[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 48.895967][ T26] audit: type=1800 audit(1561307950.013:25): pid=7963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 48.936417][ T26] audit: type=1800 audit(1561307950.023:26): pid=7963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 48.973072][ T26] audit: type=1800 audit(1561307950.023:27): pid=7963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.239' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program syzkaller login: [ 58.954413][ T8123] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 59.312717][ T8157] BUG: unable to handle page fault for address: ffffed12308b36b3 [ 59.316721][ T8166] kobject: 'kvm' (0000000032007feb): kobject_uevent_env [ 59.320486][ T8157] #PF: supervisor read access in kernel mode [ 59.333509][ T8157] #PF: error_code(0x0000) - not-present page [ 59.339492][ T8157] PGD 21fff0067 P4D 21fff0067 PUD 0 [ 59.344790][ T8157] Oops: 0000 [#1] PREEMPT SMP KASAN [ 59.350004][ T8157] CPU: 0 PID: 8157 Comm: syz-executor065 Not tainted 5.2.0-rc5+ #5 [ 59.357880][ T8157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.368115][ T8157] RIP: 0010:coalesced_mmio_write+0x23e/0x440 [ 59.374117][ T8157] Code: fc ff df 48 89 45 a8 8a 04 18 84 c0 0f 85 82 01 00 00 4c 89 7d a0 41 8b 46 04 4c 8d 24 40 4f 8d 74 e6 08 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 74 f7 a6 00 4c 8b 7d c8 49 83 c7 f0 [ 59.393720][ T8157] RSP: 0018:ffff888091786d00 EFLAGS: 00010a02 [ 59.399837][ T8157] RAX: 1ffff112308b36b3 RBX: dffffc0000000000 RCX: ffff888085e34240 [ 59.407918][ T8157] RDX: 0000000000000000 RSI: 0000000000000046 RDI: 0000000000000000 [ 59.415889][ T8157] RBP: ffff888091786d70 R08: ffffffff8107e400 R09: ffffed10122f0d8d [ 59.427419][ T8157] R10: ffffed10122f0d8c R11: 1ffff110122f0d8c R12: 000000021f81c2b2 [ 59.435471][ T8157] R13: 0000000000000000 R14: ffff88918459b598 R15: ffff8880884ba004 [ 59.443444][ T8157] FS: 00007fca1b7dc700(0000) GS:ffff8880aea00000(0000) knlGS:0000000000000000 [ 59.452462][ T8157] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.459043][ T8157] CR2: ffffed12308b36b3 CR3: 000000008d927000 CR4: 00000000001426f0 [ 59.467013][ T8157] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 59.475069][ T8157] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 59.483059][ T8157] Call Trace: [ 59.486360][ T8157] ? kvm_vm_ioctl_unregister_coalesced_mmio+0x3b0/0x3b0 [ 59.493412][ T8157] kvm_io_bus_write+0x56a/0x6f0 [ 59.498378][ T8157] ? kvm_unregister_device_ops+0x80/0x80 [ 59.504163][ T8157] ? rcu_read_lock_sched_held+0x127/0x1c0 [ 59.510077][ T8157] ? trace_kvm_mmio+0x28c/0x2d0 [ 59.515010][ T8157] write_mmio+0x19f/0x1f0 [ 59.519690][ T8157] emulator_read_write_onepage+0x68a/0x980 [ 59.525699][ T8157] emulator_read_write+0x1d4/0x550 [ 59.530910][ T8157] emulator_write_emulated+0x3c/0x50 [ 59.536818][ T8157] ? emulator_read_emulated+0x50/0x50 [ 59.542739][ T8157] writeback+0x607/0x900 [ 59.547249][ T8157] ? em_xchg+0x230/0x230 [ 59.552312][ T8157] ? emulator_read_write+0x409/0x550 [ 59.557595][ T8157] ? x86_emulate_insn+0xf6a/0x6fe0 [ 59.562701][ T8157] x86_emulate_insn+0x3046/0x6fe0 [ 59.567719][ T8157] ? em_salc+0x8/0x8 [ 59.571611][ T8157] ? init_decode_cache+0x70/0x70 [ 59.576562][ T8157] ? decode_operand+0x145b/0x4820 [ 59.581696][ T8157] ? memcpy+0x49/0x60 [ 59.585685][ T8157] ? decode_operand+0x14ba/0x4820 [ 59.590807][ T8157] ? x86_decode_insn+0x3b6d/0x5120 [ 59.595928][ T8157] x86_emulate_instruction+0x8a8/0x4cc0 [ 59.601496][ T8157] ? kvm_set_rflags+0x3a0/0x3a0 [ 59.606454][ T8157] ? mmio_info_in_cache+0x1e8/0x4a0 [ 59.611832][ T8157] kvm_mmu_page_fault+0x3be/0xf70 [ 59.616932][ T8157] ? trace_lock_acquire+0x190/0x190 [ 59.622134][ T8157] ? vmx_update_host_rsp+0x76/0xe0 [ 59.627233][ T8157] ? __bfs+0x550/0x550 [ 59.631306][ T8157] ? kvm_mmu_unprotect_page_virt+0xd0/0xd0 [ 59.637224][ T8157] ? rcu_read_lock_sched_held+0x127/0x1c0 [ 59.642937][ T8157] ? trace_kvm_page_fault+0x24d/0x290 [ 59.648300][ T8157] handle_ept_violation+0x1a1/0x1f0 [ 59.653504][ T8157] ? handle_desc+0x90/0x90 [ 59.657919][ T8157] vmx_handle_exit+0x3ba/0xd00 [ 59.662763][ T8157] vcpu_enter_guest+0x3e5e/0x5380 [ 59.667969][ T8157] ? local_bh_enable+0x30/0x30 [ 59.673546][ T8157] ? __phys_addr+0x8e/0x120 [ 59.678397][ T8157] ? trace_lock_acquire+0x11c/0x190 [ 59.683584][ T8157] ? lock_acquire+0x158/0x250 [ 59.688250][ T8157] ? rcu_lock_acquire+0xd/0x40 [ 59.693022][ T8157] ? kvm_check_async_pf_completion+0x35b/0x370 [ 59.699177][ T8157] vcpu_run+0x393/0xcf0 [ 59.703331][ T8157] kvm_arch_vcpu_ioctl_run+0xcf2/0xff0 [ 59.709148][ T8157] ? rcu_lock_release+0x26/0x30 [ 59.715984][ T8157] kvm_vcpu_ioctl+0x792/0xba0 [ 59.720763][ T8157] ? kvm_vm_release+0x50/0x50 [ 59.725567][ T8157] ? tomoyo_path_number_perm+0x5f0/0x740 [ 59.731560][ T8157] ? trace_lock_acquire+0x190/0x190 [ 59.737125][ T8157] ? tomoyo_check_path_acl+0x180/0x180 [ 59.742886][ T8157] ? vm_mmap_pgoff+0x1a4/0x240 [ 59.747823][ T8157] ? kvm_vm_release+0x50/0x50 [ 59.752779][ T8157] do_vfs_ioctl+0x7d4/0x1890 [ 59.757424][ T8157] ? ioctl_preallocate+0x240/0x240 [ 59.762723][ T8157] ? fget_many+0x30/0x30 [ 59.766975][ T8157] ? __x64_sys_futex+0x100/0x100 [ 59.772019][ T8157] ? tomoyo_file_ioctl+0x23/0x30 [ 59.777070][ T8157] ? security_file_ioctl+0xa1/0xd0 [ 59.782181][ T8157] __x64_sys_ioctl+0xe3/0x120 [ 59.786855][ T8157] do_syscall_64+0xfe/0x140 [ 59.791512][ T8157] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 59.798066][ T8157] RIP: 0033:0x449e09 [ 59.802135][ T8157] Code: e8 ec e7 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 1b ff fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 59.822874][ T8157] RSP: 002b:00007fca1b7dbce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 59.831423][ T8157] RAX: ffffffffffffffda RBX: 00000000006dfc48 RCX: 0000000000449e09 [ 59.839389][ T8157] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 59.847364][ T8157] RBP: 00000000006dfc40 R08: 0000000000000000 R09: 0000000000000000 [ 59.855335][ T8157] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dfc4c [ 59.863413][ T8157] R13: 00007ffd1396c11f R14: 00007fca1b7dc9c0 R15: 0000000000000000 [ 59.871386][ T8157] Modules linked in: [ 59.875382][ T8157] CR2: ffffed12308b36b3 [ 59.879700][ T8157] ---[ end trace c4933e7f38a8fb04 ]--- [ 59.885153][ T8157] RIP: 0010:coalesced_mmio_write+0x23e/0x440 [ 59.892259][ T8157] Code: fc ff df 48 89 45 a8 8a 04 18 84 c0 0f 85 82 01 00 00 4c 89 7d a0 41 8b 46 04 4c 8d 24 40 4f 8d 74 e6 08 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 74 f7 a6 00 4c 8b 7d c8 49 83 c7 f0 [ 59.912761][ T8157] RSP: 0018:ffff888091786d00 EFLAGS: 00010a02 [ 59.919278][ T8157] RAX: 1ffff112308b36b3 RBX: dffffc0000000000 RCX: ffff888085e34240 [ 59.928214][ T8157] RDX: 0000000000000000 RSI: 0000000000000046 RDI: 0000000000000000 [ 59.936361][ T8157] RBP: ffff888091786d70 R08: ffffffff8107e400 R09: ffffed10122f0d8d [ 59.944784][ T8157] R10: ffffed10122f0d8c R11: 1ffff110122f0d8c R12: 000000021f81c2b2 [ 59.952757][ T8157] R13: 0000000000000000 R14: ffff88918459b598 R15: ffff8880884ba004 [ 59.961267][ T8157] FS: 00007fca1b7dc700(0000) GS:ffff8880aea00000(0000) knlGS:0000000000000000 [ 59.970184][ T8157] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.976761][ T8157] CR2: ffffed12308b36b3 CR3: 000000008d927000 CR4: 00000000001426f0 [ 59.984989][ T8157] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 59.993348][ T8157] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 60.001594][ T8157] Kernel panic - not syncing: Fatal exception [ 60.009246][ T8157] Kernel Offset: disabled [ 60.013581][ T8157] Rebooting in 86400 seconds..