[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 27.250092] random: sshd: uninitialized urandom read (32 bytes read) [ 27.556705] sshd (5306) used greatest stack depth: 16760 bytes left [ 27.580570] random: sshd: uninitialized urandom read (32 bytes read) [ 28.191291] random: sshd: uninitialized urandom read (32 bytes read) [ 77.701569] random: sshd: uninitialized urandom read (32 bytes read) [ 77.852399] sshd (5320) used greatest stack depth: 16328 bytes left Warning: Permanently added '10.128.10.62' (ECDSA) to the list of known hosts. [ 83.283095] random: sshd: uninitialized urandom read (32 bytes read) 2018/09/10 05:34:49 parsed 1 programs [ 84.456072] random: cc1: uninitialized urandom read (8 bytes read) 2018/09/10 05:34:50 executed programs: 0 [ 85.595849] IPVS: ftp: loaded support on port[0] = 21 [ 85.838407] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.845115] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.852279] device bridge_slave_0 entered promiscuous mode [ 85.870543] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.877037] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.884372] device bridge_slave_1 entered promiscuous mode [ 85.902129] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 85.919747] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 85.969333] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 85.989897] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 86.060944] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 86.068195] team0: Port device team_slave_0 added [ 86.084518] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 86.091898] team0: Port device team_slave_1 added [ 86.109141] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.128126] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.146498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.164918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.308374] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.315220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.322169] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.328569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.828166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.878403] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 86.926306] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 86.932639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.940415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.983683] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.290571] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 87.366824] kasan: CONFIG_KASAN_INLINE enabled [ 87.372244] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 87.379640] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 87.385991] CPU: 1 PID: 5599 Comm: syz-executor0 Not tainted 4.19.0-rc2+ #230 [ 87.393381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 87.402813] RIP: 0010:kvm_pv_send_ipi+0x364/0xdd0 [ 87.407665] Code: 45 84 ed 0f 84 da 07 00 00 e8 b8 d4 65 00 48 8d 4b 14 48 b8 00 00 00 00 00 fc ff df 48 89 ca 48 89 8d 70 fe ff ff 48 c1 ea 03 <0f> b6 14 02 48 89 c8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 f5 [ 87.426701] RSP: 0018:ffff8801d154f028 EFLAGS: 00010203 [ 87.432083] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000014 [ 87.439348] RDX: 0000000000000002 RSI: ffffffff8118fc08 RDI: 0000000000000005 [ 87.446613] RBP: ffff8801d154f1c8 R08: ffff8801b920a140 R09: 1ffffffff12b43d5 [ 87.453922] R10: ffffed003b5e4732 R11: ffff8801daf23993 R12: ffff8801d154f1a0 [ 87.461177] R13: 0000000000000001 R14: 0000000000000000 R15: ffff8801d154f120 [ 87.468451] FS: 00007fb26cc09700(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 87.476723] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.482585] CR2: 0000000000000000 CR3: 00000001cd7fb000 CR4: 00000000001426e0 [ 87.489894] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 87.497150] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 87.504400] Call Trace: [ 87.506972] ? __lock_is_held+0xb5/0x140 [ 87.511034] ? graph_lock+0x170/0x170 [ 87.514818] ? kvm_apic_set_irq+0x170/0x170 [ 87.519126] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 87.524666] ? check_preemption_disabled+0x48/0x200 [ 87.529663] ? check_preemption_disabled+0x48/0x200 [ 87.534660] ? __lock_is_held+0xb5/0x140 [ 87.538705] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 87.544227] ? vmx_read_guest_seg_ar+0x221/0x270 [ 87.548968] kvm_emulate_hypercall+0xa1a/0xf20 [ 87.553534] ? kvm_gen_update_masterclock+0x350/0x350 [ 87.558724] ? graph_lock+0x170/0x170 [ 87.562503] ? vmx_vcpu_run+0x135b/0x2700 [ 87.566626] ? vmx_vcpu_run+0x134f/0x2700 [ 87.570751] ? vmx_vcpu_run+0x135b/0x2700 [ 87.574934] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 87.580457] ? check_preemption_disabled+0x48/0x200 [ 87.585463] ? check_preemption_disabled+0x48/0x200 [ 87.590461] ? __lock_is_held+0xb5/0x140 [ 87.594504] handle_vmcall+0x15/0x20 [ 87.598198] ? handle_io+0x100/0x100 [ 87.601906] vmx_handle_exit+0x2f7/0x17e0 [ 87.606041] ? lock_acquire+0x1ed/0x520 [ 87.610078] ? vcpu_enter_guest+0x12f2/0x62e0 [ 87.614593] ? vcpu_enter_guest+0x1271/0x62e0 [ 87.619074] ? handle_vmfunc+0x9d0/0x9d0 [ 87.623235] ? trace_hardirqs_on+0xbd/0x310 [ 87.627538] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 87.632547] ? check_preemption_disabled+0x48/0x200 [ 87.637561] ? check_preemption_disabled+0x48/0x200 [ 87.642612] vcpu_enter_guest+0x14a9/0x62e0 [ 87.646986] ? __phys_addr+0xa6/0x120 [ 87.650770] ? emulator_read_emulated+0x50/0x50 [ 87.655479] ? check_preemption_disabled+0x48/0x200 [ 87.660594] ? vmx_vcpu_load+0xb06/0x1030 [ 87.664798] ? vmx_write_tsc_offset+0x680/0x680 [ 87.669446] ? graph_lock+0x170/0x170 [ 87.673241] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 87.678773] ? check_preemption_disabled+0x48/0x200 [ 87.683769] ? check_preemption_disabled+0x48/0x200 [ 87.688783] ? __lock_is_held+0xb5/0x140 [ 87.692858] ? kvm_check_async_pf_completion+0x3ae/0x5c0 [ 87.698300] ? kvm_clear_async_pf_completion_queue+0x770/0x770 [ 87.704256] ? kvm_arch_dev_ioctl+0x630/0x630 [ 87.708852] ? preempt_notifier_dec+0x20/0x20 [ 87.713345] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 87.718165] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 87.723174] kvm_vcpu_ioctl+0x72b/0x1150 [ 87.727222] ? kvm_vcpu_block+0x1030/0x1030 [ 87.731677] ? find_held_lock+0x36/0x1c0 [ 87.735729] ? __fget+0x4aa/0x740 [ 87.739208] ? check_preemption_disabled+0x48/0x200 [ 87.744214] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 87.750001] ? kasan_check_read+0x11/0x20 [ 87.754311] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 87.759625] ? rcu_bh_qs+0xc0/0xc0 [ 87.763153] ? __fget+0x4d1/0x740 [ 87.766596] ? ksys_dup3+0x680/0x680 [ 87.770289] ? fget_raw+0x20/0x20 [ 87.773730] ? kvm_vcpu_block+0x1030/0x1030 [ 87.778034] do_vfs_ioctl+0x1de/0x1720 [ 87.781909] ? lock_release+0x970/0x970 [ 87.785906] ? arch_local_save_flags+0x40/0x40 [ 87.790469] ? ioctl_preallocate+0x300/0x300 [ 87.794862] ? __fget_light+0x2e9/0x430 [ 87.798830] ? fget_raw+0x20/0x20 [ 87.802370] ? mqueue_flush_file+0x110/0x110 [ 87.806762] ? __x64_sys_futex+0x47f/0x6a0 [ 87.810974] ? do_syscall_64+0x9a/0x820 [ 87.814926] ? do_syscall_64+0x9a/0x820 [ 87.818877] ? lockdep_hardirqs_on+0x421/0x5c0 [ 87.823440] ? security_file_ioctl+0x94/0xc0 [ 87.827845] ksys_ioctl+0xa9/0xd0 [ 87.831295] __x64_sys_ioctl+0x73/0xb0 [ 87.835194] do_syscall_64+0x1b9/0x820 [ 87.839078] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 87.844512] ? syscall_return_slowpath+0x5e0/0x5e0 [ 87.849425] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 87.854249] ? trace_hardirqs_on_caller+0x310/0x310 [ 87.859264] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 87.864259] ? prepare_exit_to_usermode+0x291/0x3b0 [ 87.869258] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 87.874083] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 87.879251] RIP: 0033:0x457099 [ 87.882447] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 87.901330] RSP: 002b:00007fb26cc08c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 87.909203] RAX: ffffffffffffffda RBX: 00007fb26cc096d4 RCX: 0000000000457099 [ 87.916460] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 87.923724] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 87.931007] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 87.938259] R13: 00000000004cf730 R14: 00000000004c59b9 R15: 0000000000000000 [ 87.945522] Modules linked in: [ 87.948709] Dumping ftrace buffer: [ 87.952228] (ftrace buffer empty) [ 87.959553] ---[ end trace 36f80c99198cb10d ]--- [ 87.964324] RIP: 0010:kvm_pv_send_ipi+0x364/0xdd0 [ 87.969390] Code: 45 84 ed 0f 84 da 07 00 00 e8 b8 d4 65 00 48 8d 4b 14 48 b8 00 00 00 00 00 fc ff df 48 89 ca 48 89 8d 70 fe ff ff 48 c1 ea 03 <0f> b6 14 02 48 89 c8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 f5 [ 87.988354] RSP: 0018:ffff8801d154f028 EFLAGS: 00010203 [ 87.993751] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000014 [ 88.001041] RDX: 0000000000000002 RSI: ffffffff8118fc08 RDI: 0000000000000005 [ 88.008307] RBP: ffff8801d154f1c8 R08: ffff8801b920a140 R09: 1ffffffff12b43d5 [ 88.015594] R10: ffffed003b5e4732 R11: ffff8801daf23993 R12: ffff8801d154f1a0 [ 88.022882] R13: 0000000000000001 R14: 0000000000000000 R15: ffff8801d154f120 [ 88.030347] FS: 00007fb26cc09700(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 88.038609] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 88.044494] CR2: 0000000000000000 CR3: 00000001cd7fb000 CR4: 00000000001426e0 [ 88.052305] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 88.059599] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 88.066877] Kernel panic - not syncing: Fatal exception [ 88.072671] Dumping ftrace buffer: [ 88.076206] (ftrace buffer empty) [ 88.080480] Kernel Offset: disabled [ 88.084100] Rebooting in 86400 seconds..