[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 82.493834][ T27] audit: type=1800 audit(1578449969.937:25): pid=9420 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 82.520476][ T27] audit: type=1800 audit(1578449969.937:26): pid=9420 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 82.570139][ T27] audit: type=1800 audit(1578449969.937:27): pid=9420 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.58' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 100.521037][ T9573] ================================================================== [ 100.529365][ T9573] BUG: KASAN: null-ptr-deref in video_get_user+0x67f/0x890 [ 100.536630][ T9573] Write of size 512 at addr 0000000000000000 by task syz-executor806/9573 [ 100.545104][ T9573] [ 100.547431][ T9573] CPU: 0 PID: 9573 Comm: syz-executor806 Not tainted 5.5.0-rc5-next-20200107-syzkaller #0 [ 100.557312][ T9573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 100.567359][ T9573] Call Trace: [ 100.570634][ T9573] dump_stack+0x197/0x210 [ 100.574983][ T9573] ? video_get_user+0x67f/0x890 [ 100.579919][ T9573] ? video_get_user+0x67f/0x890 [ 100.584765][ T9573] __kasan_report.cold+0x5/0x32 [ 100.589610][ T9573] ? video_get_user+0x67f/0x890 [ 100.594457][ T9573] kasan_report+0x12/0x20 [ 100.598788][ T9573] check_memory_region+0x134/0x1a0 [ 100.603899][ T9573] memset+0x24/0x40 [ 100.607712][ T9573] video_get_user+0x67f/0x890 [ 100.612390][ T9573] ? v4l_dbg_g_chip_info+0x10/0x10 [ 100.617488][ T9573] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 100.623581][ T9573] video_usercopy+0x21f/0x10b0 [ 100.628349][ T9573] ? v4l_s_fmt+0xab0/0xab0 [ 100.632759][ T9573] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 100.638643][ T9573] ? v4l_enumstd+0x70/0x70 [ 100.643054][ T9573] ? ioctl_file_clone+0x180/0x180 [ 100.648078][ T9573] ? file_open_root+0x5f0/0x5f0 [ 100.652926][ T9573] ? __kasan_check_write+0x14/0x20 [ 100.658167][ T9573] ? up_read+0x1cd/0x810 [ 100.662402][ T9573] video_ioctl2+0x2d/0x35 [ 100.666847][ T9573] v4l2_ioctl+0x1ac/0x230 [ 100.671253][ T9573] ? v4l2_prio_init+0x30/0x30 [ 100.675931][ T9573] ksys_ioctl+0x123/0x180 [ 100.680249][ T9573] __x64_sys_ioctl+0x73/0xb0 [ 100.684853][ T9573] do_syscall_64+0xfa/0x790 [ 100.689470][ T9573] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 100.695358][ T9573] RIP: 0033:0x440189 [ 100.699243][ T9573] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 100.719001][ T9573] RSP: 002b:00007ffffba225e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 100.727451][ T9573] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440189 [ 100.735464][ T9573] RDX: 0000000000000000 RSI: 0000001002008914 RDI: 0000000000000003 [ 100.743531][ T9573] RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8 [ 100.751541][ T9573] R10: 00000000004002c8 R11: 0000000000000246 R12: 0000000000401a10 [ 100.759514][ T9573] R13: 0000000000401aa0 R14: 0000000000000000 R15: 0000000000000000 [ 100.767500][ T9573] ================================================================== [ 100.775590][ T9573] Disabling lock debugging due to kernel taint [ 100.781892][ T9573] Kernel panic - not syncing: panic_on_warn set ... [ 100.788484][ T9573] CPU: 0 PID: 9573 Comm: syz-executor806 Tainted: G B 5.5.0-rc5-next-20200107-syzkaller #0 [ 100.799743][ T9573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 100.809874][ T9573] Call Trace: [ 100.813144][ T9573] dump_stack+0x197/0x210 [ 100.817556][ T9573] panic+0x2e3/0x75c [ 100.821440][ T9573] ? add_taint.cold+0x16/0x16 [ 100.826101][ T9573] ? video_get_user+0x67f/0x890 [ 100.831314][ T9573] ? preempt_schedule+0x4b/0x60 [ 100.836153][ T9573] ? ___preempt_schedule+0x16/0x18 [ 100.841246][ T9573] ? trace_hardirqs_on+0x5e/0x240 [ 100.846320][ T9573] ? video_get_user+0x67f/0x890 [ 100.851172][ T9573] end_report+0x47/0x4f [ 100.855441][ T9573] ? video_get_user+0x67f/0x890 [ 100.860728][ T9573] __kasan_report.cold+0xe/0x32 [ 100.865616][ T9573] ? video_get_user+0x67f/0x890 [ 100.870462][ T9573] kasan_report+0x12/0x20 [ 100.874885][ T9573] check_memory_region+0x134/0x1a0 [ 100.879989][ T9573] memset+0x24/0x40 [ 100.883777][ T9573] video_get_user+0x67f/0x890 [ 100.888586][ T9573] ? v4l_dbg_g_chip_info+0x10/0x10 [ 100.893802][ T9573] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 100.899620][ T9573] video_usercopy+0x21f/0x10b0 [ 100.904382][ T9573] ? v4l_s_fmt+0xab0/0xab0 [ 100.908970][ T9573] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 100.915069][ T9573] ? v4l_enumstd+0x70/0x70 [ 100.919498][ T9573] ? ioctl_file_clone+0x180/0x180 [ 100.924557][ T9573] ? file_open_root+0x5f0/0x5f0 [ 100.929412][ T9573] ? __kasan_check_write+0x14/0x20 [ 100.934512][ T9573] ? up_read+0x1cd/0x810 [ 100.938814][ T9573] video_ioctl2+0x2d/0x35 [ 100.943154][ T9573] v4l2_ioctl+0x1ac/0x230 [ 100.947482][ T9573] ? v4l2_prio_init+0x30/0x30 [ 100.952143][ T9573] ksys_ioctl+0x123/0x180 [ 100.956453][ T9573] __x64_sys_ioctl+0x73/0xb0 [ 100.961030][ T9573] do_syscall_64+0xfa/0x790 [ 100.965513][ T9573] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 100.971379][ T9573] RIP: 0033:0x440189 [ 100.975260][ T9573] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 100.994928][ T9573] RSP: 002b:00007ffffba225e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 101.003330][ T9573] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440189 [ 101.011306][ T9573] RDX: 0000000000000000 RSI: 0000001002008914 RDI: 0000000000000003 [ 101.019265][ T9573] RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8 [ 101.027218][ T9573] R10: 00000000004002c8 R11: 0000000000000246 R12: 0000000000401a10 [ 101.035171][ T9573] R13: 0000000000401aa0 R14: 0000000000000000 R15: 0000000000000000 [ 101.044504][ T9573] Kernel Offset: disabled [ 101.048827][ T9573] Rebooting in 86400 seconds..