[ 35.711294][ T26] audit: type=1800 audit(1551062029.951:27): pid=7481 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0
[ 35.732411][ T26] audit: type=1800 audit(1551062029.961:28): pid=7481 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0
[....] Starting periodic command scheduler: cron[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
[ 36.441374][ T26] audit: type=1800 audit(1551062030.731:29): pid=7481 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0
[ 36.462038][ T26] audit: type=1800 audit(1551062030.731:30): pid=7481 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0
Debian GNU/Linux 7 syzkaller ttyS0
Warning: Permanently added '10.128.0.39' (ECDSA) to the list of known hosts.
2019/02/25 02:34:02 parsed 1 programs
2019/02/25 02:34:04 executed programs: 0
syzkaller login: [ 49.965671][ T7647] IPVS: ftp: loaded support on port[0] = 21
[ 50.017502][ T7647] chnl_net:caif_netlink_parms(): no params data found
[ 50.043796][ T7647] bridge0: port 1(bridge_slave_0) entered blocking state
[ 50.051540][ T7647] bridge0: port 1(bridge_slave_0) entered disabled state
[ 50.059187][ T7647] device bridge_slave_0 entered promiscuous mode
[ 50.066760][ T7647] bridge0: port 2(bridge_slave_1) entered blocking state
[ 50.073869][ T7647] bridge0: port 2(bridge_slave_1) entered disabled state
[ 50.081459][ T7647] device bridge_slave_1 entered promiscuous mode
[ 50.096576][ T7647] bond0: Enslaving bond_slave_0 as an active interface with an up link
[ 50.106110][ T7647] bond0: Enslaving bond_slave_1 as an active interface with an up link
[ 50.121981][ T7647] team0: Port device team_slave_0 added
[ 50.128489][ T7647] team0: Port device team_slave_1 added
[ 50.190386][ T7647] device hsr_slave_0 entered promiscuous mode
[ 50.228755][ T7647] device hsr_slave_1 entered promiscuous mode
[ 50.274554][ T7647] bridge0: port 2(bridge_slave_1) entered blocking state
[ 50.281679][ T7647] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 50.289495][ T7647] bridge0: port 1(bridge_slave_0) entered blocking state
[ 50.296517][ T7647] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 50.325216][ T7647] 8021q: adding VLAN 0 to HW filter on device bond0
[ 50.337098][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 50.356961][ T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 50.365591][ T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 50.374139][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 50.384796][ T7647] 8021q: adding VLAN 0 to HW filter on device team0
[ 50.393543][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 50.401896][ T22] bridge0: port 1(bridge_slave_0) entered blocking state
[ 50.409215][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 50.418920][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 50.427123][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 50.434189][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 50.449652][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 50.459255][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 50.469275][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 50.482261][ T7647] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 50.493500][ T7647] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 50.505334][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 50.513894][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 50.522130][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 50.537622][ T7647] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 50.577785][ T7654] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details.
[ 50.668617][ C0] ------------[ cut here ]------------
[ 50.674094][ C0] kernel BUG at arch/x86/kvm/x86.c:357!
[ 50.679823][ C0] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[ 50.685865][ C0] CPU: 0 PID: 7652 Comm: syz-executor.0 Not tainted 5.0.0-rc7-next-20190222 #41
[ 50.694869][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 50.704907][ C0] RIP: 0010:kvm_spurious_fault+0x9/0x10
[ 50.710424][ C0] Code: e8 4c 40 66 00 41 bd 03 00 00 00 5b 44 89 e8 41 5c 41 5d 5d c3 66 90 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 e8 27 40 66 00 <0f> 0b 0f 1f 44 00 00 55 48 89 e5 41 57 41 56 49 89 d6 41 55 41 54
[ 50.730000][ C0] RSP: 0018:ffff8880ae807e80 EFLAGS: 00010006
[ 50.736038][ C0] RAX: ffff88808e30c080 RBX: ffff88808a353808 RCX: ffffffff81329bea
[ 50.744053][ C0] RDX: 0000000000010000 RSI: ffffffff810a1569 RDI: 0000000000000007
[ 50.752022][ C0] RBP: ffff8880ae807e80 R08: ffff88808e30c080 R09: ffffed1015d05be9
[ 50.759968][ C0] R10: ffffed1015d05be8 R11: ffff8880ae82df47 R12: 1ffff11015d00fd3
[ 50.767911][ C0] R13: ffff888095680000 R14: ffff8880ae807ef8 R15: 0000000000000000
[ 50.775863][ C0] FS: 0000000000dd7940(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000
[ 50.784764][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 50.791322][ C0] CR2: ffff8880ae807eb8 CR3: 000000008e2f6000 CR4: 00000000001426f0
