[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 34.972047] audit: type=1800 audit(1538715915.876:25): pid=5666 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 34.991258] audit: type=1800 audit(1538715915.876:26): pid=5666 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 35.023948] audit: type=1800 audit(1538715915.876:27): pid=5666 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.27' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program syzkaller login: [ 45.468648] kasan: CONFIG_KASAN_INLINE enabled [ 45.483753] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 45.496554] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 45.502808] CPU: 1 PID: 5839 Comm: syz-executor733 Not tainted 4.19.0-rc6+ #267 [ 45.510250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 45.519619] RIP: 0010:memcmp+0x28/0x160 [ 45.523594] Code: 00 00 48 85 d2 0f 84 0a 01 00 00 48 b8 00 00 00 00 00 fc ff df 55 48 89 f9 48 89 e5 48 c1 e9 03 41 54 53 48 89 fb 48 83 ec 18 <0f> b6 04 01 48 89 f9 83 e1 07 38 c8 7f 08 84 c0 0f 85 98 00 00 00 [ 45.542494] RSP: 0018:ffff8801cdecef98 EFLAGS: 00010292 [ 45.547863] RAX: dffffc0000000000 RBX: c5b1e0c5fb1d7c00 RCX: 18b63c18bf63af80 [ 45.555133] RDX: 0000000000000002 RSI: ffffffff883ba540 RDI: c5b1e0c5fb1d7c00 [ 45.562396] RBP: ffff8801cdecefc0 R08: ffff8801d9062580 R09: 0000000000000000 [ 45.569656] R10: ffffed0039bd9e5a R11: 0000000000000000 R12: 0000000000000002 [ 45.576924] R13: ffffffff883ba540 R14: c5b168c7c90a6f50 R15: dffffc0000000000 [ 45.584198] FS: 0000000001e6a880(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 45.592435] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.598315] CR2: 00007ffdc3874404 CR3: 00000001bc224000 CR4: 00000000001406e0 [ 45.605587] Call Trace: [ 45.608185] ? select_task_rq_fair+0x34f0/0x34f0 [ 45.612963] strnstr+0x4b/0x70 [ 45.616163] __aa_lookupn_ns+0xc1/0x570 [ 45.620151] ? aa_find_ns+0x30/0x30 [ 45.623783] ? lock_acquire+0x1ed/0x520 [ 45.627762] ? __aa_lookupn_ns+0x570/0x570 [ 45.632003] ? __lru_cache_add+0x2ff/0x4e0 [ 45.636261] ? lock_release+0x970/0x970 [ 45.640247] ? mark_held_locks+0x130/0x130 [ 45.644493] ? trace_hardirqs_off+0xb8/0x310 [ 45.648907] ? do_raw_spin_lock+0xc1/0x200 [ 45.653153] aa_lookupn_ns+0x88/0x1e0 [ 45.656960] aa_fqlookupn_profile+0x1b9/0x1010 [ 45.661544] ? kasan_check_read+0x11/0x20 [ 45.665692] ? finish_task_switch+0x1f5/0x900 [ 45.670189] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 45.675652] ? aa_lookup_profile+0x30/0x30 [ 45.679893] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 45.685445] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 45.691087] ? refcount_inc_not_zero_checked+0x1e5/0x2f0 [ 45.696545] ? refcount_add_not_zero_checked+0x330/0x330 [ 45.701999] ? mark_held_locks+0x130/0x130 [ 45.706257] ? __switch_to_asm+0x34/0x70 [ 45.710332] ? __switch_to_asm+0x40/0x70 [ 45.714403] ? __switch_to_asm+0x34/0x70 [ 45.718473] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 45.724014] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 45.729562] fqlookupn_profile+0x80/0xc0 [ 45.733638] aa_label_strn_parse+0xa3a/0x1230 [ 45.738144] ? aa_label_printk+0x850/0x850 [ 45.742391] ? mem_cgroup_commit_charge+0x275/0x9d0 [ 45.747415] ? mem_cgroup_uncharge_swap+0x1a0/0x1a0 [ 45.752440] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 45.757984] ? refcount_inc_not_zero_checked+0x1e5/0x2f0 [ 45.763437] ? refcount_add_not_zero_checked+0x330/0x330 [ 45.768893] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 45.773912] ? bpf_prog_kallsyms_find+0xde/0x4a0 [ 45.778789] aa_label_parse+0x42/0x50 [ 45.782620] aa_change_profile+0x513/0x3260 [ 45.786951] ? lock_acquire+0x1ed/0x520 [ 45.790932] ? aa_change_hat+0x1890/0x1890 [ 45.795171] ? is_bpf_text_address+0xd3/0x170 [ 45.799677] ? __mutex_lock+0x85e/0x1700 [ 45.803747] ? proc_pid_attr_write+0x28a/0x540 [ 45.808345] ? mutex_trylock+0x2b0/0x2b0 [ 45.812406] ? save_stack+0xa9/0xd0 [ 45.816035] ? save_stack+0x43/0xd0 [ 