[ 36.614410] audit: type=1800 audit(1551018480.581:28): pid=7553 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 37.207144] audit: type=1800 audit(1551018481.271:29): pid=7553 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 37.225665] audit: type=1800 audit(1551018481.271:30): pid=7553 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 [....] startpar: service(s) returned failure: ssh ...[?25l[?1c7[FAIL8[?25h[?0c failed! Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.26' (ECDSA) to the list of known hosts. 2019/02/24 14:28:09 parsed 1 programs 2019/02/24 14:28:11 executed programs: 0 syzkaller login: [ 47.671193] IPVS: ftp: loaded support on port[0] = 21 [ 47.724223] chnl_net:caif_netlink_parms(): no params data found [ 47.752131] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.759910] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.766986] device bridge_slave_0 entered promiscuous mode [ 47.774526] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.780887] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.787871] device bridge_slave_1 entered promiscuous mode [ 47.804021] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 47.812621] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 47.829601] team0: Port device team_slave_0 added [ 47.835849] team0: Port device team_slave_1 added [ 47.914374] device hsr_slave_0 entered promiscuous mode [ 47.983265] device hsr_slave_1 entered promiscuous mode [ 48.059628] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.066053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.072751] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.079276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.104367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.116185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.135393] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.142579] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.149904] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 48.160087] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.168855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.176620] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.183002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.202312] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 48.212440] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.223855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.231734] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.238120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.245666] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.256213] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.263752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.271258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.278752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.285643] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.302509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.347845] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 49.130066] ------------[ cut here ]------------ [ 49.134863] kernel BUG at arch/x86/kvm/x86.c:357! [ 49.139717] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 49.145088] CPU: 1 PID: 7745 Comm: kworker/1:3 Not tainted 5.0.0-rc7+ #85 [ 49.152000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 49.161363] Workqueue: rcu_gp process_srcu [ 49.165594] RIP: 0010:kvm_spurious_fault+0x9/0x10 [ 49.170446] Code: e8 9c ce 65 00 41 bd 03 00 00 00 5b 44 89 e8 41 5c 41 5d 5d c3 66 90 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 e8 77 ce 65 00 <0f> 0b 0f 1f 44 00 00 55 48 89 e5 41 57 41 56 49 89 d6 41 55 41 54 [ 49.189339] RSP: 0018:ffff8880ae907e80 EFLAGS: 00010006 [ 49.194692] RAX: ffff8880a03842c0 RBX: ffff88809294b810 RCX: ffffffff81329baa [ 49.201957] RDX: 0000000000010000 RSI: ffffffff810a1309 RDI: 0000000000000007 [ 49.209214] RBP: ffff8880ae907e80 R08: ffff8880a03842c0 R09: ffffed1015d25be9 [ 49.216489] R10: ffffed1015d25be8 R11: ffff8880ae92df47 R12: 1ffff11015d20fd3 [ 49.223794] R13: ffff888089602000 R14: ffff8880ae907ef8 R15: 0000000000000001 [ 49.231058] FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 49.239284] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.245152] CR2: ffff8880ae907eb8 CR3: 000000008a2be000 CR4: 00000000001426e0 [ 49.252409] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 49.259682] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 49.266937] Call Trace: [ 49.269518] [ 49.271663] loaded_vmcs_init+0x95/0x250 [ 49.275713] ? find_msr_entry+0x170/0x170 [ 49.279880] __loaded_vmcs_clear+0x229/0x360 [ 49.284288] flush_smp_call_function_queue+0x14a/0x500 [ 49.289556] ? loaded_vmcs_init+0x250/0x250 [ 49.293906] generic_smp_call_function_single_interrupt+0x13/0x2b [ 49.300133] smp_call_function_single_interrupt+0xa3/0x460 [ 49.305751] call_function_single_interrupt+0xf/0x20 [ 49.310840] [ 49.313088] RIP: 0010:__sanitizer_cov_trace_pc+0x11/0x50 [ 49.318534] Code: fb e5 08 00 00 00 00 e9 c8 e9 ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 55 48 89 e5 48 8b 75 08 65 48 8b 04 25 40 ee 01 00 <65> 8b 15 38 0c 92 7e 81 e2 00 01 1f 00 75 2b 8b 90 d8 12 00 00 83 [ 49.337425] RSP: 0018:ffff888081917bc8 EFLAGS: 00000206 ORIG_RAX: ffffffffffffff04 [ 49.345121] RAX: ffff8880a03842c0 RBX: 0000000000000001 RCX: ffffffff8329036b [ 49.352383] RDX: ffffe8ffffd77f00 RSI: ffffffff86fc7f81 RDI: 0000000000000001 [ 49.359659] RBP: ffff888081917bc8 R08: ffff8880a03842c0 R09: 0000000000000040 [ 49.366915] R10: 0000000000000001 R11: ffffc90006046b9f R12: ffffffff895c78a8 [ 49.374192] R13: 0000000000000007 R14: dffffc0000000000 R15: 0000000000000009 [ 49.381462] ? find_next_bit+0x7b/0x130 [ 49.385443] ? cpumask_next+0x11/0x50 [ 49.389241] cpumask_next+0x11/0x50 [ 49.392863] try_check_zero+0x178/0x330 [ 49.396836] process_srcu+0x329/0xec0 [ 49.400634] ? __lock_is_held+0xb6/0x140 [ 49.404691] ? check_preemption_disabled+0x48/0x290 [ 49.409709] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 49.415177] process_one_work+0x98e/0x1790 [ 49.419407] ? pwq_dec_nr_in_flight+0x320/0x320 [ 49.424067] ? lock_acquire+0x16f/0x3f0 [ 49.428052] worker_thread+0x98/0xe40 [ 49.431847] ? trace_hardirqs_on+0x67/0x230 [ 49.436185] kthread+0x357/0x430 [ 49.439541] ? process_one_work+0x1790/0x1790 [ 49.444027] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 49.449571] ret_from_fork+0x3a/0x50 [ 49.453277] Modules linked in: [ 49.456483] ---[ end trace 4f65d2e35be6c10f ]--- [ 49.461236] RIP: 0010:kvm_spurious_fault+0x9/0x10 [ 49.466068] Code: e8 9c ce 65 00 41 bd 03 00 00 00 5b 44 89 e8 41 5c 41 5d 5d c3 66 90 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 e8 77 ce 65 00 <0f> 0b 0f 1f 44 00 00 55 48 89 e5 41 57 41 56 49 89 d6 41 55 41 54 [ 49.484959] RSP: 0018:ffff8880ae907e80 EFLAGS: 00010006 [ 49.490308] RAX: ffff8880a03842c0 RBX: ffff88809294b810 RCX: ffffffff81329baa [ 49.497571] RDX: 0000000000010000 RSI: ffffffff810a1309 RDI: 0000000000000007 [ 49.504827] RBP: ffff8880ae907e80 R08: ffff8880a03842c0 R09: ffffed1015d25be9 [ 49.512106] R10: ffffed1015d25be8 R11: ffff8880ae92df47 R12: 1ffff11015d20fd3 [ 49.519361] R13: ffff888089602000 R14: ffff8880ae907ef8 R15: 0000000000000001 [ 49.526637] FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 49.534851] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.540730] CR2: ffff8880ae907eb8 CR3: 000000008a2be000 CR4: 00000000001426e0 [ 49.547992] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 49.555270] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 49.562530] Kernel panic - not syncing: Fatal exception in interrupt [ 49.570020] Kernel Offset: disabled [ 49.573638] Rebooting in 86400 seconds..