[....] Starting enhanced syslogd: rsyslogd[ 10.850888] audit: type=1400 audit(1514460289.486:5): avc: denied { syslog } for pid=2991 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 16.968673] audit: type=1400 audit(1514460295.604:6): avc: denied { map } for pid=3131 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.8' (ECDSA) to the list of known hosts. [ 23.131124] audit: type=1400 audit(1514460301.766:7): avc: denied { map } for pid=3145 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16479 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2017/12/28 11:25:01 parsed 1 programs 2017/12/28 11:25:01 executed programs: 0 [ 23.235740] audit: type=1400 audit(1514460301.871:8): avc: denied { map } for pid=3145 comm="syz-execprog" path="/root/syzkaller-shm265338431" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 23.298502] kvm: KVM_SET_TSS_ADDR need to be called before entering vcpu [ 24.418664] WARNING: CPU: 1 PID: 3521 at arch/x86/kvm/x86.c:7375 kvm_arch_vcpu_ioctl_run+0x1c7/0x5cb0 [ 24.428084] Kernel panic - not syncing: panic_on_warn set ... [ 24.428084] [ 24.435414] CPU: 1 PID: 3521 Comm: syz-executor4 Not tainted 4.15.0-rc4-next-20171221+ #78 [ 24.443789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 24.453108] Call Trace: [ 24.455751] dump_stack+0x194/0x257 [ 24.459349] ? arch_local_irq_restore+0x53/0x53 [ 24.459915] WARNING: CPU: 0 PID: 3531 at arch/x86/kvm/x86.c:7375 kvm_arch_vcpu_ioctl_run+0x1c7/0x5cb0 [ 24.459918] Modules linked in: [ 24.459924] CPU: 0 PID: 3531 Comm: syz-executor2 Not tainted 4.15.0-rc4-next-20171221+ #78 [ 24.459926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 24.459931] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1c7/0x5cb0 [ 24.459934] RSP: 0018:ffff8801d82176b0 EFLAGS: 00010293 [ 24.459938] RAX: ffff8801d513e740 RBX: ffff8801d4817000 RCX: ffffffff810df6b7 [ 24.459940] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8801d4461420 [ 24.459947] RBP: ffff8801d8217a40 R08: 1ffff1003a88cd1b R09: 0000000000000001 [ 24.459949] R10: ffff8801d8217690 R11: 0000000000000004 R12: 0000000000000000 [ 24.459952] R13: ffff8801bdd00d80 R14: ffff8801d4461200 R15: ffff8801d4461200 [ 24.459955] FS: 00007f3ef8da8700(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 [ 24.459958] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 24.459961] CR2: 00007f7ee4ce0000 CR3: 00000001d4d4b006 CR4: 00000000001626f0 [ 24.459965] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 24.459967] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 24.459969] Call Trace: [ 24.459980] ? mutex_lock_io_nested+0x1900/0x1900 [ 24.459986] ? futex_wait_setup+0x22e/0x3d0 [ 24.459998] ? futex_wake+0x680/0x680 [ 24.460006] ? lock_downgrade+0x980/0x980 [ 24.460013] ? kvm_arch_vcpu_runnable+0x560/0x560 [ 24.460017] ? __lock_acquire+0x664/0x3e00 [ 24.460021] ? mmdrop+0x18/0x30 [ 24.460026] ? drop_futex_key_refs.isra.12+0x63/0xa0 [ 24.460031] ? futex_wait+0x6a9/0x9a0 [ 24.460046] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 24.460054] ? mmdrop+0x18/0x30 [ 24.460059] ? drop_futex_key_refs.isra.12+0x63/0xa0 [ 24.460065] ? futex_wake+0x2ca/0x680 [ 24.460076] ? get_futex_key+0x1d50/0x1d50 [ 24.460095] ? lock_release+0xa40/0xa40 [ 24.460101] ? check_noncircular+0x20/0x20 [ 24.460116] kvm_vcpu_ioctl+0x6f1/0xff0 [ 24.460119] ? kvm_vcpu_ioctl+0x6f1/0xff0 [ 24.460127] ? kvm_vcpu_fault+0x520/0x520 [ 24.460139] ? find_held_lock+0x35/0x1d0 [ 24.460151] ? __fget+0x333/0x570 [ 24.460157] ? lock_downgrade+0x980/0x980 [ 24.460166] ? lock_release+0xa40/0xa40 [ 24.460173] ? __lock_is_held+0xb6/0x140 [ 24.460189] ? __fget+0x35c/0x570 [ 24.460201] ? iterate_fd+0x3f0/0x3f0 [ 24.460207] ? get_unused_fd_flags+0x190/0x190 [ 24.460212] ? may_open_dev+0xe0/0xe0 [ 24.460225] ? kvm_vcpu_fault+0x520/0x520 [ 24.460229] do_vfs_ioctl+0x1b1/0x1520 [ 24.460235] ? putname+0xee/0x130 [ 24.460242] ? ioctl_preallocate+0x2b0/0x2b0 [ 24.460252] ? selinux_capable+0x40/0x40 [ 24.460261] ? SyS_futex+0x269/0x390 [ 24.460277] ? security_file_ioctl+0x89/0xb0 [ 24.460285] SyS_ioctl+0x8f/0xc0 [ 24.460295] entry_SYSCALL_64_fastpath+0x1f/0x96 [ 24.460298] RIP: 0033:0x452ac9 [ 24.460300] RSP: 002b:00007f3ef8da7c58 EFLAGS: 00000212 ORIG_RAX: 0000000000000010 [ 24.460304] RAX: ffffffffffffffda RBX: 000000000071bea0 RCX: 0000000000452ac9 [ 24.460307] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000004 [ 24.460309] RBP: 000000000000039b R08: 0000000000000000 R09: 0000000000000000 [ 24.460312] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f2728 [ 24.460314] R13: 00000000ffffffff R14: 00007f3ef8da86d4 R15: 0000000000000000 [ 24.460333] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 00 59 00 00 49 83 bf 98 2b 00 00 00 0f 84 71 21 00 00 e8 29 3c 62 00 <0f> ff e8 22 3c 62 00 48 8d 7b 01 48 b8 00 00 00 00 00 fc ff df [ 24.460417] ---[ end trace cb442887f648e138 ]--- [ 24.468420] WARNING: CPU: 0 PID: 3536 at arch/x86/kvm/x86.c:7375 kvm_arch_vcpu_ioctl_run+0x1c7/0x5cb0 [ 24.468422] Modules linked in: [ 24.468429] CPU: 0 PID: 3536 Comm: syz-executor1 Tainted: G W 4.15.0-rc4-next-20171221+ #78 [ 24.468432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 24.468437] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1c7/0x5cb0 [ 24.468439] RSP: 0018:ffff8801bd9976b0 EFLAGS: 00010293 [ 24.468443] RAX: ffff8801d4ab6300 RBX: ffff8801d48c8000 RCX: ffffffff810df6b7 [ 24.468445] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8801d4599560 [ 24.468448] RBP: ffff8801bd997a40 R08: 1ffff1003a8b3d43 R09: 0000000000000001 [ 24.468450] R10: ffff8801bd997690 R11: 0000000000000004 R12: 0000000000000000 [ 24.468453] R13: ffff8801bdd00b80 R14: ffff8801d4599340 R15: ffff8801d4599340 [ 24.468456] FS: 00007f413b3a5700(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 [ 24.468459] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 24.468461] CR2: 00007f1a25f2d000 CR3: 00000001d519c004 CR4: 