[....] Starting enhanced syslogd: rsyslogd[ 11.150781] audit: type=1400 audit(1514286659.824:5): avc: denied { syslog } for pid=2996 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 16.544933] audit: type=1400 audit(1514286665.218:6): avc: denied { map } for pid=3136 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added 'ci-upstream-next-kasan-gce-9,10.128.0.100' (ECDSA) to the list of known hosts. executing program [ 25.664014] audit: type=1400 audit(1514286674.337:7): avc: denied { map } for pid=3151 comm="syzkaller523379" path="/root/syzkaller523379788" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 25.698832] kvm: KVM_SET_TSS_ADDR need to be called before entering vcpu [ 25.749747] kasan: CONFIG_KASAN_INLINE enabled [ 25.754354] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 25.761681] general protection fault: 0000 [#1] SMP KASAN [ 25.767186] Dumping ftrace buffer: [ 25.770690] (ftrace buffer empty) [ 25.774365] Modules linked in: [ 25.777525] CPU: 1 PID: 3155 Comm: syzkaller523379 Not tainted 4.15.0-rc4-next-20171221+ #78 [ 25.786063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 25.795392] RIP: 0010:native_write_cr4+0x4/0x10 [ 25.800025] RSP: 0018:ffff8801c7dff058 EFLAGS: 00010093 [ 25.805361] RAX: ffff8801c8468180 RBX: 00000000001606e0 RCX: ffffffff811a47f2 [ 25.812598] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000001606e0 [ 25.819833] RBP: ffff8801c7dff058 R08: 1ffff10038fbfd67 R09: 0000000000000004 [ 25.827070] R10: ffff8801c7dfefc8 R11: 0000000000000004 R12: 0000000000000093 [ 25.834305] R13: ffff8801c8468180 R14: ffff8801db31a130 R15: ffff8801db31a130 [ 25.841544] FS: 00007f62823d7700(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 [ 25.849735] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 25.855581] CR2: 0000000020a7c000 CR3: 0000000006422004 CR4: 00000000001626e0 [ 25.862818] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 25.870052] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 25.877288] Call Trace: [ 25.879847] hardware_disable+0x34a/0x4b0 [ 25.883965] ? kvm_io_bus_get_dev+0x2a0/0x2a0 [ 25.888428] kvm_arch_hardware_disable+0x35/0xd0 [ 25.893149] ? kvm_io_bus_get_dev+0x2a0/0x2a0 [ 25.897612] hardware_disable_nolock+0x30/0x40 [ 25.902166] on_each_cpu+0xca/0x1b0 [ 25.905758] hardware_disable_all_nolock+0x3e/0x50 [ 25.910651] kvm_put_kvm+0x956/0xde0 [ 25.914334] ? kvm_clear_guest+0xb0/0xb0 [ 25.918363] ? kvm_irqfd_release+0xd1/0x120 [ 25.922660] ? lock_downgrade+0x980/0x980 [ 25.926792] ? _raw_spin_unlock_irq+0x27/0x70 [ 25.931255] ? kvm_irqfd_release+0xdd/0x120 [ 25.935541] ? kvm_irqfd_release+0xdd/0x120 [ 25.939827] ? kvm_put_kvm+0xde0/0xde0 [ 25.943681] kvm_vm_release+0x42/0x50 [ 25.947454] __fput+0x327/0x7e0 [ 25.950701] ? fput+0x140/0x140 [ 25.953948] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 25.960145] ? _raw_spin_unlock_irq+0x27/0x70 [ 25.965219] ____fput+0x15/0x20 [ 25.968465] task_work_run+0x199/0x270 [ 25.972320] ? task_work_cancel+0x210/0x210 [ 25.976606] ? _raw_spin_unlock+0x22/0x30 [ 25.980727] ? switch_task_namespaces+0x87/0xc0 [ 25.985364] do_exit+0x9bb/0x1ad0 [ 25.988783] ? check_noncircular+0x20/0x20 [ 25.992987] ? mm_update_next_owner+0x930/0x930 [ 25.997622] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 26.002777] ? __might_sleep+0x95/0x190 [ 26.006719] ? find_held_lock+0x35/0x1d0 [ 26.010749] ? futex_wait+0x402/0x9a0 [ 26.014515] ? lock_downgrade+0x980/0x980 [ 26.018629] ? __unqueue_futex+0x1c0/0x290 [ 26.022827] ? lock_release+0xa40/0xa40 [ 26.026767] ? fault_in_user_writeable+0x90/0x90 [ 26.031487] ? do_raw_spin_trylock+0x190/0x190 [ 26.036037] ? check_noncircular+0x20/0x20 [ 26.040240] ? drop_futex_key_refs.isra.12+0x63/0xa0 [ 26.045310] ? futex_wait+0x6a9/0x9a0 [ 26.049084] ? find_held_lock+0x35/0x1d0 [ 26.053114] ? get_signal+0x7ae/0x16c0 [ 26.056966] ? lock_downgrade+0x980/0x980 [ 26.061083] do_group_exit+0x149/0x400 [ 26.064933] ? do_raw_spin_trylock+0x190/0x190 [ 26.069481] ? SyS_exit+0x30/0x30 [ 26.072899] ? _raw_spin_unlock_irq+0x27/0x70 [ 26.077360] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 26.082353] get_signal+0x73f/0x16c0 [ 26.086386] ? ptrace_notify+0x130/0x130 [ 26.090416] ? exit_robust_list+0x240/0x240 [ 26.094707] ? __sched_text_start+0x8/0x8 [ 26.098822] ? __fget+0x333/0x570 [ 26.102243] ? lock_downgrade+0x980/0x980 [ 26.106359] do_signal+0x94/0x1ee0 [ 26.109866] ? __lock_is_held+0xb6/0x140 [ 26.113897] ? setup_sigcontext+0x7d0/0x7d0 [ 26.118189] ? schedule+0xf5/0x430 [ 26.121695] ? __schedule+0x2060/0x2060 [ 26.125633] ? iterate_fd+0x3f0/0x3f0 [ 26.129402] ? finish_task_switch+0x1d3/0x740 [ 26.133867] ? exit_to_usermode_loop+0x8c/0x2f0 [ 26.138505] exit_to_usermode_loop+0x258/0x2f0 [ 26.143051] ? ioctl_preallocate+0x2b0/0x2b0 [ 26.147425] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 26.152928] ? selinux_capable+0x40/0x40 [ 26.156960] syscall_return_slowpath+0x490/0x550 [ 26.161681] ? prepare_exit_to_usermode+0x340/0x340 [ 26.166664] ? entry_SYSCALL_64_fastpath+0x69/0x96 [ 26.171560] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 26.176541] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 26.181265] entry_SYSCALL_64_fastpath+0x94/0x96 [ 26.185986] RIP: 0033:0x448619 [ 26.189144] RSP: 002b:00007f62823d6da8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 26.196817] RAX: fffffffffffffe00 RBX: 00000000006ddc6c RCX: 0000000000448619 [ 26.204495] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000006ddc6c [ 26.211732] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 26.218967] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006ddc68 [ 26.226202] R13: 6d766b2f7665642f R14: 00007f62823d79c0 R15: 000000000000000b [ 26.233444] Code: 0f 1f 80 00 00 00 00 55 48 89 e5 0f 20 d8 5d c3 0f 1f 80 00 00 00 00 55 48 89 e5 0f 22 df 5d c3 0f 1f 80 00 00 00 00 55 48 89 e5 <0f> 22 e7 5d c3 0f 1f 80 00 00 00 00 55 48 89 e5 44 0f 20 c0 5d [ 26.254949] RIP: native_write_cr4+0x4/0x10 RSP: ffff8801c7dff058 [ 26.263062] ---[ end trace d777e0864e5f019e ]--- [ 26.269359] Kernel panic - not syncing: Fatal exception [ 26.277221] Dumping ftrace buffer: [ 26.280726] (ftrace buffer empty) [ 26.284403] Kernel Offset: disabled [ 26.287997] Rebooting in 86400 seconds..