[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 74.859612][ T26] audit: type=1800 audit(1561247457.726:25): pid=8482 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 74.898165][ T26] audit: type=1800 audit(1561247457.726:26): pid=8482 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 74.948628][ T26] audit: type=1800 audit(1561247457.726:27): pid=8482 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.120' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 84.664653][ T8634] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.701400][ T8634] BUG: unable to handle page fault for address: ffffed12fca0a01f [ 84.709143][ T8634] #PF: supervisor read access in kernel mode [ 84.715102][ T8634] #PF: error_code(0x0000) - not-present page [ 84.721063][ T8634] PGD 21fff0067 P4D 21fff0067 PUD 0 [ 84.726346][ T8634] Oops: 0000 [#1] PREEMPT SMP KASAN [ 84.731622][ T8634] CPU: 0 PID: 8634 Comm: syz-executor689 Not tainted 5.2.0-rc5+ #38 [ 84.739573][ T8634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 84.749663][ T8634] RIP: 0010:coalesced_mmio_write+0x28a/0x4d0 [ 84.755624][ T8634] Code: 38 d0 7c 08 84 d2 0f 85 55 02 00 00 41 8b 47 04 48 8d 14 40 49 8d 7c d7 08 48 ba 00 00 00 00 00 fc ff df 48 89 fe 48 c1 ee 03 <80> 3c 16 00 0f 85 1b 02 00 00 48 8d 14 40 48 be 00 00 00 00 00 fc [ 84.775215][ T8634] RSP: 0018:ffff88807e327170 EFLAGS: 00010a02 [ 84.781257][ T8634] RAX: 00000000f7d5760a RBX: 0000000000000000 RCX: ffffffff81080faa [ 84.789207][ T8634] RDX: dffffc0000000000 RSI: 1ffff112fca0a01f RDI: ffff8897e50500f8 [ 84.797156][ T8634] RBP: ffff88807e3271c0 R08: ffff88807fbb6700 R09: 0000000000000000 [ 84.805101][ T8634] R10: ffffed100fc64e1b R11: 0000000000000003 R12: 0000000000000001 [ 84.813057][ T8634] R13: ffff88809153ea90 R14: 0000000000000001 R15: ffff8880a901f000 [ 84.821009][ T8634] FS: 0000555556907940(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 84.830671][ T8634] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 84.837230][ T8634] CR2: ffffed12fca0a01f CR3: 000000009e911000 CR4: 00000000001426f0 [ 84.845183][ T8634] Call Trace: [ 84.848467][ T8634] ? coalesced_mmio_destructor+0x170/0x170 [ 84.854253][ T8634] __kvm_io_bus_write+0x29b/0x380 [ 84.859399][ T8634] kvm_io_bus_write+0x15c/0x290 [ 84.864232][ T8634] ? __bpf_trace_kvm_async_get_page_class+0x30/0x30 [ 84.870807][ T8634] write_mmio+0x175/0x4e0 [ 84.875112][ T8634] emulator_read_write_onepage+0x429/0xd50 [ 84.880996][ T8634] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 84.887215][ T8634] emulator_read_write+0x1b7/0x5a0 [ 84.892312][ T8634] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 84.898620][ T8634] emulator_write_emulated+0x3c/0x50 [ 84.903893][ T8634] segmented_write+0xf0/0x150 [ 84.908605][ T8634] ? em_fxsave+0x50/0x50 [ 84.912847][ T8634] ? memcpy+0x46/0x50 [ 84.916820][ T8634] writeback+0x3f4/0x6a0 [ 84.921055][ T8634] ? __emulate_int_real+0x6c0/0x6c0 [ 84.926229][ T8634] ? emulator_read_gpr+0x80/0xc0 [ 84.931212][ T8634] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 84.937434][ T8634] ? fastop+0x18d/0x2b0 [ 84.941569][ T8634] ? em_salc+0x8/0x8 [ 84.945440][ T8634] x86_emulate_insn+0x1de1/0x48f0 [ 84.950468][ T8634] ? init_decode_cache+0xc0/0xc0 [ 84.955398][ T8634] x86_emulate_instruction+0xca3/0x1c50 [ 84.960925][ T8634] ? ept_page_fault+0x1560/0x1560 [ 84.965948][ T8634] ? write_emulate+0x40/0x40 [ 84.970521][ T8634] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 84.976213][ T8634] ? mmio_info_in_cache+0x143/0x560 [ 84.981391][ T8634] kvm_mmu_page_fault+0x370/0x1870 [ 84.986482][ T8634] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 84.992703][ T8634] ? kvm_mmu_remote_flush_or_zap+0x9e/0xf0 [ 84.998488][ T8634] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 85.004712][ T8634] ? kvm_mmu_flush_or_zap+0x79/0xa0 [ 85.009887][ T8634] ? __kvm_mmu_zap_all+0x350/0x350 [ 85.014994][ T8634] ? mark_held_locks+0xf0/0xf0 [ 