00000000001626f0 [ 24.468465] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 24.468467] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 24.468469] Call Trace: [ 24.468479] ? mutex_lock_io_nested+0x1900/0x1900 [ 24.468484] ? futex_wait_setup+0x22e/0x3d0 [ 24.468496] ? futex_wake+0x680/0x680 [ 24.468501] ? lock_downgrade+0x980/0x980 [ 24.468508] ? kvm_arch_vcpu_runnable+0x560/0x560 [ 24.468512] ? __lock_acquire+0x664/0x3e00 [ 24.468515] ? mmdrop+0x18/0x30 [ 24.468521] ? drop_futex_key_refs.isra.12+0x63/0xa0 [ 24.468526] ? futex_wait+0x6a9/0x9a0 [ 24.468540] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 24.468548] ? mmdrop+0x18/0x30 [ 24.468553] ? drop_futex_key_refs.isra.12+0x63/0xa0 [ 24.468559] ? futex_wake+0x2ca/0x680 [ 24.468570] ? get_futex_key+0x1d50/0x1d50 [ 24.468589] ? lock_release+0xa40/0xa40 [ 24.468595] ? check_noncircular+0x20/0x20 [ 24.468608] kvm_vcpu_ioctl+0x6f1/0xff0 [ 24.468612] ? kvm_vcpu_ioctl+0x6f1/0xff0 [ 24.468619] ? kvm_vcpu_fault+0x520/0x520 [ 24.468631] ? find_held_lock+0x35/0x1d0 [ 24.468643] ? __fget+0x333/0x570 [ 24.468649] ? lock_downgrade+0x980/0x980 [ 24.468657] ? lock_release+0xa40/0xa40 [ 24.468665] ? __lock_is_held+0xb6/0x140 [ 24.468683] ? __fget+0x35c/0x570 [ 24.468695] ? iterate_fd+0x3f0/0x3f0 [ 24.468701] ? get_unused_fd_flags+0x190/0x190 [ 24.468706] ? may_open_dev+0xe0/0xe0 [ 24.468719] ? kvm_vcpu_fault+0x520/0x520 [ 24.468723] do_vfs_ioctl+0x1b1/0x1520 [ 24.468729] ? putname+0xee/0x130 [ 24.468736] ? ioctl_preallocate+0x2b0/0x2b0 [ 24.468746] ? selinux_capable+0x40/0x40 [ 24.468755] ? SyS_futex+0x269/0x390 [ 24.468772] ? security_file_ioctl+0x89/0xb0 [ 24.468781] SyS_ioctl+0x8f/0xc0 [ 24.468791] entry_SYSCALL_64_fastpath+0x1f/0x96 [ 24.468794] RIP: 0033:0x452ac9 [ 24.468796] RSP: 002b:00007f413b3a4c58 EFLAGS: 00000212 ORIG_RAX: 0000000000000010 [ 24.468800] RAX: ffffffffffffffda RBX: 000000000071bea0 RCX: 0000000000452ac9 [ 24.468803] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000004 [ 24.468805] RBP: 000000000000039b R08: 0000000000000000 R09: 0000000000000000 [ 24.468807] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f2728 [ 24.468810] R13: 00000000ffffffff R14: 00007f413b3a56d4 R15: 0000000000000000 [ 24.468826] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 00 59 00 00 49 83 bf 98 2b 00 00 00 0f 84 71 21 00 00 e8 29 3c 62 00 <0f> ff e8 22 3c 62 00 48 8d 7b 01 48 b8 00 00 00 00 00 fc ff df [ 24.468910] ---[ end trace cb442887f648e139 ]--- [ 25.139404] ? vsnprintf+0x1ed/0x1900 [ 25.143187] panic+0x1e4/0x41c [ 25.146348] ? refcount_error_report+0x214/0x214 [ 25.151072] ? show_regs_print_info+0x18/0x18 [ 25.155540] ? __warn+0x1c1/0x200 [ 25.159053] ? kvm_arch_vcpu_ioctl_run+0x1c7/0x5cb0 [ 25.164034] __warn+0x1dc/0x200 [ 25.167282] ? kvm_arch_vcpu_ioctl_run+0x1c7/0x5cb0 [ 25.172267] report_bug+0x211/0x2d0 [ 25.175870] fixup_bug.part.11+0x37/0x80 [ 25.179899] do_error_trap+0x2d7/0x3e0 [ 25.183758] ? math_error+0x400/0x400 [ 