[....] Starting enhanced syslogd: rsyslogd[ 13.154175] audit: type=1400 audit(1516798562.891:5): avc: denied { syslog } for pid=3505 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 18.867698] audit: type=1400 audit(1516798568.604:6): avc: denied { map } for pid=3644 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.15.224' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program executing program executing program [ 25.110427] audit: type=1400 audit(1516798574.847:7): avc: denied { map } for pid=3658 comm="syzkaller178250" path="/root/syzkaller178250375" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 25.165621] kvm: KVM_SET_TSS_ADDR need to be called before entering vcpu executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 26.051154] WARNING: CPU: 0 PID: 3821 at arch/x86/kvm/x86.c:7305 kvm_arch_vcpu_ioctl_run+0x1bf/0x5bf0 [ 26.060593] Kernel panic - not syncing: panic_on_warn set ... [ 26.060593] [ 26.067931] CPU: 0 PID: 3821 Comm: syzkaller178250 Not tainted 4.15.0-rc9+ #187 [ 26.075355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 26.084689] Call Trace: [ 26.087264] dump_stack+0x194/0x257 [ 26.090871] ? arch_local_irq_restore+0x53/0x53 [ 26.095525] ? vsnprintf+0x1ed/0x1900 executing program executing program executing program executing program [ 26.099310] panic+0x1e4/0x41c [ 26.102480] ? refcount_error_report+0x214/0x214 [ 26.107224] ? show_regs_print_info+0x18/0x18 [ 26.111706] ? __warn+0x1c1/0x200 [ 26.115140] ? kvm_arch_vcpu_ioctl_run+0x1bf/0x5bf0 [ 26.120130] __warn+0x1dc/0x200 [ 26.123391] ? kvm_arch_vcpu_ioctl_run+0x1bf/0x5bf0 [ 26.128473] report_bug+0x211/0x2d0 [ 26.132081] fixup_bug.part.11+0x37/0x80 [ 26.136120] do_error_trap+0x2d7/0x3e0 [ 26.139987] ? check_noncircular+0x20/0x20 [ 26.144202] ? trace_hardirqs_on+0xd/0x10 executing program executing program [ 26.148326] ? math_error+0x400/0x400 [ 26.152105] ? __lock_is_held+0xb6/0x140 [ 26.156152] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 26.160975] do_invalid_op+0x1b/0x20 [ 26.164662] invalid_op+0x22/0x40 [ 26.168098] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1bf/0x5bf0 [ 26.173690] RSP: 0018:ffff8801d4b27580 EFLAGS: 00010293 [ 26.179033] RAX: ffff8801d4b9a6c0 RBX: ffff8801cfc04000 RCX: ffffffff810df29f [ 26.186273] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8801d0b185e0 [ 26.193514] RBP: ffff8801d4b27910 R08: 1ffff1003a964e93 R09: 0000000000000001 executing program executing program [ 26.200766] R10: ffff8801d4b27930 R11: 0000000000000000 R12: 0000000000000000 [ 26.208009] R13: 1ffff1003a964f4d R14: ffff8801d143d680 R15: ffff8801d0b183c0 [ 26.215273] ? kvm_arch_vcpu_ioctl_run+0x1bf/0x5bf0 [ 26.220291] ? mark_held_locks+0xaf/0x100 [ 26.224417] ? _raw_spin_unlock_irqrestore+0x31/0xba [ 26.229500] ? trace_hardirqs_on+0xd/0x10 [ 26.233635] ? kvm_arch_vcpu_runnable+0x560/0x560 [ 26.238462] ? debug_stats_show+0xd0/0xd0 [ 26.242580] ? _raw_spin_unlock_irqrestore+0x31/0xba executing program [ 26.247662] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 26.252656] ? debug_object_free+0x2f1/0x5a0 [ 26.257038] ? lockdep_init_map+0x9/0x10 [ 26.261076] ? debug_object_destroy+0x2b0/0x2b0 [ 26.265737] ? __wait_rcu_gp+0x230/0x340 [ 26.269786] ? synchronize_sched.part.64+0xac/0x100 [ 26.274785] ? synchronize_sched_expedited+0xf0/0xf0 [ 26.279863] ? call_rcu_bh+0x20/0x20 [ 26.283560] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 26.289430] ? put_pid+0x183/0x1f0 [ 26.292943] ? task_active_pid_ns+0xd0/0xd0 [ 26.297242] ? __might_sleep+0x95/0x190 [ 26.301205] kvm_vcpu_ioctl+0x64c/0x1010 [ 26.305250] ? kvm_vcpu_ioctl+0x64c/0x1010 [ 26.309463] ? trace_event_raw_event_kvm_age_page+0x340/0x340 [ 26.315332] ? __fget+0x333/0x570 [ 26.318759] ? lock_downgrade+0x980/0x980 [ 26.322885] ? lock_release+0xa40/0xa40 [ 26.326837] ? __lock_is_held+0xb6/0x140 [ 26.330890] ? __fget+0x35c/0x570 [ 26.334326] ? iterate_fd+0x3f0/0x3f0 [ 26.338194] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 26.344062] ? rcu_note_context_switch+0x710/0x710 [ 26.349073] ? __might_sleep+0x95/0x190 [ 26.353026] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 26.357941] ? selinux_file_ioctl+0x444/0x690 [ 26.362418] ? __fget_light+0x297/0x380 [ 26.366375] kvm_vcpu_compat_ioctl+0x364/0x450 [ 26.370934] ? kvm_vcpu_ioctl+0x1010/0x1010 [ 26.375250] ? compat_SyS_futex+0x288/0x380 [ 26.379552] ? security_file_ioctl+0x7d/0xb0 [ 26.383940] ? security_file_ioctl+0x89/0xb0 [ 26.388326] compat_SyS_ioctl+0x151/0x2a30 [ 26.392531] ? lock_downgrade+0x980/0x980 [ 26.396664] ? do_fast_syscall_32+0x156/0xf9d [ 26.401133] ? kvm_vcpu_ioctl+0x1010/0x1010 [ 26.405428] ? do_ioctl+0x60/0x60 [ 26.408857] do_fast_syscall_32+0x3ee/0xf9d [ 26.413154] ? do_raw_spin_trylock+0x190/0x190 [ 26.417810] ? do_int80_syscall_32+0x9d0/0x9d0 [ 26.422375] ? syscall_return_slowpath+0x2ad/0x550 [ 26.427292] ? prepare_exit_to_usermode+0x340/0x340 [ 26.432296] ? sysret32_from_system_call+0x5/0x3b [ 26.437119] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 26.441950] entry_SYSENTER_compat+0x54/0x63 [ 26.446331] RIP: 0023:0xf7f77c79 [ 26.449666] RSP: 002b:00000000f7e891ec EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 26.457358] RAX: ffffffffffffffda RBX: 0000000000000040 RCX: 000000000000ae80 [ 26.464603] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 26.471869] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 26.479114] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 26.486368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 26.493806] kasan: CONFIG_KASAN_INLINE enabled [ 26.498404] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 26.505756] general protection fault: 0000 [#1] SMP KASAN [ 26.511274] Dumping ftrace buffer: [ 26.514790] (ftrace buffer empty) [ 26.518471] Modules linked in: [ 26.521635] CPU: 1 PID: 3656 Comm: sshd Not tainted 4.15.0-rc9+ #187 [ 26.528093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 26.537434] RIP: 0010:native_write_cr4+0x4/0x10 [ 26.542070] RSP: 0000:ffff8801db307e88 EFLAGS: 00010082 [ 26.547414] RAX: dffffc0000000000 RBX: 00000000001606e0 RCX: 0000000000000001 [ 26.554653] RDX: 