Starting mcstransd: [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [ 70.793049][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 70.793060][ T26] audit: type=1800 audit(1575442462.230:39): pid=9411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 70.821849][ T26] audit: type=1800 audit(1575442462.230:40): pid=9411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 74.320711][ T26] audit: type=1400 audit(1575442465.760:41): avc: denied { map } for pid=9586 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.10.1' (ECDSA) to the list of known hosts. executing program [ 80.831968][ T26] audit: type=1400 audit(1575442472.270:42): avc: denied { map } for pid=9598 comm="syz-executor615" path="/root/syz-executor615351197" dev="sda1" ino=16484 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 80.835281][ T9598] ================================================================== [ 80.867215][ T9598] BUG: KASAN: vmalloc-out-of-bounds in kvm_dev_ioctl_get_cpuid+0xad7/0xb0b [ 80.875796][ T9598] Write of size 4 at addr ffffc90000d36050 by task syz-executor615/9598 [ 80.884137][ T9598] [ 80.886450][ T9598] CPU: 0 PID: 9598 Comm: syz-executor615 Not tainted 5.4.0-syzkaller #0 [ 80.894759][ T9598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 80.904807][ T9598] Call Trace: [ 80.908084][ T9598] dump_stack+0x197/0x210 [ 80.912400][ T9598] ? kvm_dev_ioctl_get_cpuid+0xad7/0xb0b [ 80.918013][ T9598] print_address_description.constprop.0.cold+0x5/0x30b [ 80.925087][ T9598] ? kvm_dev_ioctl_get_cpuid+0xad7/0xb0b [ 80.930836][ T9598] ? kvm_dev_ioctl_get_cpuid+0xad7/0xb0b [ 80.936456][ T9598] __kasan_report.cold+0x1b/0x41 [ 80.941397][ T9598] ? kvm_dev_ioctl_get_cpuid+0xe1/0xb0b [ 80.946949][ T9598] ? kvm_dev_ioctl_get_cpuid+0xad7/0xb0b [ 80.952579][ T9598] kasan_report+0x12/0x20 [ 80.956917][ T9598] __asan_report_store4_noabort+0x17/0x20 [ 80.962639][ T9598] kvm_dev_ioctl_get_cpuid+0xad7/0xb0b [ 80.968088][ T9598] ? kvm_vcpu_ioctl_get_cpuid2+0x160/0x160 [ 80.973901][ T9598] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 80.980124][ T9598] ? _copy_from_user+0x12c/0x1a0 [ 80.985053][ T9598] kvm_arch_dev_ioctl+0x300/0x4b0 [ 80.990146][ T9598] ? kvm_vm_ioctl_check_extension+0x3d0/0x3d0 [ 80.996232][ T9598] ? tomoyo_path_number_perm+0x454/0x520 [ 81.001861][ T9598] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 81.008078][ T9598] ? tomoyo_path_number_perm+0x25e/0x520 [ 81.013693][ T9598] kvm_dev_ioctl+0x127/0x17d0 [ 81.018352][ T9598] ? kvm_put_kvm+0xcc0/0xcc0 [ 81.022924][ T9598] ? ___might_sleep+0x163/0x2c0 [ 81.027771][ T9598] ? kvm_put_kvm+0xcc0/0xcc0 [ 81.032344][ T9598] do_vfs_ioctl+0x977/0x14e0 [ 81.036916][ T9598] ? compat_ioctl_preallocate+0x220/0x220 [ 81.042612][ T9598] ? selinux_file_mprotect+0x620/0x620 [ 81.048185][ T9598] ? perf_trace_initcall_level+0x370/0x420 [ 81.054001][ T9598] ? do_sys_open+0x31d/0x5d0 [ 81.058583][ T9598] ? tomoyo_file_ioctl+0x23/0x30 [ 81.063505][ T9598] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 81.069729][ T9598] ? security_file_ioctl+0x8d/0xc0 [ 81.074841][ T9598] ksys_ioctl+0xab/0xd0 [ 81.078988][ T9598] __x64_sys_ioctl+0x73/0xb0 [ 81.083557][ T9598] do_syscall_64+0xfa/0x790 [ 81.088043][ T9598] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 81.093914][ T9598] RIP: 0033:0x440199 [ 81.097848][ T9598] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 81.117601][ T9598] RSP: 002b:00007ffc1043aa48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 81.125998][ T9598] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440199 [ 81.133959][ T9598] RDX: 0000000020000000 RSI: 00000000c008ae09 RDI: 0000000000000003 [ 81.141913][ T9598] RBP: 00000000006ca018 R08: 0000000000000000 R09: 00000000004002c8 [ 81.149861][ T9598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000401a20 [ 81.157828][ T9598] R13: 0000000000401ab0 R14: 0000000000000000 R15: 0000000000000000 [ 81.165790][ T9598] [ 81.168092][ T9598] [ 81.170413][ T9598] Memory state around the buggy address: [ 81.176113][ T9598] ffffc90000d35f00: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 81.184299][ T9598] ffffc90000d35f80: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 81.192359][ T9598] >ffffc90000d36000: 00 00 00 00 00 00 00 00 00 00 f9 f9 f9 f9 f9 f9 [ 81.200579][ T9598] ^ [ 81.207245][ T9598] ffffc90000d36080: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 81.215511][ T9598] ffffc90000d36100: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 81.223571][ T9598] ================================================================== [ 81.231715][ T9598] Disabling lock debugging due to kernel taint [ 81.238238][ T9598] Kernel panic - not syncing: panic_on_warn set ... [ 81.244836][ T9598] CPU: 0 PID: 9598 Comm: syz-executor615 Tainted: G B 5.4.0-syzkaller #0 [ 81.254522][ T9598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 81.264553][ T9598] Call Trace: [ 81.267823][ T9598] dump_stack+0x197/0x210 [ 81.272131][ T9598] panic+0x2e3/0x75c [ 81.276000][ T9598] ? add_taint.cold+0x16/0x16 [ 81.280657][ T9598] ? kvm_dev_ioctl_get_cpuid+0xad7/0xb0b [ 81.286264][ T9598] ? preempt_schedule+0x4b/0x60 [ 81.291112][ T9598] ? ___preempt_schedule+0x16/0x18 [ 81.296200][ T9598] ? trace_hardirqs_on+0x5e/0x240 [ 81.301220][ T9598] ? kvm_dev_ioctl_get_cpuid+0xad7/0xb0b [ 81.306830][ T9598] end_report+0x47/0x4f [ 81.311072][ T9598] ? kvm_dev_ioctl_get_cpuid+0xad7/0xb0b [ 81.316679][ T9598] __kasan_report.cold+0xe/0x41 [ 81.321510][ T9598] ? kvm_dev_ioctl_get_cpuid+0xe1/0xb0b [ 81.327149][ T9598] ? kvm_dev_ioctl_get_cpuid+0xad7/0xb0b [ 81.332824][ T9598] kasan_report+0x12/0x20 [ 81.337153][ T9598] __asan_report_store4_noabort+0x17/0x20 [ 81.342850][ T9598] kvm_dev_ioctl_get_cpuid+0xad7/0xb0b [ 81.348305][ T9598] ? kvm_vcpu_ioctl_get_cpuid2+0x160/0x160 [ 81.354106][ T9598] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 81.360331][ T9598] ? _copy_from_user+0x12c/0x1a0 [ 81.365260][ T9598] kvm_arch_dev_ioctl+0x300/0x4b0 [ 81.370264][ T9598] ? kvm_vm_ioctl_check_extension+0x3d0/0x3d0 [ 81.377002][ T9598] ? tomoyo_path_number_perm+0x454/0x520 [ 81.382624][ T9598] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 81.388866][ T9598] ? tomoyo_path_number_perm+0x25e/0x520 [ 81.394481][ T9598] kvm_dev_ioctl+0x127/0x17d0 [ 81.399157][ T9598] ? kvm_put_kvm+0xcc0/0xcc0 [ 81.403730][ T9598] ? ___might_sleep+0x163/0x2c0 [ 81.408563][ T9598] ? kvm_put_kvm+0xcc0/0xcc0 [ 81.413131][ T9598] do_vfs_ioctl+0x977/0x14e0 [ 81.417699][ T9598] ? compat_ioctl_preallocate+0x220/0x220 [ 81.423419][ T9598] ? selinux_file_mprotect+0x620/0x620 [ 81.428950][ T9598] ? perf_trace_initcall_level+0x370/0x420 [ 81.434746][ T9598] ? do_sys_open+0x31d/0x5d0 [ 81.439330][ T9598] ? tomoyo_file_ioctl+0x23/0x30 [ 81.444272][ T9598] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 81.450510][ T9598] ? security_file_ioctl+0x8d/0xc0 [ 81.455614][ T9598] ksys_ioctl+0xab/0xd0 [ 81.459761][ T9598] __x64_sys_ioctl+0x73/0xb0 [ 81.464331][ T9598] do_syscall_64+0xfa/0x790 [ 81.468836][ T9598] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 81.474704][ T9598] RIP: 0033:0x440199 [ 81.478592][ T9598] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 81.498172][ T9598] RSP: 002b:00007ffc1043aa48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 81.506581][ T9598] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440199 [ 81.514563][ T9598] RDX: 0000000020000000 RSI: 00000000c008ae09 RDI: 0000000000000003 [ 81.523749][ T9598] RBP: 00000000006ca018 R08: 0000000000000000 R09: 00000000004002c8 [ 81.531700][ T9598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000401a20 [ 81.539647][ T9598] R13: 0000000000401ab0 R14: 0000000000000000 R15: 0000000000000000 [ 81.549232][ T9598] Kernel Offset: disabled [ 81.553565][ T9598] Rebooting in 86400 seconds..