[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 56.966917][ T23] audit: type=1800 audit(1575371469.940:25): pid=8834 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 56.986890][ T23] audit: type=1800 audit(1575371469.950:26): pid=8834 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 57.025419][ T23] audit: type=1800 audit(1575371469.950:27): pid=8834 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.151' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 69.474964][ T8988] ================================================================== [ 69.483249][ T8988] BUG: KASAN: vmalloc-out-of-bounds in kvm_dev_ioctl_get_cpuid+0xad7/0xb0b [ 69.491822][ T8988] Write of size 4 at addr ffffc90000d36050 by task syz-executor688/8988 [ 69.500116][ T8988] [ 69.502428][ T8988] CPU: 1 PID: 8988 Comm: syz-executor688 Not tainted 5.4.0-syzkaller #0 [ 69.510777][ T8988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.520814][ T8988] Call Trace: [ 69.524087][ T8988] dump_stack+0x197/0x210 [ 69.528445][ T8988] ? kvm_dev_ioctl_get_cpuid+0xad7/0xb0b [ 69.534060][ T8988] print_address_description.constprop.0.cold+0x5/0x30b [ 69.540972][ T8988] ? kvm_dev_ioctl_get_cpuid+0xad7/0xb0b [ 69.546580][ T8988] ? kvm_dev_ioctl_get_cpuid+0xad7/0xb0b [ 69.552192][ T8988] __kasan_report.cold+0x1b/0x41 [ 69.557111][ T8988] ? kvm_dev_ioctl_get_cpuid+0xe1/0xb0b [ 69.562685][ T8988] ? kvm_dev_ioctl_get_cpuid+0xad7/0xb0b [ 69.568310][ T8988] kasan_report+0x12/0x20 [ 69.572635][ T8988] __asan_report_store4_noabort+0x17/0x20 [ 69.578333][ T8988] kvm_dev_ioctl_get_cpuid+0xad7/0xb0b [ 69.583779][ T8988] ? kvm_vcpu_ioctl_get_cpuid2+0x160/0x160 [ 69.589570][ T8988] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 69.595796][ T8988] ? _copy_from_user+0x12c/0x1a0 [ 69.600715][ T8988] kvm_arch_dev_ioctl+0x300/0x4b0 [ 69.605716][ T8988] ? kvm_vm_ioctl_check_extension+0x3d0/0x3d0 [ 69.611779][ T8988] ? trace_hardirqs_on+0x67/0x240 [ 69.616782][ T8988] kvm_dev_ioctl+0x127/0x17d0 [ 69.621444][ T8988] ? putname+0xf4/0x130 [ 69.625580][ T8988] ? kvm_put_kvm+0xcc0/0xcc0 [ 69.630149][ T8988] ? tomoyo_file_ioctl+0x23/0x30 [ 69.635065][ T8988] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 69.641282][ T8988] ? security_file_ioctl+0x8d/0xc0 [ 69.646372][ T8988] __ia32_compat_sys_ioctl+0x22d/0x5c0 [ 69.651824][ T8988] ? kvm_put_kvm+0xcc0/0xcc0 [ 69.656397][ T8988] do_fast_syscall_32+0x27b/0xe16 [ 69.661402][ T8988] entry_SYSENTER_compat+0x70/0x7f [ 69.666488][ T8988] RIP: 0023:0xf7f05a39 [ 69.670535][ T8988] Code: 00 00 00 89 d3 5b 5e 5f 5d c3 b8 80 96 98 00 eb c4 8b 04 24 c3 8b 1c 24 c3 8b 34 24 c3 8b 3c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 69.690217][ T8988] RSP: 002b:00000000ffc2351c EFLAGS: 00000217 ORIG_RAX: 0000000000000036 [ 69.698606][ T8988] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c008ae09 [ 69.706561][ T8988] RDX: 0000000020000240 RSI: 00000000000000a0 RDI: 0000000000000000 [ 69.714508][ T8988] RBP: 0000000000c10000 R08: 0000000000000000 R09: 0000000000000000 [ 69.722455][ T8988] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 69.730405][ T8988] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 69.738361][ T8988] [ 69.740663][ T8988] [ 69.742966][ T8988] Memory state around the buggy address: [ 69.748579][ T8988] ffffc90000d35f00: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 