[ 29.496185] audit: type=1800 audit(1544928043.996:27): pid=5897 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 29.523136] audit: type=1800 audit(1544928043.996:28): pid=5897 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 30.687767] audit: type=1800 audit(1544928045.246:29): pid=5897 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 30.706557] audit: type=1800 audit(1544928045.246:30): pid=5897 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.50' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 38.361851] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 38.387502] kasan: CONFIG_KASAN_INLINE enabled [ 38.392182] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 38.399670] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 38.405924] CPU: 1 PID: 6053 Comm: syz-executor284 Not tainted 4.20.0-rc6+ #153 [ 38.413350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 38.422697] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x5296/0x7320 [ 38.428412] Code: 03 00 00 48 89 f8 48 c1 e8 03 42 80 3c 20 00 0f 85 b4 1e 00 00 49 8b 9f e0 03 00 00 48 8d bb 88 00 00 00 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 0f 85 8a 1e 00 00 48 8b 9b 88 00 00 00 48 8d bb d8 [ 38.447319] RSP: 0018:ffff8881c07f7530 EFLAGS: 00010206 [ 38.452680] RAX: 0000000000000011 RBX: 0000000000000000 RCX: ffffffff8110198b [ 38.459965] RDX: 0000000000000000 RSI: ffffffff81103a68 RDI: 0000000000000088 [ 38.467220] RBP: ffff8881c07f78d0 R08: ffff8881c0ad2440 R09: 0000000000000008 [ 38.474487] R10: 0000000000000028 R11: ffffffff810feb0f R12: dffffc0000000000 [ 38.481737] R13: 0000000000000000 R14: ffffc90005df1db8 R15: ffff8881c0100080 [ 38.488990] FS: 00000000015b1880(0000) GS:ffff8881daf00000(0000) knlGS:0000000000000000 [ 38.497201] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.503063] CR2: 0000000020000040 CR3: 00000001b3604000 CR4: 00000000001426e0 [ 38.510316] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.517688] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 38.524968] Call Trace: [ 38.527540] ? queue_delayed_work_on+0x14c/0x1f0 [ 38.532281] ? queue_delayed_work_on+0x14c/0x1f0 [ 38.537023] ? kvm_vcpu_ioctl+0x1e5/0x1150 [ 38.541298] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 38.545906] ? vmx_cpuid_update+0xd60/0xd60 [ 38.550215] ? kvm_arch_vcpu_runnable+0x710/0x710 [ 38.555043] ? zap_class+0x640/0x640 [ 38.558741] ? kvm_vcpu_ioctl+0x28c/0x1150 [ 38.562973] ? lock_downgrade+0x900/0x900 [ 38.567106] ? kvm_arch_vcpu_postcreate+0xdf/0x290 [ 38.572017] ? find_held_lock+0x36/0x1c0 [ 38.576062] ? get_task_pid+0x1ea/0x3b0 [ 38.580018] ? lock_downgrade+0x900/0x900 [ 38.584150] ? check_preemption_disabled+0x48/0x280 [ 38.589156] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 38.594079] ? kasan_check_read+0x11/0x20 [ 38.598213] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 38.603472] ? rcu_softirq_qs+0x20/0x20 [ 38.607435] ? get_task_pid+0x211/0x3b0 [ 38.611394] ? find_get_pid+0x270/0x270 [ 38.615361] kvm_vcpu_ioctl+0x5c8/0x1150 [ 38.619412] ? kvm_vcpu_ioctl+0x5c8/0x1150 [ 38.623634] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 38.629332] ? is_bpf_text_address+0xd3/0x170 [ 38.633815] ? kernel_text_address+0x79/0xf0 [ 38.638209] ? __kernel_text_address+0xd/0x40 [ 38.642686] ? unwind_get_return_address+0x61/0xa0 [ 38.647602] ? __save_stack_trace+0x8d/0xf0 [ 38.651935] ? save_stack+0xa9/0xd0 [ 38.655550] ? save_stack+0x43/0xd0 [ 38.659192] ? __kasan_slab_free+0x102/0x150 [ 38.663602] ? kasan_slab_free+0xe/0x10 [ 38.667571] ? putname+0xf2/0x130 [ 38.671009] ? do_sys_open+0x54d/0x700 [ 38.674880] ? __x64_sys_openat+0x9d/0x100 [ 38.679096] ? do_syscall_64+0x1b9/0x820 [ 38.683140] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 38.688499] ? trace_hardirqs_off+0xb8/0x310 [ 38.692910] ? kasan_check_read+0x11/0x20 [ 38.697057] ? do_raw_spin_unlock+0xa7/0x330 [ 38.701448] ? trace_hardirqs_on+0x310/0x310 [ 38.705845] ? trace_hardirqs_off+0xb8/0x310 [ 38.710238] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 38.715876] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 38.721576] do_vfs_ioctl+0x1de/0x1790 [ 38.725450] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 38.730972] ? ioctl_preallocate+0x300/0x300 [ 38.735366] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 38.740898] ? __fget_light+0x2e9/0x430 [ 38.744858] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 38.750382] ? smack_file_ioctl+0x210/0x3c0 [ 38.754686] ? fget_raw+0x20/0x20 [ 38.758125] ? smack_file_lock+0x2e0/0x2e0 [ 38.762345] ? do_syscall_64+0x9a/0x820 [ 38.766304] ? do_syscall_64+0x9a/0x820 [ 38.770261] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 38.775780] ? security_file_ioctl+0x94/0xc0 [ 38.780176] ksys_ioctl+0xa9/0xd0 [ 38.783618] __x64_sys_ioctl+0x73/0xb0 [ 38.787489] do_syscall_64+0x1b9/0x820 [ 38.791375] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 38.796722] ? syscall_return_slowpath+0x5e0/0x5e0 [ 38.801651] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 38.806507] ? trace_hardirqs_on_caller+0x310/0x310 [ 38.811506] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 38.816508] ? prepare_exit_to_usermode+0x291/0x3b0 [ 38.821511] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 38.826342] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 38.831530] RIP: 0033:0x440859 [ 38.834711] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 38.853596] RSP: 002b:00007ffc71f98458 EFLAGS: 00000207 ORIG_RAX: 0000000000000010 [ 38.861300] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440859 [ 38.868564] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 38.875820] RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8 [ 38.883072] R10: 00000000004002c8 R11: 0000000000000207 R12: 00000000004020e0 [ 38.890326] R13: 0000000000402170 R14: 0000000000000000 R15: 0000000000000000 [ 38.897578] Modules linked in: [ 38.901212] ---[ end trace 5ade77f550bec049 ]--- [ 38.906191] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x5296/0x7320 [ 38.911892] Code: 03 00 00 48 89 f8 48 c1 e8 03 42 80 3c 20 00 0f 85 b4 1e 00 00 49 8b 9f e0 03 00 00 48 8d bb 88 00 00 00 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 0f 85 8a 1e 00 00 48 8b 9b 88 00 00 00 48 8d bb d8 [ 38.930819] RSP: 0018:ffff8881c07f7530 EFLAGS: 00010206 [ 38.936202] RAX: 0000000000000011 RBX: 0000000000000000 RCX: ffffffff8110198b [ 38.943492] RDX: 0000000000000000 RSI: ffffffff81103a68 RDI: 0000000000000088 [ 38.950761] RBP: ffff8881c07f78d0 R08: ffff8881c0ad2440 R09: 0000000000000008 [ 38.958058] R10: 0000000000000028 R11: ffffffff810feb0f R12: dffffc0000000000 [ 38.965378] R13: 0000000000000000 R14: ffffc90005df1db8 R15: ffff8881c0100080 [ 38.972644] FS: 00000000015b1880(0000) GS:ffff8881daf00000(0000) knlGS:0000000000000000 [ 38.980884] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.986801] CR2: 0000000020000040 CR3: 00000001b3604000 CR4: 00000000001426e0 [ 38.994090] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 39.001364] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 39.008652] Kernel panic - not syncing: Fatal exception [ 39.015001] Kernel Offset: disabled [ 39.018625] Rebooting in 86400 seconds..