[ 50.799267][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 50.807213][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 50.815214][ C0] Call Trace:
[ 50.818475][ C0]
[ 50.821323][ C0] loaded_vmcs_init+0x95/0x250
[ 50.826057][ C0] ? find_msr_entry+0x170/0x170
[ 50.830888][ C0] __loaded_vmcs_clear+0x229/0x360
[ 50.835976][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 50.842192][ C0] flush_smp_call_function_queue+0x14a/0x500
[ 50.848145][ C0] ? loaded_vmcs_init+0x250/0x250
[ 50.853143][ C0] generic_smp_call_function_single_interrupt+0x13/0x2b
[ 50.860052][ C0] smp_call_function_single_interrupt+0xa3/0x460
[ 50.866355][ C0] call_function_single_interrupt+0xf/0x20
[ 50.872136][ C0]
[ 50.875050][ C0] RIP: 0010:get_futex_key+0x994/0x1660
[ 50.880483][ C0] Code: e2 35 0b 00 84 db 0f 85 18 05 00 00 e8 95 34 0b 00 31 ff 44 89 e6 e8 0b 36 0b 00 45 85 e4 0f 85 8f f8 ff ff 41 bc f2 ff ff ff 77 34 0b 00 48 b8 00 00 00 00 00 fc ff df 48 03 85 18 ff ff ff
[ 50.900057][ C0] RSP: 0018:ffff88809faa7a00 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff04
[ 50.908440][ C0] RAX: ffff88808e30c080 RBX: 0000000000000000 RCX: ffffffff81651375
[ 50.916401][ C0] RDX: 0000000000000000 RSI: ffffffff81651392 RDI: 0000000000000005
[ 50.924346][ C0] RBP: ffff88809faa7b00 R08: ffff88808e30c080 R09: 0000000000000000
[ 50.932292][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 50.940239][ C0] R13: ffff88809faa7ad8 R14: 00007fffffffeffc R15: 0000000000000000
[ 50.948203][ C0] ? get_futex_key_refs.isra.0+0x55/0xc0
[ 50.953815][ C0] ? get_futex_key_refs.isra.0+0x72/0xc0
[ 50.959452][ C0] ? destroy_hrtimer_on_stack+0x1d/0x30
[ 50.964989][ C0] ? unqueue_me_pi+0xc0/0xc0
[ 50.969566][ C0] ? futex_wait_setup+0x390/0x390
[ 50.974590][ C0] futex_wake+0xf9/0x4d0
[ 50.978808][ C0] ? get_futex_key+0x1660/0x1660
[ 50.983721][ C0] do_futex+0x34c/0x1d50
[ 50.987938][ C0] ? mark_held_locks+0xf0/0xf0
[ 50.992681][ C0] ? __might_fault+0x12b/0x1e0
[ 50.997433][ C0] ? exit_robust_list+0x290/0x290
[ 51.002443][ C0] ? __x64_sys_futex+0x4c2/0x590
[ 51.007393][ C0] ? ktime_get+0x105/0x300
[ 51.011798][ C0] ? __x64_sys_futex+0x4c2/0x590
[ 51.016746][ C0] ? ktime_get+0x105/0x300
[ 51.021169][ C0] ? lockdep_hardirqs_on+0x418/0x5d0
[ 51.026428][ C0] ? trace_hardirqs_on+0x67/0x230
[ 51.031425][ C0] ? __sanitizer_cov_trace_cmp4+0x16/0x20
[ 51.037133][ C0] ? ktime_get+0x208/0x300
[ 51.041521][ C0] __x64_sys_futex+0x3f7/0x590
[ 51.046258][ C0] ? do_futex+0x1d50/0x1d50
[ 51.050734][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 51.056164][ C0] ? do_syscall_64+0x26/0x610
[ 51.060812][ C0] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 51.066847][ C0] ? do_syscall_64+0x26/0x610
[ 51.071497][ C0] ? lockdep_hardirqs_on+0x418/0x5d0
[ 51.076799][ C0] ? trace_hardirqs_on+0x67/0x230
[ 51.081922][ C0] do_syscall_64+0x103/0x610
[ 51.086503][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 51.092384][ C0] RIP: 0033:0x457e29
[ 51.096264][ C0] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 51.115840][ C0] RSP: 002b:00007fffb4cc2c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 51.124284][ C0] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 0000000000457e29
[ 51.132242][ C0] RDX: 0000000000000000 RSI: 0000000000000081 RDI: 000000000073bfa8
[ 51.140191][ C0] RBP: 000000000073bfa0 R08: 0000000000740520 R09: 000000000000c57b
[ 51.148133][ C0] R10: 00007fffb4cc2d20 R11: 0000000000000246 R12: 000000000000033e
[ 51.156077][ C0] R13: 0000000000000001 R14: 0000000000000003 R15: 000000000073bfac
[ 51.164027][ C0] Modules linked in:
[ 51.167907][ C0] ---[ end trace 18a811befbf042fc ]---
[ 51.173362][ C0] RIP: 0010:kvm_spurious_fault+0x9/0x10
[ 51.178898][ C0] Code: e8 4c 40 66 00 41 bd 03 00 00 00 5b 44 89 e8 41 5c 41 5d 5d c3 66 90 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 e8 27 40 66 00 <0f> 0b 0f 1f 44 00 00 55 48 89 e5 41 57 41 56 49 89 d6 41 55 41 54
[ 51.198472][ C0] RSP: 0018:ffff8880ae807e80 EFLAGS: 00010006
[ 51.204511][ C0] RAX: ffff88808e30c080 RBX: ffff88808a353808 RCX: ffffffff81329bea
[ 51.212486][ C0] RDX: 0000000000010000 RSI: ffffffff810a1569 RDI: 0000000000000007
[ 51.220429][ C0] RBP: ffff8880ae807e80 R08: ffff88808e30c080 R09: ffffed1015d05be9
[ 51.228371][ C0] R10: ffffed1015d05be8 R11: ffff8880ae82df47 R12: 1ffff11015d00fd3
[ 51.236329][ C0] R13: ffff888095680000 R14: ffff8880ae807ef8 R15: 0000000000000000
[ 51.244288][ C0] FS: 0000000000dd7940(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000
[ 51.253186][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 51.259758][ C0] CR2: ffff8880ae807eb8 CR3: 000000008e2f6000 CR4: 00000000001426f0
[ 51.267704][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 51.275647][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 51.283589][ C0] Kernel panic - not syncing: Fatal exception in interrupt
[ 51.291602][ C0] Kernel Offset: disabled
[ 51.295915][ C0] Rebooting in 86400 seconds..