85.019736][ T8634] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 85.025953][ T8634] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 85.031660][ T8634] handle_ept_violation+0x1c8/0x500 [ 85.036836][ T8634] ? add_atomic_switch_msr.constprop.0+0xd70/0xd70 [ 85.043314][ T8634] vmx_handle_exit+0x280/0x1540 [ 85.048155][ T8634] vcpu_enter_guest+0x1174/0x5f40 [ 85.053178][ T8634] ? emulator_read_emulated+0x50/0x50 [ 85.058531][ T8634] ? lock_acquire+0x16f/0x3f0 [ 85.063185][ T8634] ? kvm_check_async_pf_completion+0x2d8/0x440 [ 85.069483][ T8634] kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 85.075022][ T8634] ? kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 85.080723][ T8634] kvm_vcpu_ioctl+0x4dc/0xf90 [ 85.085380][ T8634] ? kvm_set_memory_region+0x50/0x50 [ 85.090674][ T8634] ? tomoyo_path_number_perm+0x263/0x520 [ 85.096287][ T8634] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 85.102071][ T8634] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 85.107787][ T8634] ? __set_current_blocked+0xe4/0x120 [ 85.113141][ T8634] ? kvm_set_memory_region+0x50/0x50 [ 85.118427][ T8634] do_vfs_ioctl+0xd5f/0x1380 [ 85.123010][ T8634] ? ioctl_preallocate+0x210/0x210 [ 85.128109][ T8634] ? __fdget+0x1b/0x20 [ 85.132168][ T8634] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 85.138446][ T8634] ? sockfd_lookup_light+0xcb/0x180 [ 85.143639][ T8634] ? __sys_sendmsg+0x131/0x1d0 [ 85.148382][ T8634] ? __ia32_sys_shutdown+0x80/0x80 [ 85.153496][ T8634] ? kasan_check_read+0x11/0x20 [ 85.158331][ T8634] ? tomoyo_file_ioctl+0x23/0x30 [ 85.163250][ T8634] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 85.169474][ T8634] ? security_file_ioctl+0x8d/0xc0 [ 85.174588][ T8634] ksys_ioctl+0xab/0xd0 [ 85.178723][ T8634] __x64_sys_ioctl+0x73/0xb0 [ 85.183290][ T8634] do_syscall_64+0xfd/0x680 [ 85.187790][ T8634] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 85.193666][ T8634] RIP: 0033:0x4444e9 [ 85.197545][ T8634] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 1b 0c fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 85.217240][ T8634] RSP: 002b:00007ffc384924b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 85.225665][ T8634] RAX: ffffffffffffffda RBX: 00007ffc384924c0 RCX: 00000000004444e9 [ 85.233613][ T8634] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 85.241578][ T8634] RBP: 0000000000000000 R08: 0000000000402240 R09: 0000000000402240 [ 85.249529][ T8634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000405590 [ 85.257509][ T8634] R13: 0000000000405620 R14: 0000000000000000 R15: 0000000000000000 [ 85.265488][ T8634] Modules linked in: [ 85.269373][ T8634] CR2: ffffed12fca0a01f [ 85.273531][ T8634] ---[ end trace be4767504a823e48 ]--- [ 85.279014][ T8634] RIP: 0010:coalesced_mmio_write+0x28a/0x4d0 [ 85.285064][ T8634] Code: 38 d0 7c 08 84 d2 0f 85 55 02 00 00 41 8b 47 04 48 8d 14 40 49 8d 7c d7 08 48 ba 00 00 00 00 00 fc ff df 48 89 fe 48 c1 ee 03 <80> 3c 16 00 0f 85 1b 02 00 00 48 8d 14 40 48 be 00 00 00 00 00 fc [ 85.305471][ T8634] RSP: 0018:ffff88807e327170 EFLAGS: 00010a02 [ 85.311696][ T8634] RAX: 00000000f7d5760a RBX: 0000000000000000 RCX: ffffffff81080faa [ 85.319646][ T8634] RDX: dffffc0000000000 RSI: 1ffff112fca0a01f RDI: ffff8897e50500f8 [ 85.327593][ T8634] RBP: ffff88807e3271c0 R08: ffff88807fbb6700 R09: 0000000000000000 [ 85.335541][ T8634] R10: ffffed100fc64e1b R11: 0000000000000003 R12: 0000000000000001 [ 85.343517][ T8634] R13: ffff88809153ea90 R14: 0000000000000001 R15: ffff8880a901f000 [ 85.351553][ T8634] FS: 0000555556907940(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 85.360456][ T8634] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.367020][ T8634] CR2: ffffed12fca0a01f CR3: 000000009e911000 CR4: 00000000001426f0 [ 85.374974][ T8634] Kernel panic - not syncing: Fatal exception [ 85.382171][ T8634] Kernel Offset: disabled [ 85.386494][ T8634] Rebooting in 86400 seconds..