69.756613][ T8988] ffffc90000d35f80: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 69.764654][ T8988] >ffffc90000d36000: 00 00 00 00 00 00 00 00 00 00 f9 f9 f9 f9 f9 f9 [ 69.772685][ T8988] ^ [ 69.779331][ T8988] ffffc90000d36080: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 69.787377][ T8988] ffffc90000d36100: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 69.795409][ T8988] ================================================================== [ 69.803441][ T8988] Disabling lock debugging due to kernel taint [ 69.811181][ T8988] Kernel panic - not syncing: panic_on_warn set ... [ 69.817780][ T8988] CPU: 1 PID: 8988 Comm: syz-executor688 Tainted: G B 5.4.0-syzkaller #0 [ 69.827476][ T8988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.837523][ T8988] Call Trace: [ 69.840819][ T8988] dump_stack+0x197/0x210 [ 69.845160][ T8988] panic+0x2e3/0x75c [ 69.849049][ T8988] ? add_taint.cold+0x16/0x16 [ 69.853737][ T8988] ? kvm_dev_ioctl_get_cpuid+0xad7/0xb0b [ 69.859350][ T8988] ? preempt_schedule+0x4b/0x60 [ 69.864174][ T8988] ? ___preempt_schedule+0x16/0x18 [ 69.869261][ T8988] ? trace_hardirqs_on+0x5e/0x240 [ 69.874259][ T8988] ? kvm_dev_ioctl_get_cpuid+0xad7/0xb0b [ 69.879878][ T8988] end_report+0x47/0x4f [ 69.884017][ T8988] ? kvm_dev_ioctl_get_cpuid+0xad7/0xb0b [ 69.889633][ T8988] __kasan_report.cold+0xe/0x41 [ 69.894466][ T8988] ? kvm_dev_ioctl_get_cpuid+0xe1/0xb0b [ 69.899989][ T8988] ? kvm_dev_ioctl_get_cpuid+0xad7/0xb0b [ 69.905596][ T8988] kasan_report+0x12/0x20 [ 69.909901][ T8988] __asan_report_store4_noabort+0x17/0x20 [ 69.915608][ T8988] kvm_dev_ioctl_get_cpuid+0xad7/0xb0b [ 69.921052][ T8988] ? kvm_vcpu_ioctl_get_cpuid2+0x160/0x160 [ 69.926846][ T8988] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 69.933107][ T8988] ? _copy_from_user+0x12c/0x1a0 [ 69.938025][ T8988] kvm_arch_dev_ioctl+0x300/0x4b0 [ 69.943029][ T8988] ? kvm_vm_ioctl_check_extension+0x3d0/0x3d0 [ 69.949087][ T8988] ? trace_hardirqs_on+0x67/0x240 [ 69.954157][ T8988] kvm_dev_ioctl+0x127/0x17d0 [ 69.958821][ T8988] ? putname+0xf4/0x130 [ 69.963069][ T8988] ? kvm_put_kvm+0xcc0/0xcc0 [ 69.967645][ T8988] ? tomoyo_file_ioctl+0x23/0x30 [ 69.972571][ T8988] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 69.978833][ T8988] ? security_file_ioctl+0x8d/0xc0 [ 69.983976][ T8988] __ia32_compat_sys_ioctl+0x22d/0x5c0 [ 69.989512][ T8988] ? kvm_put_kvm+0xcc0/0xcc0 [ 69.994155][ T8988] do_fast_syscall_32+0x27b/0xe16 [ 69.999165][ T8988] entry_SYSENTER_compat+0x70/0x7f [ 70.004253][ T8988] RIP: 0023:0xf7f05a39 [ 70.008308][ T8988] Code: 00 00 00 89 d3 5b 5e 5f 5d c3 b8 80 96 98 00 eb c4 8b 04 24 c3 8b 1c 24 c3 8b 34 24 c3 8b 3c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 70.027889][ T8988] RSP: 002b:00000000ffc2351c EFLAGS: 00000217 ORIG_RAX: 0000000000000036 [ 70.036279][ T8988] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c008ae09 [ 70.044227][ T8988] RDX: 0000000020000240 RSI: 00000000000000a0 RDI: 0000000000000000 [ 70.052173][ T8988] RBP: 0000000000c10000 R08: 0000000000000000 R09: 0000000000000000 [ 70.060164][ T8988] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 70.068109][ T8988] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 70.077407][ T8988] Kernel Offset: disabled [ 70.081734][ T8988] Rebooting in 86400 seconds..