[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 26.778672] kauditd_printk_skb: 7 callbacks suppressed [ 26.778685] audit: type=1800 audit(1538090369.373:29): pid=5219 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 26.812930] audit: type=1800 audit(1538090369.373:30): pid=5219 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.27' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 33.856418] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 33.875577] kasan: CONFIG_KASAN_INLINE enabled [ 33.880161] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 33.887502] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 33.893715] CPU: 1 PID: 5372 Comm: syz-executor054 Not tainted 4.19.0-rc5+ #257 [ 33.901138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 33.910484] RIP: 0010:__lock_acquire+0x237/0x4ec0 [ 33.915308] Code: 28 00 00 00 0f 85 aa 33 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <80> 3c 02 00 0f 85 6d 35 00 00 49 81 7d 00 20 c6 8e 8a 0f 84 54 ff [ 33.934207] RSP: 0018:ffff8801c28a6fb0 EFLAGS: 00010006 [ 33.939591] RAX: dffffc0000000000 RBX: 1ffff10038514e72 RCX: 0000000000000000 [ 33.946844] RDX: 0000000000000039 RSI: 0000000000000000 RDI: ffffffff89723ac0 [ 33.954108] RBP: ffff8801c28a7338 R08: 0000000000000001 R09: 0000000000000001 [ 33.961366] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 33.968617] R13: 00000000000001c8 R14: ffff8801bc720080 R15: 0000000000000000 [ 33.975869] FS: 00000000010e3880(0000) GS:ffff8801dad00000(0000) knlGS:0000000000000000 [ 33.984072] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.989933] CR2: 0000000020000280 CR3: 00000001d885a000 CR4: 00000000001426e0 [ 33.997181] Call Trace: [ 33.999758] ? tg_nop+0x10/0x10 [ 34.003019] ? vmx_vcpu_put+0x1d/0x20 [ 34.006817] ? native_set_debugreg+0x31/0x40 [ 34.011215] ? kvm_arch_vcpu_put+0x2ef/0x420 [ 34.015621] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 34.021179] ? mark_held_locks+0x130/0x130 [ 34.025400] ? __lock_acquire+0x7ec/0x4ec0 [ 34.029622] ? kvm_arch_vcpu_put+0x420/0x420 [ 34.034026] ? lock_downgrade+0x900/0x900 [ 34.038156] ? mark_held_locks+0x130/0x130 [ 34.042374] ? add_timer+0x63f/0x1490 [ 34.046168] ? lock_downgrade+0x900/0x900 [ 34.050312] ? check_preemption_disabled+0x48/0x200 [ 34.055316] ? trace_hardirqs_off+0xb8/0x310 [ 34.059711] ? kasan_check_read+0x11/0x20 [ 34.063839] ? do_raw_spin_unlock+0xa7/0x2f0 [ 34.068229] ? trace_hardirqs_on+0x310/0x310 [ 34.072624] ? calc_wheel_index+0x220/0x220 [ 34.076953] ? print_usage_bug+0xc0/0xc0 [ 34.081002] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 34.086084] ? add_timer+0x644/0x1490 [ 34.089869] lock_acquire+0x1ed/0x520 [ 34.093655] ? kvm_ioapic_scan_entry+0x7f/0x3c0 [ 34.098307] ? lock_release+0x970/0x970 [ 34.102261] ? vmx_flush_tlb_gva+0x380/0x380 [ 34.106666] ? kvm_arch_vcpu_postcreate+0x1bf/0x290 [ 34.111669] _raw_spin_lock+0x2d/0x40 [ 34.115470] ? kvm_ioapic_scan_entry+0x7f/0x3c0 [ 34.120129] kvm_ioapic_scan_entry+0x7f/0x3c0 [ 34.124607] ? find_held_lock+0x36/0x1c0 [ 34.128650] vcpu_enter_guest+0x492f/0x62b0 [ 34.132952] ? __mutex_lock+0x85e/0x1700 [ 34.136997] ? queue_delayed_work_on+0xec/0x1f0 [ 34.141645] ? emulator_read_emulated+0x50/0x50 [ 34.146293] ? hardware_disable+0x530/0x530 [ 34.150597] ? vmx_vcpu_load+0xb06/0x1030 [ 34.154741] ? find_held_lock+0x36/0x1c0 [ 34.158784] ? vmx_write_tsc_offset+0x680/0x680 [ 34.163432] ? graph_lock+0x170/0x170 [ 34.167216] ? kvm_vcpu_ioctl+0x28c/0x1150 [ 34.171440] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 34.176956] ? check_preemption_disabled+0x48/0x200 [ 34.181956] ? check_preemption_disabled+0x48/0x200 [ 34.186956] ? __lock_is_held+0xb5/0x140 [ 34.191003] ? lock_acquire+0x1ed/0x520 [ 34.194961] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 34.199966] ? lock_release+0x970/0x970 [ 34.203930] ? kvm_gen_update_masterclock+0x350/0x350 [ 34.209110] ? kvm_arch_dev_ioctl+0x630/0x630 [ 34.213590] ? preempt_notifier_dec+0x20/0x20 [ 34.218067] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 34.222892] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 