[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 64.597043][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 64.597053][ T26] audit: type=1800 audit(1567653324.848:29): pid=9642 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 64.630951][ T26] audit: type=1800 audit(1567653324.848:30): pid=9642 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.15' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 82.709903][ T9794] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 82.738000][ T9794] kvm [9794]: vcpu0, guest rIP: 0xcc Hyper-V uhandled wrmsr: 0x40000004 data 0x20 [ 82.747540][ T9794] kvm [9794]: vcpu0, guest rIP: 0xcc Hyper-V uhandled wrmsr: 0x40000004 data 0x40 [ 82.757274][ T9794] kvm [9794]: vcpu0, guest rIP: 0xcc Hyper-V uhandled wrmsr: 0x40000004 data 0x60 [ 82.766813][ T9794] kvm [9794]: vcpu0, guest rIP: 0xcc Hyper-V uhandled wrmsr: 0x40000004 data 0x80 [ 82.776395][ T9794] kvm [9794]: vcpu0, guest rIP: 0xcc Hyper-V uhandled wrmsr: 0x40000004 data 0x94 [ 82.785723][ T9794] kvm [9794]: vcpu0, guest rIP: 0xcc Hyper-V uhandled wrmsr: 0x40000004 data 0x48c [ 82.795064][ T9794] kvm [9794]: vcpu0, guest rIP: 0xcc Hyper-V uhandled wrmsr: 0x40000004 data 0x4ac [ 82.804451][ T9794] kvm [9794]: vcpu0, guest rIP: 0xcc Hyper-V uhandled wrmsr: 0x40000005 data 0x1520 [ 82.813900][ T9794] kvm [9794]: vcpu0, guest rIP: 0xcc Hyper-V uhandled wrmsr: 0x40000006 data 0x15d4 [ 82.823356][ T9794] kvm [9794]: vcpu0, guest rIP: 0xcc Hyper-V uhandled wrmsr: 0x40000007 data 0x15c4 [ 82.836607][ T9794] kasan: CONFIG_KASAN_INLINE enabled [ 82.841882][ T9794] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 82.850041][ T9794] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 82.856975][ T9794] CPU: 0 PID: 9794 Comm: syz-executor286 Not tainted 5.3.0-rc7+ #0 [ 82.864851][ T9794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 82.874927][ T9794] RIP: 0010:__apic_accept_irq+0x46/0xbc0 [ 82.880544][ T9794] Code: c0 44 89 45 d4 4c 89 4d c8 e8 96 db 5c 00 49 8d 86 98 00 00 00 48 89 c2 48 89 45 b8 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 65 0a 00 00 4d 8b be 98 00 00 00 0f 1f 44 00 00 [ 82.900138][ T9794] RSP: 0018:ffff888095abf820 EFLAGS: 00010202 [ 82.906182][ T9794] RAX: dffffc0000000000 RBX: ffff888095abf958 RCX: 0000000000000000 [ 82.914142][ T9794] RDX: 0000000000000013 RSI: ffffffff811599ba RDI: 0000000000000000 [ 82.922154][ T9794] RBP: ffff888095abf878 R08: 0000000000000000 R09: 0000000000000000 [ 82.930109][ T9794] R10: fffff52000be7870 R11: ffffc90005f3c383 R12: 0000000000000000 [ 82.938061][ T9794] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88808d242ff0 [ 82.946014][ T9794] FS: 0000555555950880(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 82.954919][ T9794] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 82.961489][ T9794] CR2: 0000000000000000 CR3: 00000000924d1000 CR4: 00000000001426f0 [ 82.969443][ T9794] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 82.977390][ T9794] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 82.985423][ T9794] Call Trace: [ 82.988700][ T9794] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 82.995008][ T9794] kvm_apic_set_irq+0x10b/0x170 [ 82.999842][ T9794] kvm_hv_process_stimers+0xd55/0x1a10 [ 83.005302][ T9794] ? kvm_hv_irq_routing_update+0x410/0x410 [ 83.011191][ T9794] ? lock_acquire+0x190/0x410 [ 83.015876][ T9794] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 83.022125][ T9794] ? __kasan_check_write+0x14/0x20 [ 83.027301][ T9794] vcpu_enter_guest+0x4d2/0x5e90 [ 83.032236][ T9794] ? mark_held_locks+0xf0/0xf0 [ 83.037069][ T9794] ? kvm_vcpu_ioctl+0x181/0xfd0 [ 83.041931][ T9794] ? handle_emulation_failure+0x4e0/0x4e0 [ 83.047628][ T9794] ? lock_acquire+0x190/0x410 [ 83.052281][ T9794] ? kvm_check_async_pf_completion+0x2d8/0x440 [ 83.058414][ T9794] kvm_arch_vcpu_ioctl_run+0x464/0x1750 [ 83.063936][ T9794] ? kvm_arch_vcpu_ioctl_run+0x464/0x1750 [ 83.069721][ T9794] kvm_vcpu_ioctl+0x4dc/0xfd0 [ 83.074379][ T9794] ? kvm_write_guest_cached+0x40/0x40 [ 83.079731][ T9794] ? tomoyo_path_number_perm+0x263/0x520 [ 83.085342][ T9794] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 83.091138][ T9794] ? put_unused_fd+0x62/0x80 [ 83.095710][ T9794] ? rwlock_bug.part.0+0x90/0x90 [ 83.100623][ T9794] ? put_unused_fd+0x4f/0x80 [ 83.105192][ T9794] ? kvm_write_guest_cached+0x40/0x40 [ 83.110556][ T9794] do_vfs_ioctl+0xdb6/0x13e0 [ 83.115123][ T9794] ? ioctl_preallocate+0x210/0x210 [ 83.120215][ T9794] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 83.125911][ T9794] ? __fget_light+0x1a9/0x230 [ 83.130584][ T9794] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 83.136802][ T9794] ? tomoyo_file_ioctl+0x23/0x30 [ 83.141853][ T9794] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 83.149753][ T9794] ? security_file_ioctl+0x8d/0xc0 [ 83.155007][ T9794] ksys_ioctl+0xab/0xd0 [ 83.159227][ T9794] __x64_sys_ioctl+0x73/0xb0 [ 83.163929][ T9794] do_syscall_64+0xfd/0x6a0 [ 83.168614][ T9794] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 83.174502][ T9794] RIP: 0033:0x442a19 [ 83.178404][ T9794] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 1b 0c fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 83.198147][ T9794] RSP: 002b:00007ffe4c60f358 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 83.206538][ T9794] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000442a19 [ 83.214487][ T9794] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 83.222443][ T9794] RBP: 00000000006cd018 R08: 00000000004002c8 R09: 00000000004002c8 [ 83.230402][ T9794] R10: 00000000004002c8 R11: 0000000000000246 R12: 0000000000403ac0 [ 83.238364][ T9794] R13: 0000000000403b50 R14: 0000000000000000 R15: 0000000000000000 [ 83.246317][ T9794] Modules linked in: [ 83.250695][ T9794] ---[ end trace 14c4638a886a9c69 ]--- [ 83.256227][ T9794] RIP: 0010:__apic_accept_irq+0x46/0xbc0 [ 83.261849][ T9794] Code: c0 44 89 45 d4 4c 89 4d c8 e8 96 db 5c 00 49 8d 86 98 00 00 00 48 89 c2 48 89 45 b8 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 65 0a 00 00 4d 8b be 98 00 00 00 0f 1f 44 00 00 [ 83.281766][ T9794] RSP: 0018:ffff888095abf820 EFLAGS: 00010202 [ 83.287854][ T9794] RAX: dffffc0000000000 RBX: ffff888095abf958 RCX: 0000000000000000 [ 83.295956][ T9794] RDX: 0000000000000013 RSI: ffffffff811599ba RDI: 0000000000000000 [ 83.303944][ T9794] RBP: ffff888095abf878 R08: 0000000000000000 R09: 0000000000000000 [ 83.312124][ T9794] R10: fffff52000be7870 R11: ffffc90005f3c383 R12: 0000000000000000 [ 83.320136][ T9794] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88808d242ff0 [ 83.328137][ T9794] FS: 0000555555950880(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 83.337082][ T9794] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 83.343657][ T9794] CR2: 0000000000000000 CR3: 00000000924d1000 CR4: 00000000001426f0 [ 83.351651][ T9794] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 83.359637][ T9794] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 83.367628][ T9794] Kernel panic - not syncing: Fatal exception [ 83.375233][ T9794] Kernel Offset: disabled [ 83.379586][ T9794] Rebooting in 86400 seconds..