[....] Starting enhanced syslogd: rsyslogd[ 5.212619] audit: type=1400 audit(1513573086.779:5): avc: denied { syslog } for pid=2975 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 10.686387] audit: type=1400 audit(1513573092.253:6): avc: denied { map } for pid=3111 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added 'ci-upstream-next-kasan-gce-2,10.128.0.20' (ECDSA) to the list of known hosts. [ 134.062396] audit: type=1400 audit(1513573215.629:7): avc: denied { map } for pid=3130 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16479 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2017/12/18 05:00:15 parsed 1 programs 2017/12/18 05:00:15 executed programs: 0 [ 134.158481] audit: type=1400 audit(1513573215.725:8): avc: denied { map } for pid=3130 comm="syz-execprog" path="/root/syzkaller-shm533117504" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 134.196789] kvm: KVM_SET_TSS_ADDR need to be called before entering vcpu 2017/12/18 05:00:20 executed programs: 644 2017/12/18 05:00:25 executed programs: 1221 result: failed=false hanged=false err=executor 0: failed: invalid command number 7887609648979993647 (errno 110) child failed (errno 1) loop failed (errno 0) invalid command number 7887609648979993647 (errno 110) child failed (errno 1) loop failed (errno 0) [ 148.029042] general protection fault: 0000 [#1] SMP [ 148.034061] Dumping ftrace buffer: [ 148.037564] (ftrace buffer empty) [ 148.041239] Modules linked in: [ 148.044397] CPU: 1 PID: 3150 Comm: syz-executor5 Not tainted 4.15.0-rc3-next-20171214+ #67 [ 148.052759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 148.062082] RIP: 0010:native_write_cr4+0x4/0x10 [ 148.066710] RSP: 0018:ffff88021fd03d28 EFLAGS: 00010006 [ 148.072037] RAX: ffff880213180600 RBX: 00000000001606e0 RCX: ffffffff8108d968 [ 148.079270] RDX: 0000000000010100 RSI: 0000000000000000 RDI: 00000000001606e0 [ 148.086503] RBP: ffff88021fd03d28 R08: 0000000000000001 R09: 0000000000000002 [ 148.093737] R10: ffff88021fd03e78 R11: 0000000000000002 R12: 0000000000000006 [ 148.100970] R13: ffff880213180600 R14: ffffffff81026eb0 R15: 0000000000000000 [ 148.108204] FS: 0000000001aab940(0000) GS:ffff88021fd00000(0000) knlGS:0000000000000000 [ 148.116390] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 148.122235] CR2: 00007f80317b4000 CR3: 0000000214390006 CR4: 00000000001626e0 [ 148.129471] Call Trace: [ 148.132017] [ 148.134133] hardware_disable+0x1a0/0x210 [ 148.138245] ? kvm_io_bus_get_dev+0x150/0x150 [ 148.142706] kvm_arch_hardware_disable+0x14/0x50 [ 148.147423] hardware_disable_nolock+0x30/0x40 [ 148.151967] flush_smp_call_function_queue+0x95/0x1e0 [ 148.157121] ? selinux_file_free_security+0x30/0x30 [ 148.162101] generic_smp_call_function_single_interrupt+0x13/0x30 [ 148.168297] smp_call_function_single_interrupt+0x42/0x240 [ 148.173882] call_function_single_interrupt+0xa9/0xb0 [ 148.179037] RIP: 0010:kmem_cache_free+0x18/0x270 [ 148.183754] RSP: 0018:ffff88021fd03eb0 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff04 [ 148.191423] RAX: ffff880213180600 RBX: ffff880211951ba0 RCX: