[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 64.679698][ T27] audit: type=1800 audit(1576358544.675:25): pid=8929 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 64.713259][ T27] audit: type=1800 audit(1576358544.685:26): pid=8929 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 64.750548][ T27] audit: type=1800 audit(1576358544.685:27): pid=8929 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.14' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 74.332620][ T9086] ================================================================== [ 74.341068][ T9086] BUG: KASAN: vmalloc-out-of-bounds in compat_copy_entries+0x128b/0x1380 [ 74.349516][ T9086] Read of size 4 at addr ffffc90000d461f4 by task syz-executor640/9086 [ 74.357737][ T9086] [ 74.360051][ T9086] CPU: 0 PID: 9086 Comm: syz-executor640 Not tainted 5.5.0-rc1-syzkaller #0 [ 74.368695][ T9086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 74.378742][ T9086] Call Trace: [ 74.382026][ T9086] dump_stack+0x197/0x210 [ 74.386339][ T9086] ? compat_copy_entries+0x128b/0x1380 [ 74.391868][ T9086] print_address_description.constprop.0.cold+0x5/0x30b [ 74.398784][ T9086] ? compat_copy_entries+0x128b/0x1380 [ 74.404226][ T9086] ? compat_copy_entries+0x128b/0x1380 [ 74.409677][ T9086] __kasan_report.cold+0x1b/0x41 [ 74.414598][ T9086] ? __kasan_check_read+0x10/0x20 [ 74.419612][ T9086] ? compat_copy_entries+0x128b/0x1380 [ 74.425189][ T9086] kasan_report+0x12/0x20 [ 74.429530][ T9086] __asan_report_load4_noabort+0x14/0x20 [ 74.435204][ T9086] compat_copy_entries+0x128b/0x1380 [ 74.440542][ T9086] ? compat_copy_everything_to_user+0xf50/0xf50 [ 74.446786][ T9086] ? vmalloc+0x6b/0x90 [ 74.450839][ T9086] ? xt_compat_init_offsets+0xe5/0x230 [ 74.456294][ T9086] ? xt_compat_init_offsets+0x1ad/0x230 [ 74.461823][ T9086] compat_do_replace+0x344/0x720 [ 74.466742][ T9086] ? do_ebt_set_ctl+0x110/0x110 [ 74.471588][ T9086] ? apparmor_cred_prepare+0x7b0/0x7b0 [ 74.477035][ T9086] ? nf_sockopt_find.constprop.0+0x226/0x290 [ 74.483099][ T9086] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 74.489340][ T9086] ? ns_capable_common+0x93/0x100 [ 74.494357][ T9086] compat_do_ebt_set_ctl+0x22f/0x27e [ 74.499631][ T9086] ? compat_do_replace+0x720/0x720 [ 74.504777][ T9086] ? wait_for_completion+0x440/0x440 [ 74.510058][ T9086] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 74.516297][ T9086] ? mutex_unlock+0x1b/0x30 [ 74.520788][ T9086] ? nf_sockopt_find.constprop.0+0x226/0x290 [ 74.526893][ T9086] compat_nf_setsockopt+0x98/0x140 [ 74.531990][ T9086] ? compat_do_replace+0x720/0x720 [ 74.537096][ T9086] compat_ip_setsockopt+0x106/0x140 [ 74.542280][ T9086] compat_udp_setsockopt+0x68/0xb0 [ 74.547384][ T9086] compat_sock_common_setsockopt+0xb2/0x140 [ 74.553270][ T9086] ? udp_lib_setsockopt+0x9a0/0x9a0 [ 74.558590][ T9086] __compat_sys_setsockopt+0x185/0x380 [ 74.564052][ T9086] ? sock_common_setsockopt+0xd0/0xd0 [ 74.569409][ T9086] ? __compat_sys_getsockopt+0x2c0/0x2c0 [ 74.575040][ T9086] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 74.580503][ T9086] ? do_fast_syscall_32+0xd1/0xe16 [ 74.585595][ T9086] ? entry_SYSENTER_compat+0x70/0x7f [ 74.590897][ T9086] ? do_fast_syscall_32+0xd1/0xe16 [ 74.595992][ T9086] __ia32_compat_sys_setsockopt+0xbd/0x150 [ 74.601778][ T9086] do_fast_syscall_32+0x27b/0xe16 [ 74.606784][ T9086] entry_SYSENTER_compat+0x70/0x7f [ 74.611875][ T9086] RIP: 0023:0xf7feca39 [ 74.615926][ T9086] Code: 00 00 00 89 d3 5b 5e 5f 5d c3 b8 80 96 98 00 eb c4 8b 04 24 c3 8b 1c 24 c3 8b 34 24 c3 8b 3c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 74.636300][ T9086] RSP: 002b:00000000ff8a607c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 74.644705][ T9086] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 74.652663][ T9086] RDX: 0000000000000080 RSI: 0000000020000240 RDI: 0000000000000212 [ 74.660627][ T9086] RBP: 0000000000000012 R08: 0000000000000000 R09: 0000000000000000 [ 74.668586][ T9086] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 74.676537][ T9086] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 74.684496][ T9086] [ 74.686808][ T9086] [ 74.689130][ T9086] Memory state around the buggy address: [ 74.694739][ T9086] ffffc90000d46080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 