[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 60.455345][ T25] audit: type=1800 audit(1575354461.918:25): pid=8803 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 60.475402][ T25] audit: type=1800 audit(1575354461.918:26): pid=8803 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 60.496306][ T25] audit: type=1800 audit(1575354461.918:27): pid=8803 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.92' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 69.112167][ T8956] ================================================================== [ 69.120464][ T8956] BUG: KASAN: vmalloc-out-of-bounds in kvm_dev_ioctl_get_cpuid+0xad7/0xb0b [ 69.129028][ T8956] Write of size 4 at addr ffffc90000d36050 by task syz-executor817/8956 [ 69.137323][ T8956] [ 69.139636][ T8956] CPU: 1 PID: 8956 Comm: syz-executor817 Not tainted 5.4.0-syzkaller #0 [ 69.147932][ T8956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.157966][ T8956] Call Trace: [ 69.161243][ T8956] dump_stack+0x197/0x210 [ 69.165554][ T8956] ? kvm_dev_ioctl_get_cpuid+0xad7/0xb0b [ 69.171168][ T8956] print_address_description.constprop.0.cold+0x5/0x30b [ 69.178081][ T8956] ? kvm_dev_ioctl_get_cpuid+0xad7/0xb0b [ 69.184407][ T8956] ? kvm_dev_ioctl_get_cpuid+0xad7/0xb0b [ 69.190019][ T8956] __kasan_report.cold+0x1b/0x41 [ 69.194941][ T8956] ? kvm_dev_ioctl_get_cpuid+0xe1/0xb0b [ 69.200466][ T8956] ? kvm_dev_ioctl_get_cpuid+0xad7/0xb0b [ 69.206199][ T8956] kasan_report+0x12/0x20 [ 69.210524][ T8956] __asan_report_store4_noabort+0x17/0x20 [ 69.216242][ T8956] kvm_dev_ioctl_get_cpuid+0xad7/0xb0b [ 69.221697][ T8956] ? kvm_vcpu_ioctl_get_cpuid2+0x160/0x160 [ 69.227531][ T8956] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 69.233758][ T8956] ? _copy_from_user+0x12c/0x1a0 [ 69.238681][ T8956] kvm_arch_dev_ioctl+0x300/0x4b0 [ 69.243700][ T8956] ? kvm_vm_ioctl_check_extension+0x3d0/0x3d0 [ 69.249752][ T8956] kvm_dev_ioctl+0x127/0x17d0 [ 69.254408][ T8956] ? putname+0xf4/0x130 [ 69.258717][ T8956] ? do_sys_open+0x31d/0x5d0 [ 69.263283][ T8956] ? kvm_put_kvm+0xcc0/0xcc0 [ 69.267854][ T8956] ? tomoyo_file_ioctl+0x23/0x30 [ 69.272769][ T8956] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 69.279012][ T8956] ? security_file_ioctl+0x8d/0xc0 [ 69.284117][ T8956] __ia32_compat_sys_ioctl+0x22d/0x5c0 [ 69.289555][ T8956] ? kvm_put_kvm+0xcc0/0xcc0 [ 69.294128][ T8956] do_fast_syscall_32+0x27b/0xe16 [ 69.299132][ T8956] entry_SYSENTER_compat+0x70/0x7f [ 69.304219][ T8956] RIP: 0023:0xf7f28a39 [ 69.308265][ T8956] Code: 00 00 00 89 d3 5b 5e 5f 5d c3 b8 80 96 98 00 eb c4 8b 04 24 c3 8b 1c 24 c3 8b 34 24 c3 8b 3c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 69.327846][ T8956] RSP: 002b:00000000ffd190dc EFLAGS: 00000213 ORIG_RAX: 0000000000000036 [ 69.336247][ T8956] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c008ae09 [ 69.344199][ T8956] RDX: 0000000020000080 RSI: 00000000080ea078 RDI: 00000000ffd19130 [ 69.352148][ T8956] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 69.360154][ T8956] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 69.368120][ T8956] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 69.376085][ T8956] [ 69.378393][ T8956] [ 69.380707][ T8956] Memory state around the buggy address: [ 69.386318][ T8956] ffffc90000d35f00: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 