ffffffff8164c02d [ 148.198656] RDX: 0000000000000100 RSI: ffff880211951ba0 RDI: ffff8802178d6d00 [ 148.205890] RBP: ffff88021fd03ec8 R08: 0000000000000001 R09: 0000000000000002 [ 148.213121] R10: ffff88021fd03e78 R11: 0000000000000002 R12: ffff8802178d6d00 [ 148.220353] R13: ffff88021fd247b8 R14: ffffffff8164c020 R15: ffffffff8304f960 [ 148.227590] ? selinux_file_free_security+0x30/0x30 [ 148.232571] ? inode_free_rcu+0xd/0x20 [ 148.236424] inode_free_rcu+0x1d/0x20 [ 148.240188] rcu_process_callbacks+0x30e/0x7e0 [ 148.244743] __do_softirq+0xcb/0x4f3 [ 148.248418] ? __lock_is_held+0x5a/0xa0 [ 148.252358] irq_exit+0xd4/0xe0 [ 148.255601] smp_apic_timer_interrupt+0x8e/0x2a0 [ 148.260320] apic_timer_interrupt+0xa9/0xb0 [ 148.264604] [ 148.266806] RIP: 0010:lock_acquire+0xea/0x220 [ 148.271261] RSP: 0018:ffffc9000191bd08 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff11 [ 148.278931] RAX: ffff880213180600 RBX: 0000000000000000 RCX: 00000000d691e307 [ 148.286162] RDX: 00000000000031b2 RSI: 0000000000000000 RDI: 0000000000000286 [ 148.293396] RBP: ffffc9000191bd48 R08: 0000000000000001 R09: 0000000000000001 [ 148.300629] R10: ffffc9000191bce8 R11: 0000000000000000 R12: 0000000000000000 [ 148.307862] R13: 0000000000000000 R14: 0000000000000002 R15: 0000000000000001 [ 148.315103] _raw_read_lock+0x2d/0x40 [ 148.318866] ? do_wait+0x13e/0x3d0 [ 148.322368] do_wait+0x13e/0x3d0 [ 148.325698] kernel_wait4+0xac/0x170 [ 148.329375] ? task_stopped_code+0x90/0x90 [ 148.333571] SYSC_wait4+0xb0/0xc0 [ 148.336990] ? __might_fault+0xb8/0xd0 [ 148.340843] ? _copy_to_user+0x7a/0xa0 [ 148.344693] ? trace_hardirqs_on_caller+0x130/0x1b0 [ 148.349674] SyS_wait4+0x2c/0x40 [ 148.353001] ? SyS_wait4+0x2c/0x40 [ 148.356505] entry_SYSCALL_64_fastpath+0x1f/0x96 [ 148.361222] RIP: 0033:0x40cd8a [ 148.364374] RSP: 002b:00007fff5dedd148 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 148.372042] RAX: ffffffffffffffda RBX: 0000000001aab914 RCX: 000000000040cd8a [ 148.379275] RDX: 0000000040000001 RSI: 00007fff5dedd16c RDI: ffffffffffffffff [ 148.386514] RBP: 000000000000026e R08: 0000000000000001 R09: 0000000001aab940 [ 148.393746] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000026e [ 148.400979] R13: 0000000000000007 R14: 00000000000241c6 R15: 0000000000000001 [ 148.408215] Code: 0f 1f 80 00 00 00 00 55 48 89 e5 0f 20 d8 5d c3 0f 1f 80 00 00 00 00 55 48 89 e5 0f 22 df 5d c3 0f 1f 80 00 00 00 00 55 48 89 e5 <0f> 22 e7 5d c3 0f 1f 80 00 00 00 00 55 48 89 e5 44 0f 20 c0 5d [ 148.427259] RIP: native_write_cr4+0x4/0x10 RSP: ffff88021fd03d28 [ 148.433368] ---[ end trace da59aa79c8d9c627 ]--- [ 148.438083] Kernel panic - not syncing: Fatal exception in interrupt [ 148.444555] general protection fault: 0000 [#2] SMP [ 148.449545] Dumping ftrace buffer: [ 148.453048] (ftrace buffer empty) [ 148.456721] Modules linked in: [ 148.459877] CPU: 0 PID: 8190 Comm: syz-executor5 Tainted: G D 4.15.0-rc3-next-20171214+ #67 [ 148.469540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 148.478858] RIP: 0010:native_write_cr4+0x4/0x10 [ 148.483488] RSP: 0018:ffff88021fc03fb8 