74.702777][ T9086] ffffc90000d46100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 74.710818][ T9086] >ffffc90000d46180: 00 00 00 00 00 00 00 00 02 f9 f9 f9 f9 f9 f9 f9 [ 74.718852][ T9086] ^ [ 74.726544][ T9086] ffffc90000d46200: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 74.734580][ T9086] ffffc90000d46280: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 74.742614][ T9086] ================================================================== [ 74.750649][ T9086] Disabling lock debugging due to kernel taint [ 74.757123][ T9086] Kernel panic - not syncing: panic_on_warn set ... [ 74.763714][ T9086] CPU: 0 PID: 9086 Comm: syz-executor640 Tainted: G B 5.5.0-rc1-syzkaller #0 [ 74.773763][ T9086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 74.783811][ T9086] Call Trace: [ 74.787083][ T9086] dump_stack+0x197/0x210 [ 74.791388][ T9086] panic+0x2e3/0x75c [ 74.795259][ T9086] ? add_taint.cold+0x16/0x16 [ 74.799920][ T9086] ? compat_copy_entries+0x128b/0x1380 [ 74.805361][ T9086] ? preempt_schedule+0x4b/0x60 [ 74.810195][ T9086] ? ___preempt_schedule+0x16/0x18 [ 74.815283][ T9086] ? trace_hardirqs_on+0x5e/0x240 [ 74.820302][ T9086] ? compat_copy_entries+0x128b/0x1380 [ 74.825740][ T9086] end_report+0x47/0x4f [ 74.829874][ T9086] ? compat_copy_entries+0x128b/0x1380 [ 74.835311][ T9086] __kasan_report.cold+0xe/0x41 [ 74.840134][ T9086] ? __kasan_check_read+0x10/0x20 [ 74.845133][ T9086] ? compat_copy_entries+0x128b/0x1380 [ 74.850564][ T9086] kasan_report+0x12/0x20 [ 74.854884][ T9086] __asan_report_load4_noabort+0x14/0x20 [ 74.860566][ T9086] compat_copy_entries+0x128b/0x1380 [ 74.865859][ T9086] ? compat_copy_everything_to_user+0xf50/0xf50 [ 74.872083][ T9086] ? vmalloc+0x6b/0x90 [ 74.876135][ T9086] ? xt_compat_init_offsets+0xe5/0x230 [ 74.881576][ T9086] ? xt_compat_init_offsets+0x1ad/0x230 [ 74.887104][ T9086] compat_do_replace+0x344/0x720 [ 74.892019][ T9086] ? do_ebt_set_ctl+0x110/0x110 [ 74.896900][ T9086] ? apparmor_cred_prepare+0x7b0/0x7b0 [ 74.902380][ T9086] ? nf_sockopt_find.constprop.0+0x226/0x290 [ 74.908691][ T9086] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 74.914910][ T9086] ? ns_capable_common+0x93/0x100 [ 74.919913][ T9086] compat_do_ebt_set_ctl+0x22f/0x27e [ 74.925174][ T9086] ? compat_do_replace+0x720/0x720 [ 74.930264][ T9086] ? wait_for_completion+0x440/0x440 [ 74.935685][ T9086] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 74.941913][ T9086] ? mutex_unlock+0x1b/0x30 [ 74.946397][ T9086] ? nf_sockopt_find.constprop.0+0x226/0x290 [ 74.952362][ T9086] compat_nf_setsockopt+0x98/0x140 [ 74.957454][ T9086] ? compat_do_replace+0x720/0x720 [ 74.962540][ T9086] compat_ip_setsockopt+0x106/0x140 [ 74.967724][ T9086] compat_udp_setsockopt+0x68/0xb0 [ 74.972824][ T9086] compat_sock_common_setsockopt+0xb2/0x140 [ 74.978696][ T9086] ? udp_lib_setsockopt+0x9a0/0x9a0 [ 74.983881][ T9086] __compat_sys_setsockopt+0x185/0x380 [ 74.989315][ T9086] ? sock_common_setsockopt+0xd0/0xd0 [ 74.994676][ T9086] ? __compat_sys_getsockopt+0x2c0/0x2c0 [ 75.000289][ T9086] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 75.005722][ T9086] ? do_fast_syscall_32+0xd1/0xe16 [ 75.010822][ T9086] ? entry_SYSENTER_compat+0x70/0x7f [ 75.016084][ T9086] ? do_fast_syscall_32+0xd1/0xe16 [ 75.021178][ T9086] __ia32_compat_sys_setsockopt+0xbd/0x150 [ 75.026963][ T9086] do_fast_syscall_32+0x27b/0xe16 [ 75.031963][ T9086] entry_SYSENTER_compat+0x70/0x7f [ 75.037222][ T9086] RIP: 0023:0xf7feca39 [ 75.041281][ T9086] Code: 00 00 00 89 d3 5b 5e 5f 5d c3 b8 80 96 98 00 eb c4 8b 04 24 c3 8b 1c 24 c3 8b 34 24 c3 8b 3c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 75.060871][ T9086] RSP: 002b:00000000ff8a607c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 75.069261][ T9086] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 75.077218][ T9086] RDX: 0000000000000080 RSI: 0000000020000240 RDI: 0000000000000212 [ 75.085166][ T9086] RBP: 0000000000000012 R08: 0000000000000000 R09: 0000000000000000 [ 75.093113][ T9086] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 75.101060][ T9086] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 75.110541][ T9086] Kernel Offset: disabled [ 75.114873][ T9086] Rebooting in 86400 seconds..