[....] Starting enhanced syslogd: rsyslogd[ 12.584153] audit: type=1400 audit(1515910359.425:5): avc: denied { syslog } for pid=3505 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 17.827065] audit: type=1400 audit(1515910364.667:6): avc: denied { map } for pid=3645 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.15.222' (ECDSA) to the list of known hosts. [ 24.014678] audit: type=1400 audit(1515910370.855:7): avc: denied { map } for pid=3658 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16479 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2018/01/14 06:12:51 parsed 1 programs 2018/01/14 06:12:51 executed programs: 0 [ 24.165524] audit: type=1400 audit(1515910371.005:8): avc: denied { map } for pid=3658 comm="syz-execprog" path="/root/syzkaller-shm290903060" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 24.203728] kvm: KVM_SET_TSS_ADDR need to be called before entering vcpu [ 27.213260] WARNING: CPU: 0 PID: 3986 at arch/x86/kvm/x86.c:7375 kvm_arch_vcpu_ioctl_run+0x1c7/0x5cb0 [ 27.222670] Kernel panic - not syncing: panic_on_warn set ... [ 27.222670] [ 27.230006] CPU: 0 PID: 3986 Comm: syz-executor0 Not tainted 4.15.0-rc7-next-20180112+ #96 [ 27.238897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 27.248581] Call Trace: [ 27.251143] dump_stack+0x194/0x257 [ 27.254767] ? arch_local_irq_restore+0x53/0x53 [ 27.259675] ? vsnprintf+0x1ed/0x1900 [ 27.263451] panic+0x1e4/0x41c [ 27.267052] ? refcount_error_report+0x214/0x214 [ 27.272039] ? show_regs_print_info+0x18/0x18 [ 27.276517] ? get_cpu_entry_area+0xc/0x30 [ 27.280999] ? __warn+0x1c1/0x200 [ 27.284438] ? kvm_arch_vcpu_ioctl_run+0x1c7/0x5cb0 [ 27.289430] __warn+0x1dc/0x200 [ 27.292694] ? kvm_arch_vcpu_ioctl_run+0x1c7/0x5cb0 [ 27.297695] report_bug+0x211/0x2d0 [ 27.301302] fixup_bug.part.11+0x37/0x80 [ 27.305607] do_error_trap+0x2d7/0x3e0 [ 27.309468] ? trace_hardirqs_on+0xd/0x10 [ 27.313589] ? math_error+0x400/0x400 [ 27.317367] ? __lock_is_held+0xb6/0x140 [ 27.321409] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 27.326231] do_invalid_op+0x1b/0x20 [ 27.330985] invalid_op+0x22/0x40 [ 27.335366] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1c7/0x5cb0 [ 27.340969] RSP: 0018:ffff8801ca0276b0 EFLAGS: 00010293 [ 27.346665] RAX: ffff8801ca314680 RBX: ffff8801d01c2000 RCX: ffffffff810df8c7 [ 27.353908] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8801ca1c9de0 [ 27.361161] RBP: ffff8801ca027a40 R08: 1ffff10039439e53 R09: 0000000000000001 [ 27.368402] R10: ffff8801ca027690 R11: 0000000000000000 R12: 0000000000000000 [ 27.375646] R13: ffff8801ccdc6600 R14: ffff8801ca1c9bc0 R15: ffff8801ca1c9bc0 [ 27.383545] ? kvm_arch_vcpu_ioctl_run+0x1c7/0x5cb0 [ 27.388541] ? mark_held_locks+0xaf/0x100 [ 27.393011] ? _raw_spin_unlock_irqrestore+0x31/0xba [ 27.398524] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 27.403531] ? trace_hardirqs_on+0xd/0x10 [ 27.407664] ? free_object+0x150/0x230 [ 27.411524] ? kvm_arch_vcpu_runnable+0x560/0x560 [ 27.416337] ? debug_stats_show+0xd0/0xd0 [ 27.421221] ? _raw_spin_unlock_irqrestore+0x31/0xba [ 27.426315] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 27.431310] ? debug_object_free+0x2f1/0x5a0 [ 27.435689] ? lockdep_init_map+0x9/0x10 [ 27.439729] ? debug_object_destroy+0x2b0/0x2b0 [ 27.444379] ? __wait_rcu_gp+0x230/0x340 [ 27.448422] ? synchronize_sched.part.64+0xac/0x100 [ 27.453420] ? synchronize_sched_expedited+0xf0/0xf0 [ 27.458495] ? call_rcu_bh+0x20/0x20 [ 27.462185] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 27.468045] ? put_pid+0x183/0x1f0 [ 27.471556] ? task_active_pid_ns+0xd0/0xd0 [ 27.475862] ? __might_sleep+0x95/0x190 [ 27.479815] kvm_vcpu_ioctl+0x6f1/0xff0 [ 27.483763] ? kvm_vcpu_ioctl+0x6f1/0xff0 [ 27.487885] ? kvm_vcpu_fault+0x520/0x520 [ 27.492013] ? find_held_lock+0x35/0x1d0 [ 27.496055] ? __fget+0x333/0x570 [ 27.499480] ? lock_downgrade+0x980/0x980 [ 27.503602] ? lock_release+0xa40/0xa40 [ 27.508966] ? __lock_is_held+0xb6/0x140 [ 27.513285] ? __fget+0x35c/0x570 [ 27.516731] ? iterate_fd+0x3f0/0x3f0 [ 27.520511] ? lock_release+0xa40/0xa40 [ 27.524458] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 27.530327] ? __getnstimeofday64+0x143/0x470 [ 27.534800] ? kvm_vcpu_fault+0x520/0x520 [ 27.538921] do_vfs_ioctl+0x1b1/0x1520 [ 27.542786] ? ioctl_preallocate+0x2b0/0x2b0 [ 27.547169] ? selinux_capable+0x40/0x40 [ 27.551219] ? SyS_futex+0x269/0x390 [ 27.554925] ? security_file_ioctl+0x89/0xb0 [ 27.559310] SyS_ioctl+0x8f/0xc0 [ 27.562673] entry_SYSCALL_64_fastpath+0x29/0xa0 [ 27.567411] RIP: 0033:0x452cf9 [ 27.571682] RSP: 002b:00007fe7129eec58 EFLAGS: 00000212 ORIG_RAX: 0000000000000010 [ 27.580143] RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452cf9 [ 27.587481] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 27.594733] RBP: 000000000000042d R08: 0000000000000000 R09: 0000000000000000 [ 27.601978] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f44d8 [ 27.610102] R13: 00000000ffffffff R14: 00007fe7129ef6d4 R15: 0000000000000002 [ 27.617908] Dumping ftrace buffer: [ 27.621490] (ftrace buffer empty) [ 27.625974] Kernel Offset: disabled [ 27.630022] Rebooting in 86400 seconds..