EFLAGS: 00010082 [ 148.488816] RAX: 00000000001626f0 RBX: 0000000000000086 RCX: 00000000fefa3223 [ 148.496052] RDX: 00000000001606f0 RSI: 0000000000000000 RDI: 00000000001606f0 [ 148.503287] RBP: ffff88021fc03fb8 R08: 0000000000000000 R09: ffff88021fc03fdc [ 148.510520] R10: ffffc900019b3b30 R11: 0000000000000004 R12: 0000000000000001 [ 148.517754] R13: ffffffff81026eb0 R14: 0000000000000000 R15: 0000000000000040 [ 148.524990] FS: 00007f8383626700(0000) GS:ffff88021fc00000(0000) knlGS:0000000000000000 [ 148.533180] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 148.539022] CR2: 0000000020964000 CR3: 000000000301e002 CR4: 00000000001626f0 [ 148.546258] Call Trace: [ 148.548808] [ 148.550925] smp_reboot_interrupt+0xe2/0x180 [ 148.555297] ? smp_call_function_single+0xe8/0x170 [ 148.560191] reboot_interrupt+0xa9/0xb0 [ 148.564126] [ 148.566328] RIP: 0010:smp_call_function_single+0xea/0x170 [ 148.571825] RSP: 0018:ffffc900019b3ac0 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff07 [ 148.579494] RAX: ffff88021321c480 RBX: 0000000000000000 RCX: ffffffff8127b3f8 [ 148.586729] RDX: 0000000000000000 RSI: 00000000000000fb RDI: 0000000000000830 [ 148.593963] RBP: ffffc900019b3b10 R08: 0000000000000001 R09: 0000000000000004 [ 148.601198] R10: ffffc900019b3b30 R11: 0000000000000004 R12: 0000000000000001 [ 148.608434] R13: ffffffff81026eb0 R14: 0000000000000000 R15: 0000000000000040 [ 148.615671] ? kvm_io_bus_get_dev+0x150/0x150 [ 148.620131] ? smp_call_function_single+0xe8/0x170 [ 148.625027] ? kvm_io_bus_get_dev+0x150/0x150 [ 148.629487] smp_call_function_many+0x2b5/0x2e0 [ 148.634117] ? smp_call_function_many+0x2b5/0x2e0 [ 148.638923] ? lock_acquire+0xbf/0x220 [ 148.642771] ? kvm_io_bus_get_dev+0x150/0x150 [ 148.647230] ? kvm_io_bus_get_dev+0x150/0x150 [ 148.651689] on_each_cpu+0x3d/0x110 [ 148.655280] hardware_disable_all_nolock+0x3e/0x50 [ 148.660171] kvm_put_kvm+0x349/0x4a0 [ 148.663848] ? kvm_put_kvm+0x4a0/0x4a0 [ 148.667699] kvm_vm_release+0x24/0x30 [ 148.671466] __fput+0x120/0x270 [ 148.674712] ____fput+0x15/0x20 [ 148.677954] task_work_run+0xa3/0xe0 [ 148.681635] do_exit+0x3e6/0x1050 [ 148.685051] ? find_held_lock+0x35/0xa0 [ 148.688990] ? get_signal+0x3c7/0xad0 [ 148.692754] do_group_exit+0x60/0x100 [ 148.696519] get_signal+0x36c/0xad0 [ 148.700114] do_signal+0x23/0x670 [ 148.703532] ? do_futex+0x2e0/0xe80 [ 148.707123] ? trace_hardirqs_on+0xd/0x10 [ 148.711235] ? _raw_spin_unlock_irq+0x27/0x50 [ 148.715696] ? __schedule+0x313/0xaf0 [ 148.719465] exit_to_usermode_loop+0x13c/0x160 [ 148.724013] syscall_return_slowpath+0x1b4/0x1e0 [ 148.728733] entry_SYSCALL_64_fastpath+0x94/0x96 [ 148.733449] RIP: 0033:0x452a09 [ 148.736609] RSP: 002b:00007f8383625ce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 148.744279] RAX: fffffffffffffe00 RBX: 000000000071bf80 RCX: 0000000000452a09 [ 148.751513] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000071bf80 [ 148.758745] RBP: 000000000071bf80 R08: 0000000000000001 R09: 000000000071bf58 [ 148.765980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.773216] R13: 00007fff5dedcf1f R14: 