1ffffffff0d1916c RSI: 0000000000000000 RDI: 00000000001606e0 [ 26.561895] RBP: ffff8801db307e88 R08: ffff8801db307f40 R09: ffff8801db307f80 [ 26.569135] R10: 00000000259b2802 R11: 00000000092c569c R12: 0000000000000082 [ 26.576376] R13: 1ffff1003b660fd4 R14: ffff8801bd0d8300 R15: ffff8801db307fc0 [ 26.583620] FS: 00007f66e08917c0(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 [ 26.591825] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 26.597677] CR2: 00005652d9f46000 CR3: 00000001d5a4c001 CR4: 00000000001626e0 [ 26.604920] Call Trace: [ 26.607474] [ 26.609602] smp_reboot_interrupt+0x3ea/0x510 [ 26.614067] ? native_stop_other_cpus+0x3d0/0x3d0 [ 26.618890] ? _raw_spin_unlock+0x22/0x30 [ 26.623007] ? handle_edge_irq+0x2b4/0x7c0 [ 26.627212] ? task_prio+0x40/0x40 [ 26.630725] ? handle_irq+0x17a/0x300 [ 26.634505] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 26.639329] reboot_interrupt+0xa9/0xb0 [ 26.643281] [ 26.645489] RIP: 0033:0x7f66dfce5f34 [ 26.649179] RSP: 002b:00007ffca50e00d8 EFLAGS: 00000202 ORIG_RAX: ffffffffffffff07 [ 26.657527] RAX: 00000000259b2802 RBX: 00000000092c569c RCX: 00000000ff959cea [ 26.664777] RDX: 0000000098918297 RSI: 00000000001b0000 RDI: 000000000000001b [ 26.672025] RBP: 0000000000910000 R08: 000000004a2d5004 R09: 000000001258ac23 [ 26.679273] R10: 00000000259b2802 R11: 00000000092c569c R12: 0000000000959cea [ 26.686513] R13: 0000000000950000 R14: 00007f66dfce7b00 R15: 00005652d9f1ed98 [ 26.693762] Code: 0f 1f 80 00 00 00 00 55 48 89 e5 0f 20 d8 5d c3 0f 1f 80 00 00 00 00 55 48 89 e5 0f 22 df 5d c3 0f 1f 80 00 00 00 00 55 48 89 e5 <0f> 22 e7 5d c3 0f 1f 80 00 00 00 00 55 48 89 e5 44 0f 20 c0 5d [ 26.712853] RIP: native_write_cr4+0x4/0x10 RSP: ffff8801db307e88 [ 26.718984] ---[ end trace c1b8d1f245ca6ff5 ]--- [ 27.555948] Shutting down cpus with NMI [ 27.559981] invalid opcode: 0000 [#2] SMP KASAN [ 27.559986] Dumping ftrace buffer: [ 27.559988] (ftrace buffi[ n: 2 m7p.t5y)5 9 989] Modules linked in: [[ 2277..556600000000]] HHaarrddwwaarree nnaammee:: GGooooggllee GGoooogglel eC Comomppuutete E Enngigniene/G/Gooooglgele C oCmopmputuet eE nEgngiinene,, BIBOIOS S Google 01/01/2011 [[ 2 727..556060010133] ] RSRSP:P : 00000000:f:fffffffffe0e00000000303bbbb404 0 EEFLFALGAGS:S :0 000001100000022 [[ 2277..556600002200]] RRDDXX:: ddffffffffcc00000000000000000000 RRSSII:: ffffffffffee000000000303bbbeb8e 8RD IR:D I:ff ffffffef0f0e00000030b03bab8b a 8 [[ 2277.5.56060020266] ]R R110:0: fffffff8f880802121ffffff88005500 RR1111:: ffffffff8888002211ffffff880055dd RR1122:: 11ffffffffffcc000000000077778855 [[ 2277..556600003344]] FFSS:: 0000000077ff6666ee0088991177cc00((00000000)) GGSS::ffffffff88880011ddbb330000000000((00000000)) kknnllGGSS::0000000000000000000000 [[ 2277..556600003399]] CCRR22:: 0000000055665522dd99ff4466000000 CCRR33:: 0000000000000011dd55aa44cc000011 CCRR44:: 000000000001626e0 [[ 2277..556600004466]] <> ace: [[ 2 72.75.6506000676]7 ] ?? pvpcvclolcokck_r_reeada_df_lflagags+s+00x1x610/600x/106x016 0 / 0x90 [[ 2 277.5.56600008855]] ?? ttrraaccee__rraaww__oouuttppuutt__nnmmii__handler+0x120/0x120 [[ 2277..556600110055]] ?? pprriinnttkk__ssaaffee__fflluusshh__oonn__ppaanniicc++00xx119900//0x190 [[ 2277..556600111155]] ddoo__nnmmii++00xx220055//00xx22cc00 /0x150 [[ 2277..556600112299]] RRIIPP:: 00001100::ppaanniicc__ssmmpp__sseellff__sstop+0xb/0x80 [ [ 227.7.55660013135]5] R RAAX:X :f ffffff8f880801b1db0d0d8d3830000 RRBBXX:: fffffffffffffff8f866559b91b01303 RCX: ffffffff814118d9 [[ 2277..556600114400]] RRBBPP:: ffffffff88880101dbdb33070c7c6688 RR0808:: 00000000000000000000000000000000 R 0R90:9 :1 1ffffffff1100003b3b66660f0f6688 [[ 2277..556600114455]] RR1133:: ffffffff88880011ddbb330077dd0000 RR1144:: ddffffffffcc00000000000000000000 RR1155:: fffffff8f888010d1b3d0b73f0c70f c 0 [[ 2277..556600115588]] ?? ppaanniicc__ssmmpp__sseellff__ssttoopp++00xxbb/0/0xx880 0 [[ 227.7.55606016165]5] I> _smp_self_stop+0xb/0x80 [[ 2277..556600116699]] ppaanniicc++0xec/0x41c [[ 2 727.5.65600118800] ] ? ? bbusustt__sspipnilnloockcsk+s0+0xx6060/0/x0cx0c0 14/0x214 [[ 227.75.6506101898] 9] ? ?km skmg_sdg_umdup+mp0x+041x54/105x/05fx05 f0 0x 2b/0x60 [[ 2277..556600119999]] ddiiee++00xx33dd//00xx5500 0xe0 [[ 2277..55660021212]2 ] g egneenreraal_l_pprrooteteccttiioonn++00xx22cc//00xx6600 x3e0 [[ 2277..556600222200]] RRSSPP:: 0000000:0f:fffffff888018d01bd30b73e0788e8 E8F ELAFLGSA:GS 0: 00010082 [[ 2277..556600222266]] R RDXDX: :1 f1fffffffffffffff00d1d1919616c cR SRSII:: 0 0000000000000000000000000000000 R DRIDI:: 0000000000000000000016160606e0e0 [[ 2277..556600223311]] RR1100:: 0000000000000000225599bb22880022 RR1111:: 0000000000000000009922cc556699cc RR1122:: 00000000000000000000000000008822 [[ 2277..556600224444]] ?? ttrraaccee__hhaarrddiirrqqss_o_offff++00xxdd//00xx110 0 8 801bd0d8300 R15: ffff8801db307fc0 [[ 272.7.565060252353]] ? ? n naatitvive_es_stotop_po_tothehre_r_cpcupsu+s+0x0x3d30d0//00xx3d0 [[ 2277..556600226655]] ?? hhaannddlle_e_ededgege__iriqr+q0+x02xb2b4/40/x0x77c0c0 [[ 2277..556600227766]] ?? hhaannddllee__iirrqq++00xx1177aa//00xx3300 [[ 2277..556600228899]] r rebeboooott_i_ninttererrrupuptt+0+0xxaa99/0/x0xbb00 0x1a/0x1c [[ 2 27.7.55660209295]5 ] RIRIPP:: 0003033:0x7f66dfce5f34 [[ 2277.5.560360013]0 1R] AXR:A X0: 0000000000000020592b5298b0228 0R2B XRB:X 0:0 0000000000000009092c2c56569c9 cR CRXCX:: 000000000000000ff0f95f99c5e9cae a f f07 [[ 272.75.65603003066]] R BRBPP: : 0000000000000000000901901000000 0R R080:8: 000000000000000044aa2d2d5050004 4 R0R09:9: 00000000000000010125285a8acc2233 [[ 2277..556600331111]] RR1133:: 0000000000000000000095905000000 0R R1414:: 0 00000007f76f66d6dffccee7b70b000 RR1155: :0 000000505656252d9df9f1e1ded998 8 [[ 2277..556600338822]] RRIIPP:: ssmmpp__ssttoopp__nnmmii__ccaallllbbaacckk++00xx227799//00xx556600 RRSSPP:: ffffffffffee00000000003b3bbb4400 8 ab 48 81 c4 68 01 00 00 b8 01 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 <0f> 01 c4 48 c7 c7 60 8c 8c 86 48 89 f8 48 c1 e8 03 80 3c 10 00 [[ 2277..557711006600]] ((ffttrraaccee b bufufffeer r eemmptpyt)y [[ 2 72.79.6965555227]7] RReebobotooitngin gi n i8n6 846040 00s ecseocnonds..