[ 44.807268] audit: type=1800 audit(1556312977.190:30): pid=7674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2490 res=0 Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 49.170839] kauditd_printk_skb: 4 callbacks suppressed [ 49.170856] audit: type=1400 audit(1556312981.600:35): avc: denied { map } for pid=7849 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.1.33' (ECDSA) to the list of known hosts. executing program [ 70.490950] audit: type=1400 audit(1556313002.920:36): avc: denied { map } for pid=7861 comm="syz-executor755" path="/root/syz-executor755717360" dev="sda1" ino=16483 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 70.570798] FAULT_INJECTION: forcing a failure. [ 70.570798] name failslab, interval 1, probability 0, space 0, times 1 [ 70.584436] CPU: 0 PID: 7862 Comm: syz-executor755 Not tainted 4.19.36 #4 [ 70.592394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.602240] Call Trace: [ 70.605673] dump_stack+0x172/0x1f0 [ 70.609587] should_fail.cold+0xa/0x1b [ 70.613704] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 70.618965] ? lock_downgrade+0x810/0x810 [ 70.623318] ? ___might_sleep+0x163/0x280 [ 70.627729] __should_failslab+0x121/0x190 [ 70.632479] should_failslab+0x9/0x14 [ 70.636575] kmem_cache_alloc_node_trace+0x277/0x720 [ 70.641711] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 70.647417] ? find_next_bit+0x107/0x130 [ 70.651559] __kmalloc_node+0x3d/0x80 [ 70.655639] blk_mq_realloc_hw_ctxs+0x1e0/0x1010 [ 70.660560] blk_mq_update_nr_hw_queues+0x546/0xb70 [ 70.665659] ? blk_mq_init_queue+0xb0/0xb0 [ 70.669932] nbd_start_device+0x15e/0xbb0 [ 70.674115] nbd_ioctl+0x413/0xc60 [ 70.677819] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 70.683681] ? avc_has_extended_perms+0xa78/0x10f0 [ 70.688637] ? find_held_lock+0x35/0x130 [ 70.692913] ? nbd_add_socket+0x680/0x680 [ 70.697094] ? avc_ss_reset+0x190/0x190 [ 70.701419] ? kasan_check_read+0x11/0x20 [ 70.705966] ? nbd_add_socket+0x680/0x680 [ 70.710432] blkdev_ioctl+0xc4b/0x1ae0 [ 70.714447] ? blkpg_ioctl+0xa90/0xa90 [ 70.718421] ? proc_fail_nth_write+0x9d/0x1e0 [ 70.723154] ? proc_cwd_link+0x1d0/0x1d0 [ 70.727361] ? ___might_sleep+0x163/0x280 [ 70.731541] block_ioctl+0xee/0x130 [ 70.735324] ? blkdev_fallocate+0x410/0x410 [ 70.739742] do_vfs_ioctl+0xd6e/0x1390 [ 70.743742] ? selinux_file_ioctl+0x46f/0x5e0 [ 70.748523] ? selinux_file_ioctl+0x125/0x5e0 [ 70.753039] ? ioctl_preallocate+0x210/0x210 [ 70.757462] ? selinux_file_mprotect+0x620/0x620 [ 70.762305] ? super_setup_bdi_name+0x24b/0x260 [ 70.767043] ? vfs_write+0x160/0x560 [ 70.770884] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 70.776463] ? security_file_ioctl+0x93/0xc0 [ 70.781579] ksys_ioctl+0xab/0xd0 [ 70.785257] __x64_sys_ioctl+0x73/0xb0 [ 70.789634] do_syscall_64+0x103/0x610 [ 70.793547] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 70.798919] RIP: 0033:0x4453b9 [ 70.802237] Code: e8 cc ac 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db ce fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 70.823520] RSP: 002b:00007fffcbd05878 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 70.831633] RAX: ffffffffffffffda RBX: 00007fffcbd05880 RCX: 00000000004453b9 [ 70.839511] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000005 [ 70.846998] RBP: 0000000000000007 R08: 0000000000000001 R09: 0000000001d00032 [ 70.854555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000402720 [ 70.861942] R13: 00000000004027b0 R14: 0000000000000000 R15: 0000000000000000 [ 70.872173] BUG: unable to handle kernel NULL pointer dereference at 0000000000000118 [ 70.880839] PGD 9f964067 P4D 9f964067 PUD 8e173067 PMD 0 [ 70.886491] Oops: 0002 [#1] PREEMPT SMP KASAN [ 70.890991] CPU: 0 PID: 7862 Comm: syz-executor755 Not tainted 4.19.36 #4 [ 70.898150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.908105] RIP: 0010:blk_mq_map_swqueue+0x29e/0xa60 [ 70.914042] Code: 80 3c 18 00 0f 85 ef 06 00 00 44 89 e6 bf 3f 00 00 00 4d 8b 6d 00 e8 31 96 57 fe 41 83 fc 3f 0f 87 11 05 00 00 e8 a2 94 57 