00007f83836269c0 R15: 0000000000000002 [ 148.780455] Code: 0f 1f 80 00 00 00 00 55 48 89 e5 0f 20 d8 5d c3 0f 1f 80 00 00 00 00 55 48 89 e5 0f 22 df 5d c3 0f 1f 80 00 00 00 00 55 48 89 e5 <0f> 22 e7 5d c3 0f 1f 80 00 00 00 00 55 48 89 e5 44 0f 20 c0 5d [ 148.799506] RIP: native_write_cr4+0x4/0x10 RSP: ffff88021fc03fb8 [ 148.805614] ---[ end trace da59aa79c8d9c628 ]--- [ 149.504689] Shutting down cpus with NMI [ 149.508661] invalid opcode: 0000 [#3] SMP [ 149.508663] Dumping ftrace buffer: [ 149.508664] (ftrace buffer em[p ty )1 4 9.508665] Modules linked in: [[ 11449.9.505088667272] ] HHaarrdwdwararee n amnaem: e:G ooGgoolgel eGo oGgoleo gColemp uCotmep uEntgei nEen/gGoiongel/e GCooompgultee CEnomgpinuete, BEIngOiS neGo, oBgIlOeS 0 G1o/o0g1l/2e0 110 1/ 01/2011 #67 [[ 114499..550088667799]] R RSSP:P :00 108:0f18ff:fffffffffffffe5f0fe55e0185e 1E8F LEAGFLSA: GS0:0 001000010020 02[[ 114499..55008866884]4] R RDXDX:: 00000000000000010f81bff8bbffbff fRS RIS: I:f fffffffffffffffeff5e055e0254e 2R4DI :RD fI:f fffffffffffffef5f0f5ee5200 5 e20 [[ 114499..550088668888]] RR1100:: 0000000000000000000000000000001 1R 1R11:1 f: ffffff8f880820121332121cc448800 RR112:2 : ffffffffffffffff838034a04ea8e08 0 [[ 141949..55008866993]3] FFSS:: 000000007f78f388383632662760700(00(00000) 00GS): fGffSf:f8f8f02f18f8c002010f00c0(00000000()0 0k0n0l)G S:k0n00lG0S0:00000000000000000 [[ 114499..550088669977]] CCRR22:: 00000000000000002200996644000000 CCR3R:3: 0 00000000000000000330011ee00002 2C CRR44:: 0 00000000001626f0 [[ 114499..550088770011]] <> ace: [[ 114499..550088771111] ] d edfeafualut_ltd_o_donm_in+0mix+40e/x40xe/100x0 [[ 114499..550088772244]] eenndd__rreeppeeaatt__nnmmii++00xx11aa/0x1e [[ 114499..550088772299]] RRSSPP:: 0001018:8f:ffffff8f88800212f1cfc0033ddff88 EEFFLLAAGSGS:: 000000000006 [[ 114499..55008877343]4] RRDDXX:: 00000000000000000000001010000000 RRSSII:: 0 000000000000000000000000000001 1R RDDII:: ffffffffffffffff81811c1c2266bb44 [[ 114499..550088773388]] R R1010:: fffffff8f888002121ffcc0033ee888 8 RR1111:: 0000000000000000000000000000000 0R 1R21:2 :f fffffffffffff8f2fe3872e83c7d 8c d [ [ 1 4194.95.0508784764]6 ] ?? k mkmsgs_gd_udmumpp++0x0x2b2b//00x2xa20a 0 4 : 0000000000000000 R15: 0000000000000040 [[ 114499..550088775522]] ?? ppaanniicc++00xx55cc//00xx22ff88 op+0x9/0x60 [[ 114499..550088776600]] ?? ppaanniicc_s_mspm_p_sselelff__stsotp+o0p+x0bx/b0x/600x 60 [[ 114499.5.0580786726] 2] RQ > [[ 114499..550088776699]] ?? kkmmssgg__dduummpp++00xx11eebb/0x2a0 [[ 114499..550088777766]] ooops_oepnsd+_e0xndd2+/00xxed20 / 02xae00 [[ 114499..550088778855]] ddoo__ggeenneerraall__pprrootection+0x17e/0x1c0 [[ 114499..550088779922]] ggeenneeraral_lp_rpotreocttiecotni+0onx2+0c/x20cx/600 x6 015 0 [[ 114499..550088779988]] RSRSPP: :0 0001818::fffffff8f88802012fc10fc30f3b8f Eb8F LEAFGLSA: G0S:00 010082 [[ 114499..550088880033]] RRDDXX:: 0000000000000000000011660066ff00 RRSSII:: 00000000000000000000000000000000 RRDDII:: 0000000000000000000106106606ff0 0 [[ 114499..550088880077]] RR1100:: ffffffffcc99000001019b93bb33b0 3R0 1R11:1 :00 0000000000000000000000000004 0R4 1R21: 2:0 