[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 101.464619][ T31] audit: type=1800 audit(1561911469.518:25): pid=13350 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 101.489805][ T31] audit: type=1800 audit(1561911469.538:26): pid=13350 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 101.526864][ T31] audit: type=1800 audit(1561911469.568:27): pid=13350 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.190' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 122.219727][T13501] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 122.244848][T13501] ================================================================== [ 122.253028][T13501] BUG: KMSAN: kernel-infoleak in __kvm_write_guest_page+0x2cb/0x420 [ 122.261028][T13501] CPU: 1 PID: 13501 Comm: syz-executor659 Not tainted 5.2.0-rc4+ #7 [ 122.268987][T13501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 122.279026][T13501] Call Trace: [ 122.282312][T13501] dump_stack+0x191/0x1f0 [ 122.286639][T13501] kmsan_report+0x162/0x2d0 [ 122.291186][T13501] kmsan_internal_check_memory+0x974/0xa80 [ 122.296983][T13501] ? do_vfs_ioctl+0xea8/0x2c50 [ 122.301749][T13501] ? __se_sys_ioctl+0x1da/0x270 [ 122.306601][T13501] ? __x64_sys_ioctl+0x4a/0x70 [ 122.311351][T13501] ? do_syscall_64+0xbc/0xf0 [ 122.315948][T13501] kmsan_copy_to_user+0xa9/0xb0 [ 122.320791][T13501] __kvm_write_guest_page+0x2cb/0x420 [ 122.326164][T13501] kvm_vcpu_write_guest_page+0x5f8/0x630 [ 122.331800][T13501] kvm_vcpu_write_guest+0x1e0/0x360 [ 122.337010][T13501] emulator_write_std+0x391/0x4d0 [ 122.342045][T13501] ? kvm_read_guest_phys_system+0x100/0x100 [ 122.347931][T13501] em_fxsave+0x7c8/0x850 [ 122.352282][T13501] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 122.358293][T13501] ? check_svme+0x220/0x220 [ 122.362944][T13501] x86_emulate_insn+0x201d/0xa800 [ 122.368012][T13501] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 122.373914][T13501] x86_emulate_instruction+0x1012/0x71d0 [ 122.379568][T13501] kvm_mmu_page_fault+0xce4/0x2950 [ 122.384674][T13501] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 122.390573][T13501] ? vmx_vcpu_run+0x436f/0x4c40 [ 122.395419][T13501] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 122.401348][T13501] handle_ept_violation+0x478/0x4e0 [ 122.406625][T13501] ? handle_desc+0x110/0x110 [ 122.411245][T13501] vmx_handle_exit+0x1280/0x20c0 [ 122.416178][T13501] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 122.422177][T13501] ? vmx_vcpu_run+0x4c40/0x4c40 [ 122.427056][T13501] kvm_arch_vcpu_ioctl_run+0x9e3a/0xd430 [ 122.432711][T13501] ? kmsan_get_shadow_origin_ptr+0x11/0x470 [ 122.438661][T13501] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 122.444544][T13501] ? put_pid+0xc3/0x1c0 [ 122.448687][T13501] ? get_task_pid+0xdc/0x180 [ 122.453269][T13501] kvm_vcpu_ioctl+0x1099/0x1d00 [ 122.458122][T13501] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 122.464007][T13501] ? kvm_vm_release+0x90/0x90 [ 122.468711][T13501] do_vfs_ioctl+0xea8/0x2c50 [ 122.473315][T13501] ? security_file_ioctl+0x1bd/0x200 [ 122.478596][T13501] __se_sys_ioctl+0x1da/0x270 [ 122.483385][T13501] __x64_sys_ioctl+0x4a/0x70 [ 122.487963][T13501] do_syscall_64+0xbc/0xf0 [ 122.492441][T13501] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 122.498323][T13501] RIP: 0033:0x4431f9 [ 122.502201][T13501] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 1b 0c fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 122.521923][T13501] RSP: 002b:00007ffe590eeac8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 122.530509][T13501] RAX: ffffffffffffffda RBX: 00007ffe590eead0 RCX: 00000000004431f9 [ 122.538473][T13501] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 122.546439][T13501] RBP: 0000000000000000 R08: 0000000000400f50 R09: 0000000000400f50 [ 122.554453][T13501] R10: fffffffffffffffe R11: 0000000000000246 R12: 00000000004042a0 [ 122.562432][T13501] R13: 0000000000404330 R14: 0000000000000000 R15: 0000000000000000 [ 122.570511][T13501] [ 122.572826][T13501] Local