fe 4d 0f ab b5 18 01 00 00 49 8d bd 74 01 00 00 48 89 fa 48 c1 ea [ 70.933638] RSP: 0018:ffff88808aa178c0 EFLAGS: 00010293 [ 70.940344] RAX: ffff8880a08d2600 RBX: dffffc0000000000 RCX: ffffffff8313b05f [ 70.948820] RDX: 0000000000000000 RSI: ffffffff8313b06e RDI: 0000000000000005 [ 70.959698] RBP: ffff88808aa17930 R08: ffff8880a08d2600 R09: 0000000000000000 [ 70.967158] R10: ffffed1014861ff0 R11: ffff8880a430ff83 R12: 0000000000000001 [ 70.974454] R13: 0000000000000000 R14: 0000000000000001 R15: ffff8880a41c70c0 [ 70.981875] FS: 0000000001d0a940(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 70.990725] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 70.998301] CR2: 0000000000000118 CR3: 000000008f898000 CR4: 00000000001406f0 [ 71.009994] Call Trace: [ 71.012984] ? blk_mq_sysfs_unregister+0x1a7/0x210 [ 71.018110] blk_mq_update_nr_hw_queues+0x5ab/0xb70 [ 71.023265] ? blk_mq_init_queue+0xb0/0xb0 [ 71.027949] nbd_start_device+0x15e/0xbb0 [ 71.032723] nbd_ioctl+0x413/0xc60 [ 71.036816] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 71.042401] ? avc_has_extended_perms+0xa78/0x10f0 [ 71.047433] ? find_held_lock+0x35/0x130 [ 71.051849] ? nbd_add_socket+0x680/0x680 [ 71.056060] ? avc_ss_reset+0x190/0x190 [ 71.060202] ? kasan_check_read+0x11/0x20 [ 71.064988] ? nbd_add_socket+0x680/0x680 [ 71.069487] blkdev_ioctl+0xc4b/0x1ae0 [ 71.073519] ? blkpg_ioctl+0xa90/0xa90 [ 71.077644] ? proc_fail_nth_write+0x9d/0x1e0 [ 71.082161] ? proc_cwd_link+0x1d0/0x1d0 [ 71.086351] ? ___might_sleep+0x163/0x280 [ 71.090610] block_ioctl+0xee/0x130 [ 71.094250] ? blkdev_fallocate+0x410/0x410 [ 71.099068] do_vfs_ioctl+0xd6e/0x1390 [ 71.103116] ? selinux_file_ioctl+0x46f/0x5e0 [ 71.107734] ? selinux_file_ioctl+0x125/0x5e0 [ 71.112526] ? ioctl_preallocate+0x210/0x210 [ 71.117439] ? selinux_file_mprotect+0x620/0x620 [ 71.122267] ? super_setup_bdi_name+0x24b/0x260 [ 71.127300] ? vfs_write+0x160/0x560 [ 71.131375] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 71.137134] ? security_file_ioctl+0x93/0xc0 [ 71.142091] ksys_ioctl+0xab/0xd0 [ 71.146081] __x64_sys_ioctl+0x73/0xb0 [ 71.150399] do_syscall_64+0x103/0x610 [ 71.154801] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 71.160061] RIP: 0033:0x4453b9 [ 71.163304] Code: e8 cc ac 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db ce fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 71.182369] RSP: 002b:00007fffcbd05878 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 71.190224] RAX: ffffffffffffffda RBX: 00007fffcbd05880 RCX: 00000000004453b9 [ 71.197709] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000005 [ 71.205528] RBP: 0000000000000007 R08: 0000000000000001 R09: 0000000001d00032 [ 71.214638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000402720 [ 71.222280] R13: 00000000004027b0 R14: 0000000000000000 R15: 0000000000000000 [ 71.229810] Modules linked in: [ 71.233169] CR2: 0000000000000118 [ 71.237338] ---[ end trace e40a45507439d051 ]--- [ 71.242921] RIP: 0010:blk_mq_map_swqueue+0x29e/0xa60 [ 71.248587] Code: 80 3c 18 00 0f 85 ef 06 00 00 44 89 e6 bf 3f 00 00 00 4d 8b 6d 00 e8 31 96 57 fe 41 83 fc 3f 0f 87 11 05 00 00 e8 a2 94 57 fe 4d 0f ab b5 18 01 00 00 49 8d bd 74 01 00 00 48 89 fa 48 c1 ea [ 71.268690] RSP: 0018:ffff88808aa178c0 EFLAGS: 00010293 [ 71.274299] RAX: ffff8880a08d2600 RBX: dffffc0000000000 RCX: ffffffff8313b05f [ 71.282030] RDX: 0000000000000000 RSI: ffffffff8313b06e RDI: 0000000000000005 [ 71.289869] RBP: ffff88808aa17930 R08: ffff8880a08d2600 R09: 0000000000000000 [ 71.297269] R10: ffffed1014861ff0 R11: ffff8880a430ff83 R12: 0000000000000001 [ 71.304778] R13: 0000000000000000 R14: 0000000000000001 R15: ffff8880a41c70c0 [ 71.312459] FS: 0000000001d0a940(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 71.321349] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.327252] CR2: 0000000000000118 CR3: 000000008f898000 CR4: 00000000001406f0 [ 71.334627] Kernel panic - not syncing: Fatal exception [ 71.341552] Kernel Offset: disabled [ 71.345313] Rebooting in 86400 seconds..