34.227893] kvm_vcpu_ioctl+0x72b/0x1150 [ 34.231936] ? kvm_vcpu_block+0x1030/0x1030 [ 34.236251] ? is_bpf_text_address+0xd3/0x170 [ 34.240728] ? kernel_text_address+0x79/0xf0 [ 34.245123] ? __kernel_text_address+0xd/0x40 [ 34.249602] ? unwind_get_return_address+0x61/0xa0 [ 34.254535] ? __save_stack_trace+0x8d/0xf0 [ 34.258840] ? save_stack+0xa9/0xd0 [ 34.262446] ? save_stack+0x43/0xd0 [ 34.266051] ? __kasan_slab_free+0x102/0x150 [ 34.270439] ? kasan_slab_free+0xe/0x10 [ 34.274395] ? putname+0xf2/0x130 [ 34.277827] ? do_sys_open+0x54d/0x700 [ 34.281695] ? __x64_sys_openat+0x9d/0x100 [ 34.285913] ? do_syscall_64+0x1b9/0x820 [ 34.289977] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 34.295324] ? trace_hardirqs_off+0xb8/0x310 [ 34.299713] ? kasan_check_read+0x11/0x20 [ 34.303847] ? do_raw_spin_unlock+0xa7/0x2f0 [ 34.308257] ? trace_hardirqs_on+0x310/0x310 [ 34.312650] ? __bpf_trace_initcall_finish+0x2a/0x30 [ 34.317981] ? trace_hardirqs_off+0xb8/0x310 [ 34.322371] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 34.327903] ? check_preemption_disabled+0x48/0x200 [ 34.332899] ? check_preemption_disabled+0x48/0x200 [ 34.337907] ? kvm_vcpu_block+0x1030/0x1030 [ 34.342230] do_vfs_ioctl+0x1de/0x1720 [ 34.346102] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 34.351369] ? ioctl_preallocate+0x300/0x300 [ 34.355773] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 34.361299] ? __fget_light+0x2e9/0x430 [ 34.365256] ? fget_raw+0x20/0x20 [ 34.368691] ? putname+0xf2/0x130 [ 34.372127] ? rcu_read_lock_sched_held+0x108/0x120 [ 34.377136] ? kmem_cache_free+0x24f/0x290 [ 34.381351] ? putname+0xf7/0x130 [ 34.384788] ? do_syscall_64+0x9a/0x820 [ 34.388747] ? do_syscall_64+0x9a/0x820 [ 34.392703] ? lockdep_hardirqs_on+0x421/0x5c0 [ 34.397265] ? security_file_ioctl+0x94/0xc0 [ 34.401655] ksys_ioctl+0xa9/0xd0 [ 34.405091] __x64_sys_ioctl+0x73/0xb0 [ 34.408959] do_syscall_64+0x1b9/0x820 [ 34.412838] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 34.418182] ? syscall_return_slowpath+0x5e0/0x5e0 [ 34.423113] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 34.427996] ? trace_hardirqs_on_caller+0x310/0x310 [ 34.432995] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 34.437998] ? prepare_exit_to_usermode+0x291/0x3b0 [ 34.443002] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 34.447838] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 34.453024] RIP: 0033:0x440099 [ 34.456211] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 34.475090] RSP: 002b:00007fffe6d62778 EFLAGS: 00000207 ORIG_RAX: 0000000000000010 [ 34.482777] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440099 [ 34.490042] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 34.497292] RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8 [ 34.504540] R10: 00000000004002c8 R11: 0000000000000207 R12: 0000000000401920 [ 34.511789] R13: 00000000004019b0 R14: 0000000000000000 R15: 0000000000000000 [ 34.519041] Modules linked in: [ 34.522230] ---[ end trace 4cfc7ece4ed81190 ]--- [ 34.526969] RIP: 0010:__lock_acquire+0x237/0x4ec0 [ 34.531808] Code: 28 00 00 00 0f 85 aa 33 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <80> 3c 02 00 0f 85 6d 35 00 00 49 81 7d 00 20 c6 8e 8a 0f 84 54 ff [ 34.550688] RSP: 0018:ffff8801c28a6fb0 EFLAGS: 00010006 [ 34.556031] RAX: dffffc0000000000 RBX: 1ffff10038514e72 RCX: 0000000000000000 [ 34.563280] RDX: 0000000000000039 RSI: 0000000000000000 RDI: ffffffff89723ac0 [ 34.570530] RBP: ffff8801c28a7338 R08: 0000000000000001 R09: 0000000000000001 [ 34.577778] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 34.585025] R13: 00000000000001c8 R14: ffff8801bc720080 R15: 0000000000000000 [ 34.592277] FS: 00000000010e3880(0000) GS:ffff8801dad00000(0000) knlGS:0000000000000000 [ 34.600484] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.606346] CR2: 0000000020000280 CR3: 00000001d885a000 CR4: 00000000001426e0 [ 34.613604] Kernel panic - not syncing: Fatal exception [ 34.619754] Kernel Offset: disabled [ 34.623389] Rebooting in 86400 seconds..