[info] Using makefile-style concurrent boot in runlevel 2. [ 24.569386] audit: type=1800 audit(1541454094.351:21): pid=5510 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2419 res=0 [ 24.608220] audit: type=1800 audit(1541454094.351:22): pid=5510 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="motd" dev="sda1" ino=2447 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.9' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 50.173991] BUG: pagefault on kernel address 0xffffc90002559000 in non-whitelisted uaccess [ 50.182607] BUG: unable to handle kernel paging request at ffffc90002559000 [ 50.189685] PGD 1da95a067 P4D 1da95a067 PUD 1da95b067 PMD 1bdd3d067 PTE 0 [ 50.196599] Oops: 0000 [#1] PREEMPT SMP KASAN [ 50.201082] CPU: 1 PID: 5666 Comm: syz-executor334 Not tainted 4.20.0-rc1+ #99 [ 50.208416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.217760] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 50.223625] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 [ 50.242510] RSP: 0018:ffff8801b5f7f680 EFLAGS: 00010202 [ 50.247859] RAX: 0000000000000000 RBX: 000000000000ca80 RCX: 0000000000004a80 [ 50.255231] RDX: 000000000000ca80 RSI: ffffc90002559000 RDI: 00000000200080c0 [ 50.262484] RBP: ffff8801b5f7f6b8 R08: 0000000000000000 R09: 000000000000032a [ 50.269749] R10: fffff520004abb4f R11: ffffc9000255da7f R12: 000000002000cb40 [ 50.277165] R13: 00000000200000c0 R14: ffffc90002551000 R15: 00007ffffffff000 [ 50.284439] FS: 00000000017d2880(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 50.292648] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.298513] CR2: ffffc90002559000 CR3: 00000001b92cf000 CR4: 00000000001406e0 [ 50.306065] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 50.313327] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 50.320578] Call Trace: [ 50.323176] ? _copy_to_user+0xf6/0x110 [ 50.327152] vidioc_g_fmt_vid_overlay+0x392/0x550 [ 50.331979] v4l_g_fmt+0x2ad/0x640 [ 50.335692] __video_do_ioctl+0x8b1/0x1050 [ 50.339922] ? v4l_s_fmt+0x990/0x990 [ 50.343748] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 50.349268] video_usercopy+0x5c1/0x1760 [ 50.353323] ? v4l_s_fmt+0x990/0x990 [ 50.357025] ? v4l_enumstd+0x70/0x70 [ 50.360718] ? rcu_softirq_qs+0x20/0x20 [ 50.364677] ? is_bpf_text_address+0xd3/0x170 [ 50.369181] ? __kernel_text_address+0xd/0x40 [ 50.373659] ? unwind_get_return_address+0x61/0xa0 [ 50.378576] ? __save_stack_trace+0x8d/0xf0 [ 50.382884] ? smk_access+0x53b/0x700 [ 50.386818] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 50.392337] ? smack_log+0x423/0x590 [ 50.396031] ? smk_access_entry+0x310/0x310 [ 50.400498] ? trace_hardirqs_off+0xb8/0x310 [ 50.404889] ? smk_tskacc+0x3dd/0x520 [ 50.408675] ? video_usercopy+0x1760/0x1760 [ 50.412974] video_ioctl2+0x2c/0x33 [ 50.416578] v4l2_ioctl+0x154/0x1b0 [ 50.420196] ? video_devdata+0xa0/0xa0 [ 50.424082] do_vfs_ioctl+0x1de/0x1790 [ 50.427953] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 50.433468] ? ioctl_preallocate+0x300/0x300 [ 50.437854] ? smk_curacc+0x7f/0xa0 [ 50.441616] ? smack_file_ioctl+0x210/0x3c0 [ 50.445944] ? fget_raw+0x20/0x20 [ 50.449380] ? smack_file_lock+0x2e0/0x2e0 [ 50.453590] ? rcu_read_lock_sched_held+0x14f/0x180 [ 50.458588] ? do_syscall_64+0x9a/0x820 [ 50.462554] ? do_syscall_64+0x9a/0x820 [ 50.466508] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 50.472033] ? security_file_ioctl+0x94/0xc0 [ 50.476616] ksys_ioctl+0xa9/0xd0 [ 50.480089] __x64_sys_ioctl+0x73/0xb0 [ 50.483960] do_syscall_64+0x1b9/0x820 [ 50.487836] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 50.493180] ? syscall_return_slowpath+0x5e0/0x5e0 [ 50.498114] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 50.503225] ? trace_hardirqs_on_caller+0x310/0x310 [ 50.508828] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 50.513840] ? prepare_exit_to_usermode+0x291/0x3b0 [ 50.518836] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 50.523664] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 50.528838] RIP: 0033:0x443f49 [ 50.532018] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b d8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 50.550917] RSP: 002b:00007ffc8ee2f888 EFLAGS: 00000217 ORIG_RAX: 0000000000000010 [ 50.558710] RAX: ffffffffffffffda RBX: 00000000004002e0 RCX: 0000000000443f49 [ 50.565965] RDX: 00000000200000c0 RSI: 00000000c0d05604 RDI: 0000000000000004 [ 50.573213] RBP: 00000000006ce018 R08: 00000000004002e0 R09: 00000000004002e0 [ 50.580584] R10: 00000000004002e0 R11: 0000000000000217 R12: 0000000000401c50 [ 50.587838] R13: 0000000000401ce0 R14: 0000000000000000 R15: 0000000000000000 [ 50.595096] Modules linked in: [ 50.598403] CR2: ffffc90002559000 [ 50.601862] ---[ end trace 8cf522765a92e8e0 ]--- [ 50.606606] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 50.612594] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 [ 50.631528] RSP: 0018:ffff8801b5f7f680 EFLAGS: 00010202 [ 50.636876] RAX: 0000000000000000 RBX: 000000000000ca80 RCX: 0000000000004a80 [ 50.644167] RDX: 000000000000ca80 RSI: ffffc90002559000 RDI: 00000000200080c0 [ 50.651455] RBP: ffff8801b5f7f6b8 R08: 0000000000000000 R09: 000000000000032a [ 50.658705] R10: fffff520004abb4f R11: ffffc9000255da7f R12: 000000002000cb40 [ 50.665954] R13: 00000000200000c0 R14: ffffc90002551000 R15: 00007ffffffff000 [ 50.673208] FS: 00000000017d2880(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 50.681412] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.687421] CR2: ffffc90002559000 CR3: 00000001b92cf000 CR4: 00000000001406e0 [ 50.694676] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 50.701982] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 50.709243] Kernel panic - not syncing: Fatal exception [ 50.715636] Kernel Offset: disabled [ 50.719265] Rebooting in 86400 seconds..