variable description: ----fx_state@em_fxsave [ 122.579475][T13501] Variable was created at: [ 122.583874][T13501] em_fxsave+0x5c/0x850 [ 122.588018][T13501] x86_emulate_insn+0x201d/0xa800 [ 122.593054][T13501] [ 122.595370][T13501] Bytes 8-159 of 160 are uninitialized [ 122.600803][T13501] Memory access of size 160 starts at ffff8880a748f0a0 [ 122.607624][T13501] Data copied to user address 0000000020000000 [ 122.613859][T13501] ================================================================== [ 122.622050][T13501] Disabling lock debugging due to kernel taint [ 122.628179][T13501] Kernel panic - not syncing: panic_on_warn set ... [ 122.634752][T13501] CPU: 1 PID: 13501 Comm: syz-executor659 Tainted: G B 5.2.0-rc4+ #7 [ 122.644097][T13501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 122.654276][T13501] Call Trace: [ 122.657565][T13501] dump_stack+0x191/0x1f0 [ 122.661891][T13501] panic+0x3c9/0xc1e [ 122.665926][T13501] kmsan_report+0x2ca/0x2d0 [ 122.670608][T13501] kmsan_internal_check_memory+0x974/0xa80 [ 122.676411][T13501] ? do_vfs_ioctl+0xea8/0x2c50 [ 122.681166][T13501] ? __se_sys_ioctl+0x1da/0x270 [ 122.686001][T13501] ? __x64_sys_ioctl+0x4a/0x70 [ 122.690848][T13501] ? do_syscall_64+0xbc/0xf0 [ 122.695534][T13501] kmsan_copy_to_user+0xa9/0xb0 [ 122.700371][T13501] __kvm_write_guest_page+0x2cb/0x420 [ 122.705784][T13501] kvm_vcpu_write_guest_page+0x5f8/0x630 [ 122.711433][T13501] kvm_vcpu_write_guest+0x1e0/0x360 [ 122.716636][T13501] emulator_write_std+0x391/0x4d0 [ 122.721687][T13501] ? kvm_read_guest_phys_system+0x100/0x100 [ 122.727587][T13501] em_fxsave+0x7c8/0x850 [ 122.731878][T13501] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 122.737761][T13501] ? check_svme+0x220/0x220 [ 122.742250][T13501] x86_emulate_insn+0x201d/0xa800 [ 122.747442][T13501] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 122.753384][T13501] x86_emulate_instruction+0x1012/0x71d0 [ 122.759039][T13501] kvm_mmu_page_fault+0xce4/0x2950 [ 122.764149][T13501] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 122.770054][T13501] ? vmx_vcpu_run+0x436f/0x4c40 [ 122.774899][T13501] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 122.780789][T13501] handle_ept_violation+0x478/0x4e0 [ 122.785981][T13501] ? handle_desc+0x110/0x110 [ 122.790553][T13501] vmx_handle_exit+0x1280/0x20c0 [ 122.795478][T13501] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 122.801372][T13501] ? vmx_vcpu_run+0x4c40/0x4c40 [ 122.806212][T13501] kvm_arch_vcpu_ioctl_run+0x9e3a/0xd430 [ 122.811990][T13501] ? kmsan_get_shadow_origin_ptr+0x11/0x470 [ 122.817936][T13501] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 122.823816][T13501] ? put_pid+0xc3/0x1c0 [ 122.828059][T13501] ? get_task_pid+0xdc/0x180 [ 122.832652][T13501] kvm_vcpu_ioctl+0x1099/0x1d00 [ 122.837514][T13501] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 122.843491][T13501] ? kvm_vm_release+0x90/0x90 [ 122.848152][T13501] do_vfs_ioctl+0xea8/0x2c50 [ 122.852745][T13501] ? security_file_ioctl+0x1bd/0x200 [ 122.858114][T13501] __se_sys_ioctl+0x1da/0x270 [ 122.862879][T13501] __x64_sys_ioctl+0x4a/0x70 [ 122.867637][T13501] do_syscall_64+0xbc/0xf0 [ 122.872048][T13501] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 122.878053][T13501] RIP: 0033:0x4431f9 [ 122.881934][T13501] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 1b 0c fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 122.901650][T13501] RSP: 002b:00007ffe590eeac8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 122.910130][T13501] RAX: ffffffffffffffda RBX: 00007ffe590eead0 RCX: 00000000004431f9 [ 122.918095][T13501] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 122.926050][T13501] RBP: 0000000000000000 R08: 0000000000400f50 R09: 0000000000400f50 [ 122.934010][T13501] R10: fffffffffffffffe R11: 0000000000000246 R12: 00000000004042a0 [ 122.942192][T13501] R13: 0000000000404330 R14: 0000000000000000 R15: 0000000000000000 [ 122.951644][T13501] Kernel Offset: disabled [ 122.956011][T13501] Rebooting in 86400 seconds..