[....] Starting periodic command scheduler: cron[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 11.339548] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. [ 12.027009] random: crng init done Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.93' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 63.203814] kasan: CONFIG_KASAN_INLINE enabled [ 63.204583] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 63.205739] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 63.207055] Modules linked in: [ 63.207609] CPU: 0 PID: 2062 Comm: syz-executor945 Not tainted 4.9.194+ #0 [ 63.208536] task: 0000000006c6982f task.stack: 000000002c2c6ff1 [ 63.209427] RIP: 0010:[] [<000000004bf76611>] __blockdev_direct_IO+0x1c55/0xd370 [ 63.210767] RSP: 0018:ffff8801cec8f310 EFLAGS: 00010202 [ 63.211520] RAX: dffffc0000000000 RBX: ffffea00073a341c RCX: 000000000000000c [ 63.212573] RDX: 0000000000000004 RSI: ffffffff815dd948 RDI: 0000000000000020 [ 63.213693] RBP: ffff8801cec8f650 R08: 0000000000000000 R09: ffff8801cedbb400 [ 63.214677] R10: ffffed0039db768d R11: ffff8801cedbb46f R12: ffffea00073a3400 [ 63.215715] R13: ffffea00073a3400 R14: 0000000000000000 R15: ffff8801ce858000 [ 63.216760] FS: 000000000229d880(0000) GS:ffff8801db600000(0000) knlGS:0000000000000000 [ 63.217914] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.218712] CR2: 0000000020011000 CR3: 00000001d0005000 CR4: 00000000001606b0 [ 63.219693] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 63.220707] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 63.221754] Stack: [ 63.222081] ffffffff83cc9110 0000000000000003 1ffff1003a003df5 ffff8801d001efa8 [ 63.223311] ffff8801d001df00 ffff8801cec8f440 0005080000000000 0000000000001000 [ 63.227989] ffff8801ce858079 ffff8801d001df00 ffff8801da016d40 ffff880100000000 [ 63.235979] Call Trace: [ 63.238580] [<000000007a3a4cb3>] ? sb_init_dio_done_wq+0x80/0x80 [ 63.244791] [<0000000041b4edc4>] ? ext4_dio_get_block_unwritten_sync+0x100/0x100 [ 63.252389] [<00000000c76d5479>] ? ext4_direct_IO+0xc17/0x29b0 [ 63.258452] [<00000000814373dc>] ? ext4_direct_IO+0xc69/0x29b0 [ 63.264497] [<0000000029f8641f>] ? __ext4_journal_stop+0xea/0x1c0 [ 63.270789] [<000000008947c2b7>] ext4_direct_IO+0xa1d/0x29b0 [ 63.276649] [<0000000041b4edc4>] ? ext4_dio_get_block_unwritten_sync+0x100/0x100 [ 63.284241] [<00000000af4b3990>] ? ext4_da_write_begin+0x1080/0x1080 [ 63.290804] [<00000000a1dd640a>] ? trace_hardirqs_on+0x10/0x10 [ 63.296837] [<0000000013ab1505>] ? ext4_xattr_security_set+0x40/0x40 [ 63.303397] [<00000000992b9919>] ? ext4_xattr_security_get+0x32/0x40 [ 63.309949] [<00000000902fe2b4>] ? __vfs_getxattr+0xea/0x140 [ 63.315806] [<00000000d9a64557>] ? __vfs_setxattr+0x170/0x170 [ 63.321749] [<000000009aa6ed7a>] ? __lock_acquire+0x26fe/0x4390 [ 63.327868] [<00000000f3e2ad3a>] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 63.334592] [<00000000f992d836>] ? mark_held_locks+0xb1/0x100 [ 63.340539] [<0000000019e173fd>] ? filemap_check_errors+0x90/0xc0 [ 63.346843] [<0000000028e98604>] generic_file_direct_write+0x293/0x520 [ 63.353571] [<000000009bedb0df>] ? current_kernel_time64+0xbc/0x110 [ 63.360040] [<0000000053e64e3f>] ? filemap_write_and_wait_range+0xb0/0xb0 [ 63.367033] [<0000000047c4e0a6>] ? file_update_time+0xc1/0x390 [ 63.373068] [<00000000cad6996d>] __generic_file_write_iter+0x20f/0x530 [ 63.379804] [<00000000c5b07d47>] ? generic_write_checks+0x245/0x410 [ 63.386275] [<000000003dfa1ec0>] ext4_file_write_iter+0x6e7/0xcd0 [ 63.392567] [<00000000992904a0>] ? ext4_llseek+0x8e0/0x8e0 [ 63.398254] [<00000000f992d836>] ? mark_held_locks+0xb1/0x100 [ 63.404200] [<000000003aa08b7a>] ? mutex_lock_nested+0x6c7/0x920 [ 63.411022] [<000000003362d2dd>] ? trace_hardirqs_on_caller+0x385/0x5a0 [ 63.417852] [<00000000e1003cc1>] vfs_iter_write+0x2e2/0x580 [ 63.423621] [<00000000cfb2aefc>] ? do_iter_readv_writev+0x4b0/0x4b0 [ 63.430094] [<00000000e968e16d>] ? mutex_trylock+0x3f0/0x3f0 [ 63.436003] [<0000000008ca52ba>] ? kasan_unpoison_shadow+0x35/0x50 [ 63.442386] [<0000000064d5a76f>] ? splice_from_pipe_next.part.0+0x1e9/0x290 [ 63.449781] [<0000000040df7024>] iter_file_splice_write+0x5a9/0xb10 [ 63.456254] [<0000000020e5d681>] ? vmsplice_to_user+0x1e0/0x1e0 [ 63.462381] [<00000000762f3fef>] ? rcu_read_lock_sched_held+0x10b/0x130 [ 63.469196] [<0000000022746113>] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 63.475764] [<0000000006d4fde5>] ? __sb_start_write+0x161/0x310 [ 63.481884] [<0000000020e5d681>] ? vmsplice_to_user+0x1e0/0x1e0 [ 63.488005] [<0000000015913df0>] SyS_splice+0xe02/0x14c0 [ 63.493519] [<00000000652ef132>] ? compat_SyS_vmsplice+0x160/0x160 [ 63.499899] [<00000000a4705765>] ? do_syscall_64+0x4a/0x5c0 [ 63.505670] [<00000000652ef132>] ? compat_SyS_vmsplice+0x160/0x160 [ 63.512048] [<000000007e315b0d>] do_syscall_64+0x1ad/0x5c0 [ 63.517737] [<00000000828570e5>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 63.524636] Code: b2 81 e6 ff e9 b3 77 00 00 e8 b8 4d d4 ff 48 8b 84 24 f8 00 00 00 48 8d 78 20 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 bc 96 00 00 48 8b 84 24 f8 00 00 00 4c 8b 68 [ 63.551608] RIP [<000000004bf76611>] __blockdev_direct_IO+0x1c55/0xd370 [ 63.558564] RSP [ 63.562430] ---[ end trace 3c14d76101166677 ]--- [ 63.567202] Kernel panic - not syncing: Fatal exception [ 63.573131] Kernel Offset: disabled [ 63.576787] Rebooting in 86400 seconds..