69.394357][ T8956] ffffc90000d35f80: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 69.402400][ T8956] >ffffc90000d36000: 00 00 00 00 00 00 00 00 00 00 f9 f9 f9 f9 f9 f9 [ 69.410437][ T8956] ^ [ 69.417101][ T8956] ffffc90000d36080: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 69.425138][ T8956] ffffc90000d36100: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 69.433174][ T8956] ================================================================== [ 69.441211][ T8956] Disabling lock debugging due to kernel taint [ 69.447868][ T8956] Kernel panic - not syncing: panic_on_warn set ... [ 69.454450][ T8956] CPU: 1 PID: 8956 Comm: syz-executor817 Tainted: G B 5.4.0-syzkaller #0 [ 69.464482][ T8956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.474514][ T8956] Call Trace: [ 69.477784][ T8956] dump_stack+0x197/0x210 [ 69.482092][ T8956] panic+0x2e3/0x75c [ 69.485961][ T8956] ? add_taint.cold+0x16/0x16 [ 69.490615][ T8956] ? kvm_dev_ioctl_get_cpuid+0xad7/0xb0b [ 69.496222][ T8956] ? preempt_schedule+0x4b/0x60 [ 69.501048][ T8956] ? ___preempt_schedule+0x16/0x18 [ 69.506138][ T8956] ? trace_hardirqs_on+0x5e/0x240 [ 69.511142][ T8956] ? kvm_dev_ioctl_get_cpuid+0xad7/0xb0b [ 69.516750][ T8956] end_report+0x47/0x4f [ 69.520894][ T8956] ? kvm_dev_ioctl_get_cpuid+0xad7/0xb0b [ 69.526515][ T8956] __kasan_report.cold+0xe/0x41 [ 69.531340][ T8956] ? kvm_dev_ioctl_get_cpuid+0xe1/0xb0b [ 69.536871][ T8956] ? kvm_dev_ioctl_get_cpuid+0xad7/0xb0b [ 69.542484][ T8956] kasan_report+0x12/0x20 [ 69.546790][ T8956] __asan_report_store4_noabort+0x17/0x20 [ 69.552484][ T8956] kvm_dev_ioctl_get_cpuid+0xad7/0xb0b [ 69.557931][ T8956] ? kvm_vcpu_ioctl_get_cpuid2+0x160/0x160 [ 69.563717][ T8956] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 69.569932][ T8956] ? _copy_from_user+0x12c/0x1a0 [ 69.574845][ T8956] kvm_arch_dev_ioctl+0x300/0x4b0 [ 69.579859][ T8956] ? kvm_vm_ioctl_check_extension+0x3d0/0x3d0 [ 69.585909][ T8956] kvm_dev_ioctl+0x127/0x17d0 [ 69.590579][ T8956] ? putname+0xf4/0x130 [ 69.594709][ T8956] ? do_sys_open+0x31d/0x5d0 [ 69.599273][ T8956] ? kvm_put_kvm+0xcc0/0xcc0 [ 69.603839][ T8956] ? tomoyo_file_ioctl+0x23/0x30 [ 69.608752][ T8956] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 69.614963][ T8956] ? security_file_ioctl+0x8d/0xc0 [ 69.620050][ T8956] __ia32_compat_sys_ioctl+0x22d/0x5c0 [ 69.625483][ T8956] ? kvm_put_kvm+0xcc0/0xcc0 [ 69.630050][ T8956] do_fast_syscall_32+0x27b/0xe16 [ 69.635049][ T8956] entry_SYSENTER_compat+0x70/0x7f [ 69.640132][ T8956] RIP: 0023:0xf7f28a39 [ 69.644176][ T8956] Code: 00 00 00 89 d3 5b 5e 5f 5d c3 b8 80 96 98 00 eb c4 8b 04 24 c3 8b 1c 24 c3 8b 34 24 c3 8b 3c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 69.663754][ T8956] RSP: 002b:00000000ffd190dc EFLAGS: 00000213 ORIG_RAX: 0000000000000036 [ 69.672139][ T8956] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c008ae09 [ 69.680087][ T8956] RDX: 0000000020000080 RSI: 00000000080ea078 RDI: 00000000ffd19130 [ 69.688034][ T8956] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 69.695981][ T8956] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 69.703925][ T8956] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 69.713221][ T8956] Kernel Offset: disabled [ 69.717544][ T8956] Rebooting in 86400 seconds..