25.187530] ? __lock_is_held+0xb6/0x140 [ 25.191578] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 25.196402] do_invalid_op+0x1b/0x20 [ 25.200084] invalid_op+0x22/0x40 [ 25.203514] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1c7/0x5cb0 [ 25.209109] RSP: 0018:ffff8801d56476b0 EFLAGS: 00010293 [ 25.214439] RAX: ffff8801bd9e4580 RBX: ffff8801d95ff000 RCX: ffffffff810df6b7 [ 25.221676] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8801d4dc12e0 [ 25.228913] RBP: ffff8801d5647a40 R08: 1ffff1003a9b8cf3 R09: 0000000000000001 [ 25.236158] R10: ffff8801d5647690 R11: 0000000000000004 R12: 0000000000000000 [ 25.243394] R13: ffff8801d95fe000 R14: ffff8801d4dc10c0 R15: ffff8801d4dc10c0 [ 25.250642] ? kvm_arch_vcpu_ioctl_run+0x1c7/0x5cb0 [ 25.255644] ? mutex_lock_io_nested+0x1900/0x1900 [ 25.260466] ? futex_wait_setup+0x22e/0x3d0 [ 25.264772] ? futex_wake+0x680/0x680 [ 25.268538] ? lock_downgrade+0x980/0x980 [ 25.272654] ? kvm_arch_vcpu_runnable+0x560/0x560 [ 25.277470] ? __lock_acquire+0x664/0x3e00 [ 25.281688] ? mmdrop+0x18/0x30 [ 25.284936] ? drop_futex_key_refs.isra.12+0x63/0xa0 [ 25.290014] ? futex_wait+0x6a9/0x9a0 [ 25.293792] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 25.298951] ? mmdrop+0x18/0x30 [ 25.302200] ? drop_futex_key_refs.isra.12+0x63/0xa0 [ 25.307276] ? futex_wake+0x2ca/0x680 [ 25.311050] ? get_futex_key+0x1d50/0x1d50 [ 25.315369] ? lock_release+0xa40/0xa40 [ 25.319314] ? check_noncircular+0x20/0x20 [ 25.323522] kvm_vcpu_ioctl+0x6f1/0xff0 [ 25.327462] ? kvm_vcpu_ioctl+0x6f1/0xff0 [ 25.331579] ? kvm_vcpu_fault+0x520/0x520 [ 25.335710] ? find_held_lock+0x35/0x1d0 [ 25.339745] ? __fget+0x333/0x570 [ 25.343167] ? lock_downgrade+0x980/0x980 [ 25.347294] ? lock_release+0xa40/0xa40 [ 25.351239] ? __lock_is_held+0xb6/0x140 [ 25.355278] ? __fget+0x35c/0x570 [ 25.358704] ? iterate_fd+0x3f0/0x3f0 [ 25.362472] ? get_unused_fd_flags+0x190/0x190 [ 25.367032] ? may_open_dev+0xe0/0xe0 [ 25.370808] ? kvm_vcpu_fault+0x520/0x520 [ 25.374924] do_vfs_ioctl+0x1b1/0x1520 [ 25.378778] ? putname+0xee/0x130 [ 25.382201] ? ioctl_preallocate+0x2b0/0x2b0 [ 25.386586] ? selinux_capable+0x40/0x40 [ 25.390620] ? SyS_futex+0x269/0x390 [ 25.394313] ? security_file_ioctl+0x89/0xb0 [ 25.398692] SyS_ioctl+0x8f/0xc0 [ 25.402032] entry_SYSCALL_64_fastpath+0x1f/0x96 [ 25.406761] RIP: 0033:0x452ac9 [ 25.409918] RSP: 002b:00007f7d64e07c58 EFLAGS: 00000212 ORIG_RAX: 0000000000000010 [ 25.417593] RAX: ffffffffffffffda RBX: 000000000071bea0 RCX: 0000000000452ac9 [ 25.425055] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000004 [ 25.432306] RBP: 000000000000039b R08: 0000000000000000 R09: 0000000000000000 [ 25.439550] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f2728 [ 25.446793] R13: 00000000ffffffff R14: 00007f7d64e086d4 R15: 0000000000000000 [ 25.454252] Dumping ftrace buffer: [ 25.457824] (ftrace buffer empty) [ 25.461504] Kernel Offset: disabled [ 25.465101] Rebooting in 86400 seconds..