[....] Starting enhanced syslogd: rsyslogd[ 13.054866] audit: type=1400 audit(1513063667.590:5): avc: denied { syslog } for pid=2989 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 19.242102] audit: type=1400 audit(1513063673.777:6): avc: denied { map } for pid=3129 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added 'ci-upstream-mmots-kasan-gce-6,10.128.0.20' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program executing program executing program [ 41.029409] audit: type=1400 audit(1513063695.565:7): avc: denied { map } for pid=3146 comm="syzkaller909625" path="/root/syzkaller909625532" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 executing program executing program executing program executing program executing program executing program executing program executing program [ 41.076362] kvm: KVM_SET_TSS_ADDR need to be called before entering vcpu executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 41.552375] pte_list_remove: 0000000067f113ab 0->BUG [ 41.557606] ------------[ cut here ]------------ [ 41.562335] kernel BUG at arch/x86/kvm/mmu.c:1208! [ 41.567361] invalid opcode: 0000 [#1] SMP KASAN [ 41.571995] Dumping ftrace buffer: [ 41.575498] (ftrace buffer empty) [ 41.579176] Modules linked in: [ 41.582336] CPU: 1 PID: 3592 Comm: syzkaller909625 Not tainted 4.15.0-rc2-mm1+ #39 [ 41.590004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 41.599334] RIP: 0010:pte_list_remove+0x3ae/0x3c0 [ 41.604138] RSP: 0018:ffff8801c1dd6f30 EFLAGS: 00010286 [ 41.609466] RAX: 0000000000000028 RBX: ffff8801c1511740 RCX: 0000000000000000 [ 41.616700] RDX: 0000000000000028 RSI: 1ffff100383bada6 RDI: ffffed00383badda [ 41.623937] RBP: ffff8801c1dd6f70 R08: 1ffff100383bad68 R09: 0000000000000000 [ 41.631173] R10: 000000000000000b R11: 0000000000000000 R12: ffff8801c0fb6000 [ 41.638409] R13: 0000000000000000 R14: ffff8801c2f09a38 R15: ffff8801c2f09a60 [ 41.645659] FS: 0000000000000000(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 [ 41.653849] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.659702] CR2: 00007f4e087d7000 CR3: 00000001c1a27000 CR4: 00000000001426e0 [ 41.666945] Call Trace: [ 41.669503] drop_spte+0x15a/0x250 [ 41.673011] mmu_page_zap_pte+0x224/0x340 [ 41.677124] ? kvm_mmu_zap_collapsible_spte+0x3f0/0x3f0 [ 41.682455] ? __lock_is_held+0xbc/0x140 [ 41.686499] kvm_mmu_prepare_zap_page+0x1c5/0x1310 [ 41.691396] ? __is_insn_slot_addr+0x1fc/0x330 [ 41.695945] ? mmio_info_in_cache+0x6b0/0x6b0 [ 41.700405] ? __lock_acquire+0x6e9/0x47f0 [ 41.704607] ? unwind_dump+0x4d0/0x4d0 [ 41.708461] ? __read_once_size_nocheck.constprop.8+0x10/0x10 [ 41.714312] ? check_noncircular+0x20/0x20 [ 41.718521] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 41.723675] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 41.728828] ? __free_insn_slot+0x5c0/0x5c0 [ 41.733120] ? check_noncircular+0x20/0x20 [ 41.737320] ? kvm_make_all_cpus_request+0x44a/0x580 [ 41.742394] ? gfn_to_pfn_atomic+0x650/0x650 [ 41.746773] ? lock_release+0xda0/0xda0 [ 41.750714] ? __free_insn_slot+0x5c0/0x5c0 [ 41.755000] ? __lock_is_held+0xbc/0x140 [ 41.759028] ? kvm_dying_cpu+0x40/0x40 [ 41.762885] kvm_mmu_invalidate_zap_all_pages+0x4a0/0x680 [ 41.768389] ? kvm_mmu_zap_collapsible_sptes+0xb0/0xb0 [ 41.773633] ? lock_acquire+0x1d5/0x580 [ 41.777573] ? lock_release+0xda0/0xda0 [ 41.781510] ? lock_release+0xda0/0xda0 [ 41.785453] ? save_stack+0x43/0xd0 [ 41.789044] ? kmem_cache_free+0x77/0x280 [ 41.793156] ? kvm_dying_cpu+0x40/0x40 [ 41.797010] kvm_arch_flush_shadow_all+0x15/0x20 [ 41.801730] kvm_mmu_notifier_release+0x59/0x90 [ 41.806361] ? kvm_dying_cpu+0x40/0x40 [ 41.810215] __mmu_notifier_release+0x1d5/0x690 [ 41.814857] ? __mmu_notifier_invalidate_range_end+0x360/0x360 [ 41.820793] ? __khugepaged_exit+0x9a/0x640 [ 41.825083] ? lock_release+0xda0/0xda0 [ 41.829020] ? rcu_pm_notify+0xc0/0xc0 [ 41.832876] ? __khugepaged_exit+0x40f/0x640 [ 41.837253] exit_mmap+0x42d/0x530 [ 41.840760] ? SyS_munmap+0x30/0x30 [ 41.844351] ? __khugepaged_exit+0x42f/0x640 [ 41.848728] ? hugepage_madvise+0xf0/0xf0 [ 41.852845] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 41.858697] ? rcu_note_context_switch+0x710/0x710 [ 41.863589] ? reacquire_held_locks+0x201/0x3e0 [ 41.868225] ? __might_sleep+0x95/0x190 [ 41.872168] mmput+0x223/0x6c0 [ 41.875327] ? get_task_exe_file+0xc0/0xc0 [ 41.879527] ? lock_downgrade+0x980/0x980 [ 41.883639] ? is_current_pgrp_orphaned+0xa0/0xa0 [ 41.888448] ? do_exit+0x8a1/0x1ae0 [ 41.892039] ? rcu_note_context_switch+0x710/0x710 [ 41.896937] ? lock_release+0xda0/0xda0 [ 41.900877] ? __might_sleep+0x95/0x190 [ 41.904823] ? do_raw_spin_trylock+0x190/0x190 [ 41.909378] ? __down_interruptible+0x6b0/0x6b0 [ 41.914013] ? trace_hardirqs_on+0xd/0x10 [ 41.918127] ? _raw_spin_unlock_irq+0x27/0x70 [ 41.922593] do_exit+0x90a/0x1ae0 [ 41.926014] ? hrtimer_try_to_cancel+0x51/0x5c0 [ 41.930655] ? mm_update_next_owner+0x930/0x930 [ 41.935290] ? __hrtimer_get_remaining+0x1c0/0x1c0 [ 41.940189] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 41.946037] ? _do_fork+0x2ae/0xf10 [ 41.949632] ? rcu_note_context_switch+0x710/0x710 [ 41.954525] ? fork_idle+0x2d0/0x2d0 [ 41.958202] ? __might_sleep+0x95/0x190 [ 41.962145] ? do_nanosleep+0x4fc/0x6e0 [ 41.966085] ? schedule_timeout_idle+0x90/0x90 [ 41.970640] ? memset+0x31/0x40 [ 41.973889] ? hrtimer_nanosleep+0x2cc/0x860 [ 41.978263] ? nanosleep_copyout+0x100/0x100 [ 41.982636] ? __might_sleep+0x95/0x190 [ 41.986576] ? kasan_check_write+0x14/0x20 [ 41.990775] ? _copy_from_user+0x99/0x110 [ 41.994890] ? __hrtimer_init+0x140/0x140 [ 41.999007] ? syscall_return_slowpath+0x550/0x550 [ 42.003902] do_group_exit+0x149/0x400 [ 42.007757] ? SyS_exit+0x30/0x30 [ 42.011176] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 42.016158] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 42.020890] SyS_exit_group+0x1d/0x20 [ 42.024662] entry_SYSCALL_64_fastpath+0x1f/0x96 [ 42.029383] RIP: 0033:0x449519 [ 42.032540] RSP: 002b:00007fff95356c78 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7 [ 42.040220] RAX: ffffffffffffffda RBX: 00007f81cea5b700 RCX: 0000000000449519 [ 42.047456] RDX: 0000000000447be1 RSI: 0000000000000000 RDI: 0000000000000000 [ 42.054691] RBP: 00007fff95356c20 R08: 00000000006dfbc0 R09: 0000000000000000 [ 42.061933] R10: 00000000006dfb44 R11: 0000000000000202 R12: 0000000000000000 [ 42.069168] R13: 00007fff95356c1f R14: 00007f81cea5b9c0 R15: 0000000000000000 [ 42.076412] Code: d9 18 61 00 48 8b 75 d0 48 c7 c7 00 61 62 85 e8 61 d9 4a 00 0f 0b e8 c2 18 61 00 48 8b 75 d0 48 c7 c7 c0 60 62 85 e8 4a d9 4a 00 <0f> 0b 4c 89 ef e8 e8 b6 97 00 e9 01 fe ff ff 0f 1f 00 55 48 89 [ 42.095476] RIP: pte_list_remove+0x3ae/0x3c0 RSP: ffff8801c1dd6f30 [ 42.101832] ---[ end trace d66bccd92324d047 ]--- [ 42.106570] Kernel panic - not syncing: Fatal exception [ 42.111925] Dumping ftrace buffer: [ 42.115434] (ftrace buffer empty) [ 42.119110] Kernel Offset: disabled [ 42.122705] Rebooting in 86400 seconds..