[ 39.688668] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.31' (ECDSA) to the list of known hosts. [ 45.216715] random: sshd: uninitialized urandom read (32 bytes read) executing program [ 45.337207] audit: type=1400 audit(1561797773.176:36): avc: denied { map } for pid=7100 comm="syz-executor368" path="/root/syz-executor368072724" dev="sda1" ino=16483 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 45.339928] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 45.390867] BUG: unable to handle kernel paging request at ffffed12fa26561f [ 45.398424] IP: coalesced_mmio_write+0x240/0x440 [ 45.403292] PGD 21ffef067 P4D 21ffef067 PUD 0 [ 45.407906] Oops: 0000 [#1] PREEMPT SMP KASAN [ 45.412426] Modules linked in: [ 45.415697] CPU: 0 PID: 7100 Comm: syz-executor368 Not tainted 4.14.131 #25 [ 45.422808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 45.432156] task: ffff888077c3a540 task.stack: ffff888085d90000 [ 45.438200] RIP: 0010:coalesced_mmio_write+0x240/0x440 [ 45.443455] RSP: 0018:ffff888085d97428 EFLAGS: 00010a02 [ 45.448799] RAX: 00000000f7d5760a RBX: 0000000000000000 RCX: ffff8880952fa000 [ 45.456067] RDX: dffffc0000000000 RSI: 1ffff112fa26561f RDI: ffff8897d132b0f8 [ 45.463328] RBP: ffff888085d97478 R08: 0000000000000007 R09: 0000000000000000 [ 45.470578] R10: 0000000000000002 R11: ffff888077c3a540 R12: ffff88807a0e1a10 [ 45.477825] R13: 0000000000000001 R14: ffff8880a55b39a0 R15: 0000000000000001 [ 45.485095] FS: 0000000001268940(0000) GS:ffff8880aee00000(0000) knlGS:0000000000000000 [ 45.493307] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.499168] CR2: ffffed12fa26561f CR3: 0000000095996000 CR4: 00000000001426f0 [ 45.506462] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 45.513720] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 45.520971] Call Trace: [ 45.523561] __kvm_io_bus_write+0x241/0x340 [ 45.527868] ? coalesced_mmio_destructor+0x160/0x160 [ 45.532954] kvm_io_bus_write+0x115/0x200 [ 45.537084] ? kvm_vcpu_check_block+0xa0/0xa0 [ 45.541694] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 45.547147] write_mmio+0x148/0x480 [ 45.550786] emulator_read_write_onepage+0x36a/0xbb0 [ 45.555873] emulator_read_write+0x174/0x540 [ 45.560268] emulator_write_emulated+0x3c/0x50 [ 45.564855] segmented_write+0xd3/0x120 [ 45.568854] ? em_fxsave+0x40/0x40 [ 45.572379] writeback+0x425/0x760 [ 45.575954] ? __emulate_int_real+0x660/0x660 [ 45.580443] ? x86_decode_insn+0xbc5/0x4ea0 [ 45.584749] ? fastop+0x17a/0x290 [ 45.588180] ? em_salc+0x8/0x8 [ 45.591355] x86_emulate_insn+0x15f2/0x4120 [ 45.595656] ? init_decode_cache+0xc0/0xc0 [ 45.599870] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 45.605303] x86_emulate_instruction+0x423/0x1700 [ 45.610129] ? __lock_is_held+0xb6/0x140 [ 45.614193] ? reexecute_instruction.part.0+0x260/0x260 [ 45.619551] ? mmio_info_in_cache+0x118/0x440 [ 45.624037] kvm_mmu_page_fault+0x1c5/0x300 [ 45.628342] handle_ept_violation+0x149/0x420 [ 45.632820] ? handle_pause+0x410/0x410 [ 45.636774] vmx_handle_exit+0x20d/0x12a0 [ 45.640903] ? vcpu_enter_guest+0xccd/0x5220 [ 45.645302] vcpu_enter_guest+0xec8/0x5220 [ 45.649519] ? save_trace+0x290/0x290 [ 45.653300] ? __lock_is_held+0x90/0x140 [ 45.657342] ? emulator_read_emulated+0x50/0x50 [ 45.661990] ? lock_acquire+0x16f/0x430 [ 45.665942] ? kvm_check_async_pf_completion+0x2a9/0x410 [ 45.671382] kvm_arch_vcpu_ioctl_run+0x318/0x1000 [ 45.676202] ? kvm_arch_vcpu_ioctl_run+0x318/0x1000 [ 45.681198] kvm_vcpu_ioctl+0x401/0xd10 [ 45.685147] ? kvm_vcpu_block+0xbb0/0xbb0 [ 45.689278] ? __set_current_blocked+0xd4/0x110 [ 45.693927] ? signal_setup_done+0x9c/0x240 [ 45.698232] ? set_current_blocked+0x50/0x50 [ 45.702652] ? rcu_read_lock_sched_held+0x110/0x130 [ 45.707683] ? do_signal+0x45a/0x19a0 [ 45.711476] ? kvm_vcpu_block+0xbb0/0xbb0 [ 45.715621] do_vfs_ioctl+0x7ae/0x1060 [ 45.719499] ? selinux_file_mprotect+0x5d0/0x5d0 [ 45.724289] ? ioctl_preallocate+0x1c0/0x1c0 [ 45.728716] ? SyS_shutdown+0x170/0x170 [ 45.732668] ? mm_fault_error+0x92/0x2c0 [ 45.736702] ? security_file_ioctl+0x7d/0xb0 [ 45.741083] ? security_file_ioctl+0x89/0xb0 [ 45.745467] SyS_ioctl+0x8f/0xc0 [ 45.748809] ? do_vfs_ioctl+0x1060/0x1060 [ 45.752932] do_syscall_64+0x1e8/0x640 [ 45.756793] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 45.761628] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 45.766800] RIP: 0033:0x4444e9 [ 45.769967] RSP: 002b:00007ffefa023a78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 45.777655] RAX: ffffffffffffffda RBX: 00007ffefa023a80 RCX: 00000000004444e9 [ 45.784995] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 45.792246] RBP: 0000000000000000 R08: 0000000000402240 R09: 0000000000402240 [ 45.799495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000405590 [ 45.806755] R13: 0000000000405620 R14: 0000000000000000 R15: 0000000000000000 [ 45.814013] Code: c0 03 38 d0 7c 08 84 d2 0f 85 00 02 00 00 8b 41 04 48 8d 14 40 48 8d 7c d1 08 48 ba 00 00 00 00 00 fc ff df 48 89 fe 48 c1 ee 03 <80> 3c 16 00 0f 85 bf 01 00 00 48 8d 14 40 48 be 00 00 00 00 00 [ 45.833109] RIP: coalesced_mmio_write+0x240/0x440 RSP: ffff888085d97428 [ 45.839855] CR2: ffffed12fa26561f [ 45.843296] ---[ end trace b246c70338280a38 ]--- [ 45.848027] Kernel panic - not syncing: Fatal exception [ 45.854347] Kernel Offset: disabled [ 45.857967] Rebooting in 86400 seconds..