[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 34.143243] random: sshd: uninitialized urandom read (32 bytes read) [ 34.385715] kauditd_printk_skb: 9 callbacks suppressed [ 34.385723] audit: type=1400 audit(1569232332.563:35): avc: denied { map } for pid=6836 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 34.429170] random: sshd: uninitialized urandom read (32 bytes read) [ 35.005118] random: sshd: uninitialized urandom read (32 bytes read) [ 35.195502] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.40' (ECDSA) to the list of known hosts. [ 40.691282] random: sshd: uninitialized urandom read (32 bytes read) executing program [ 40.815886] audit: type=1400 audit(1569232338.993:36): avc: denied { map } for pid=6849 comm="syz-executor112" path="/root/syz-executor112931495" dev="sda1" ino=16484 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 40.818314] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 40.873536] ================================================================== [ 40.881437] BUG: KASAN: null-ptr-deref in kvm_write_guest_virt_system+0x64/0x90 [ 40.889172] Write of size 24 at addr (null) by task syz-executor112/6849 [ 40.897120] [ 40.898744] CPU: 0 PID: 6849 Comm: syz-executor112 Not tainted 4.14.146 #0 [ 40.906250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 40.915602] Call Trace: [ 40.918189] dump_stack+0x138/0x197 [ 40.921873] ? kvm_write_guest_virt_system+0x64/0x90 [ 40.927077] kasan_report.cold+0x127/0x2af [ 40.931458] check_memory_region+0x123/0x190 [ 40.936163] memset+0x24/0x40 [ 40.939271] kvm_write_guest_virt_system+0x64/0x90 [ 40.944346] handle_vmread+0x548/0x730 [ 40.948225] ? vmx_deliver_posted_interrupt+0x340/0x340 [ 40.953588] ? __lock_is_held+0xb6/0x140 [ 40.958800] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 40.964434] ? vmx_deliver_posted_interrupt+0x340/0x340 [ 40.969875] vmx_handle_exit+0x20d/0x1330 [ 40.974252] ? vcpu_enter_guest+0xd2d/0x5210 [ 40.978750] vcpu_enter_guest+0xf28/0x5210 [ 40.983203] ? save_trace+0x290/0x290 [ 40.987087] ? kvm_arch_vcpu_put+0x1a1/0x3f0 [ 40.992068] ? find_held_lock+0x130/0x130 [ 40.996477] ? emulator_read_emulated+0x50/0x50 [ 41.001582] ? lock_acquire+0x16f/0x430 [ 41.005666] ? kvm_check_async_pf_completion+0x2a9/0x410 [ 41.011527] kvm_arch_vcpu_ioctl_run+0x318/0x1000 [ 41.016655] ? kvm_arch_vcpu_ioctl_run+0x318/0x1000 [ 41.021786] kvm_vcpu_ioctl+0x401/0xd10 [ 41.025892] ? kvm_vcpu_block+0xbb0/0xbb0 [ 41.030140] ? __set_current_blocked+0xd4/0x110 [ 41.034968] ? signal_setup_done+0x9c/0x240 [ 41.039299] ? set_current_blocked+0x50/0x50 [ 41.044106] ? rcu_read_lock_sched_held+0x110/0x130 [ 41.049236] ? do_signal+0x45a/0x19a0 [ 41.053189] ? kvm_vcpu_block+0xbb0/0xbb0 [ 41.057331] do_vfs_ioctl+0x7ae/0x1060 [ 41.061254] ? selinux_file_mprotect+0x5d0/0x5d0 [ 41.066046] ? ioctl_preallocate+0x1c0/0x1c0 [ 41.070588] ? __fget_light+0x172/0x1f0 [ 41.074770] ? security_file_ioctl+0x7d/0xb0 [ 41.079175] ? security_file_ioctl+0x89/0xb0 [ 41.083582] SyS_ioctl+0x8f/0xc0 [ 41.086941] ? do_vfs_ioctl+0x1060/0x1060 [ 41.091145] do_syscall_64+0x1e8/0x640 [ 41.095068] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 41.100703] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 41.105886] RIP: 0033:0x443679 [ 41.109106] RSP: 002b:00007ffd4246e438 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 41.117146] RAX: ffffffffffffffda RBX: 00007ffd4246e440 RCX: 0000000000443679 [ 41.124817] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 41.132953] RBP: 0000000000000000 R08: 0000000000400f60 R09: 0000000000400f60 [ 41.140740] R10: 0000000020003800 R11: 0000000000000246 R12: 0000000000404720 [ 41.148006] R13: 00000000004047b0 R14: 0000000000000000 R15: 0000000000000000 [ 41.155871] ================================================================== [ 41.164287] Disabling lock debugging due to kernel taint [ 41.170379] Kernel panic - not syncing: panic_on_warn set ... [ 41.170379] [ 41.177981] CPU: 0 PID: 6849 Comm: syz-executor112 Tainted: G B 4.14.146 #0 [ 41.186644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 41.196871] Call Trace: [ 41.199652] dump_stack+0x138/0x197 [ 41.203286] ? kvm_write_guest_virt_system+0x64/0x90 [ 41.208463] panic+0x1f2/0x426 [ 41.211698] ? add_taint.cold+0x16/0x16 [ 41.217270] ? ___preempt_schedule+0x16/0x18 [ 41.222507] kasan_end_report+0x47/0x4f [ 41.226506] kasan_report.cold+0x130/0x2af [ 41.231694] check_memory_region+0x123/0x190 [ 41.239656] memset+0x24/0x40 [ 41.243230] kvm_write_guest_virt_system+0x64/0x90 [ 41.252074] handle_vmread+0x548/0x730 [ 41.256201] ? vmx_deliver_posted_interrupt+0x340/0x340 [ 41.262356] ? __lock_is_held+0xb6/0x140 [ 41.266855] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 41.272393] ? vmx_deliver_posted_interrupt+0x340/0x340 [ 41.280253] vmx_handle_exit+0x20d/0x1330 [ 41.284562] ? vcpu_enter_guest+0xd2d/0x5210 [ 41.289086] vcpu_enter_guest+0xf28/0x5210 [ 41.293319] ? save_trace+0x290/0x290 [ 41.297198] ? kvm_arch_vcpu_put+0x1a1/0x3f0 [ 41.301674] ? find_held_lock+0x130/0x130 [ 41.306016] ? emulator_read_emulated+0x50/0x50 [ 41.310809] ? lock_acquire+0x16f/0x430 [ 41.315083] ? kvm_check_async_pf_completion+0x2a9/0x410 [ 41.320537] kvm_arch_vcpu_ioctl_run+0x318/0x1000 [ 41.325372] ? kvm_arch_vcpu_ioctl_run+0x318/0x1000 [ 41.330576] kvm_vcpu_ioctl+0x401/0xd10 [ 41.334652] ? kvm_vcpu_block+0xbb0/0xbb0 [ 41.339005] ? __set_current_blocked+0xd4/0x110 [ 41.343674] ? signal_setup_done+0x9c/0x240 [ 41.348048] ? set_current_blocked+0x50/0x50 [ 41.352479] ? rcu_read_lock_sched_held+0x110/0x130 [ 41.357487] ? do_signal+0x45a/0x19a0 [ 41.361372] ? kvm_vcpu_block+0xbb0/0xbb0 [ 41.366080] do_vfs_ioctl+0x7ae/0x1060 [ 41.370024] ? selinux_file_mprotect+0x5d0/0x5d0 [ 41.374788] ? ioctl_preallocate+0x1c0/0x1c0 [ 41.379291] ? __fget_light+0x172/0x1f0 [ 41.383513] ? security_file_ioctl+0x7d/0xb0 [ 41.388259] ? security_file_ioctl+0x89/0xb0 [ 41.392665] SyS_ioctl+0x8f/0xc0 [ 41.396159] ? do_vfs_ioctl+0x1060/0x1060 [ 41.400309] do_syscall_64+0x1e8/0x640 [ 41.404189] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 41.409029] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 41.414591] RIP: 0033:0x443679 [ 41.418074] RSP: 002b:00007ffd4246e438 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 41.425870] RAX: ffffffffffffffda RBX: 00007ffd4246e440 RCX: 0000000000443679 [ 41.433272] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 41.440742] RBP: 0000000000000000 R08: 0000000000400f60 R09: 0000000000400f60 [ 41.448364] R10: 0000000020003800 R11: 0000000000000246 R12: 0000000000404720 [ 41.455629] R13: 00000000004047b0 R14: 0000000000000000 R15: 0000000000000000 [ 41.465182] Kernel Offset: disabled [ 41.469039] Rebooting in 86400 seconds..