0000000000000000000000000001 00 1 [[ 114499..550088881122]] ?? kkvvmm__ioio__bubuss__geget_t_ddeevv++00x1x15500//00xx151500 000000000 R15: 0000000000000040 [[ 114499..550088882211]] s smpm_pr_erebboooott__iinntteerrrruupptt+0+x0ex2e/20/x018x180 [[ 1 1494.9.550088882288]] r reebboooott__iinntetrerrurputp+t0+x0a9xa/09/x0b0x b 0 0xe8/0x170 [[ 114499..550088883333]] RRIIPP:: 0000110:smp_call_function_single+0xea/0x170 [[ 114499..550088883377]] RRAAXX:: ffffffff888800221133212c1c448800 R BRXBX:: 000000000000000000000000000000 00RC XR:C Xf:f fffffffffffff81f82712b37bf83f 8 f f07 [[ 1 1494.950.58088418]4 1R]B PR:B Pf:f ffffc9f0f0c9001090b139b1b30b R1008 :R0 08:0 000000000000000000000000100 R00019 : R00900:0 000000000000000000000004 0 004 [[ 11449.95.0580848854]5 R] 1R31:3 :f fffffffffffff8f10f28610e2b06e bR10 4:R 1004:0 00000000000000000000000000 0R0150 :R 0150:0 000000000000000000004000 0 0040 [[ 114499..550088885533]] ?? s smmpp__ccalalll__ffunucncttiioonn__ssiinnggllee++00xxee88//00x170 [[ 1 4194.590.580886186]1 ] s mspm_pca_cllal_lf_ufnucntcitoino_nm_maannyy++00xx2b2b55//0x02xe02 e [[ 114499.5.50088886868]] ?? lloocckk__aaccqquuiirere++00xbxbff/0/x02x202 2 0 x2b5/0x2e0 [[ 1 4149.95.50088878755]] ? ? kvkmv_mi_io_buos_b_ugest__gdeetv_d+e0vx1+050x/105x01/500 x 150 [[ 114499..550088888822]] hhaarrddwwaarree__ddiissaablbel_ea_llal_nl_onolock+0x3e/0x50 [[ 114499..5508088898]8 9] ? ?k vmkv_mpu_ptu_ktv_kmv+m0+x40xa04a/00/x04xa04a [[ 114499..550088889977]] ____ffppuutt++00xx121200//00xx22770 0 /0x30 [[ 114499..550088990077]] ttaasskk__wwoorrkk__rruunn++00xxaa33//0xe0 [[ 114499..550088991144]] ?? f fiinndd__hheleldd__lloocckk++0x0x335/50xa0 [[ 114499..550088992222]] ddoo__ggrroouupp__eexxiitt++00xx6600//00xx110000 [[ 114499..550088993311]] ddoo__ssiiggnnaall++00xx2233//00xx667700 0 [[ 114499..550088994400]] ?? t trraaccee__hhaarrdidriqrsqs__oon+n+0x0dxd/0x10 [[ 114499.5.50088994848]] ?? ___s_cschehdeduullee++00x3x31133//0x0axaff00 27/0x50 [[ 114499..505808995588]] s sysysccaallll__rreteuturrn_n_sslloowwpapatthh+0+x01x1bb44//00xx11ee0 [[ 114499..550088996633]] RRIIPP:: 00003333::00xx445522aa0099 astpath+0x94/0x96 [[ 114499..550088996688]] RRAAXX:: ffffffffffffffffffffffffffee000 0 RRBXBX:: 00000000000000000007071b1bf8f08 0RC RXC: X:0 000000000000000000450425a029a0 9 00ca [[ 114499.5.5008899772]2] R RBBP:P: 000000000000000000007711bfbf880 0R 0R80:8 0:0 00000000000000000000000000010 1R 0R9:09 0:0 00000000000000007010b7f518b f 58 [[ 114499..505809897766]] RR1133: : 0000000707fffff5fd5deeddccff1f1 fR1 R41:4 :0 00000070f87f38833862366926c09c 0R1 R5:15 0: 00000000000000000000000000002 02 [[ 114499..550909030322] ] RRIPIP: :s mpsm_ps_tsopto_np_mni_mica_lcallbalcbak+ck0+x60ex6/e0/x107x107 R0 SPRS:P f: ffffffffffffffffef5e055e0185e 1 8 e0 f6 c4 20 75 13 31 ff e8 ce fb fd ff 48 83 c4 18 b8 01 00 00 00 5b 5d c3 <0f> 01 c4 48 83 3d e7 a0 f5 01 00 0f 84 c5 00 00 00 9c 58 0f 1f [ [ 114949..551196946242]] ( f(ftrtraacec eb ubffufefre re mepmtpyty) [ 149.519644] Kernel Offset: disabled [ 150.040135] ---[ end trace da59aa79c8d9c629 ]--- [ 150.048428] Rebooting in 86400 seconds..