30 R08: 00000000000000a0 R09: 0000000000000000 [ 36.731698] R10: 0000000020000380 R11: 0000000000000246 R12: 0000000000000000 [ 36.738942] R13: 00007ffdade6ea7f R14: 00007f2640cfc9c0 R15: 0000000000000001 [ 36.746207] Code: fa 48 c1 ea 03 80 3c 02 00 0f 85 cc 01 00 00 4c 8b bb 88 04 00 00 48 b8 00 00 00 00 00 fc ff df 49 8d 7f 68 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 9c 01 00 00 4d 8b 7f 68 48 b8 00 00 00 00 00 [ 36.765322] RIP: rds_ib_get_mr+0x5c/0x230 RSP: ffff8801b01b7890 [ 36.771808] Dumping ftrace buffer: [ 36.775326] (ftrace buffer empty) [ 36.779005] Kernel Offset: disabled [ 36.782604] Rebooting in 86400 seconds..