45.819662] ? kasan_kmalloc+0xc7/0xe0 [ 45.823551] ? __kmalloc_track_caller+0x14a/0x750 [ 45.828394] ? memdup_user+0x2c/0xa0 [ 45.832113] ? proc_pid_attr_write+0x198/0x540 [ 45.836699] ? __vfs_write+0x119/0x9f0 [ 45.840589] ? vfs_write+0x1fc/0x560 [ 45.844307] ? ksys_write+0x101/0x260 [ 45.848112] ? __x64_sys_write+0x73/0xb0 [ 45.852179] ? do_syscall_64+0x1b9/0x820 [ 45.856262] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 45.861632] ? mark_held_locks+0x130/0x130 [ 45.865881] apparmor_setprocattr+0xa8b/0x1150 [ 45.870471] ? apparmor_task_kill+0xcb0/0xcb0 [ 45.874969] ? lock_downgrade+0x900/0x900 [ 45.879228] ? arch_local_save_flags+0x40/0x40 [ 45.883848] security_setprocattr+0x66/0xc0 [ 45.888184] proc_pid_attr_write+0x301/0x540 [ 45.893576] __vfs_write+0x119/0x9f0 [ 45.897304] ? proc_loginuid_write+0x4f0/0x4f0 [ 45.901893] ? kernel_read+0x120/0x120 [ 45.905788] ? lock_release+0x970/0x970 [ 45.909768] ? arch_local_save_flags+0x40/0x40 [ 45.914355] ? check_preemption_disabled+0x48/0x200 [ 45.919377] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 45.924920] ? check_preemption_disabled+0x48/0x200 [ 45.929942] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 45.935485] ? __sb_start_write+0x1b2/0x370 [ 45.939814] vfs_write+0x1fc/0x560 [ 45.943364] ksys_write+0x101/0x260 [ 45.946997] ? __ia32_sys_read+0xb0/0xb0 [ 45.951067] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 45.956526] __x64_sys_write+0x73/0xb0 [ 45.960425] do_syscall_64+0x1b9/0x820 [ 45.964321] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 45.969686] ? syscall_return_slowpath+0x5e0/0x5e0 [ 45.974618] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 45.979465] ? trace_hardirqs_on_caller+0x310/0x310 [ 45.984482] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 45.989502] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 45.995046] ? prepare_exit_to_usermode+0x291/0x3b0 [ 46.000066] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 46.004917] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 46.010108] RIP: 0033:0x440e59 [ 46.013306] Code: e8 ac e8 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 0b 0a fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 46.032497] RSP: 002b:00007ffdc38743f8 EFLAGS: 00000213 ORIG_RAX: 0000000000000001 [ 46.040223] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000440e59 [ 46.047509] RDX: 0000000000000008 RSI: 0000000020000000 RDI: 0000000000000003 [ 46.054777] RBP: 0000000000000000 R08: 00000000004002c8 R09: 00000000004002c8 [ 46.062043] R10: 0000000001e6a880 R11: 0000000000000213 R12: 000000000000b172 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 46.069311] R13: 0000000000401d80 R14: 0000000000000000 R15: 0000000000000000 [ 46.076587] Modules linked in: executing program executing program executing program executing program executing program executing program executing program executing program [ 46.119569] kauditd_printk_skb: 3 callbacks suppressed [ 46.119582] audit: type=1400 audit(1538715927.026:31): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name="&&" pid=5873 comm="syz-executor733" [ 46.122497] ---[ end trace 69cf4b00d0e8e2bf ]--- [ 46.152411] RIP: 0010:memcmp+0x28/0x160 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 46.159895] Code: 00 00 48 85 d2 0f 84 0a 01 00 00 48 b8 00 00 00 00 00 fc ff df 55 48 89 f9 48 89 e5 48 c1 e9 03 41 54 53 48 89 fb 48 83 ec 18 <0f> b6 04 01 48 89 f9 83 e1 07 38 c8 7f 08 84 c0 0f 85 98 00 00 00 [ 46.201312] RSP: 0018:ffff8801cdecef98 EFLAGS: 00010292 [ 46.210675] kasan: CONFIG_KASAN_INLINE enabled executing program executing program executing program executing program [ 46.220871] RAX: dffffc0000000000 RBX: c5b1e0c5fb1d7c00 RCX: 18b63c18bf63af80 [ 46.222002] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 46.238205] RDX: 0000000000000002 RSI: ffffffff883ba540 RDI: c5b1e0c5fb1d7c00 [ 46.244379] general protection fault: 0000 [#2] PREEMPT SMP KASAN [ 46.251738] CPU: 1 PID: 5894 Comm: syz-executor733 Tainted: G D 4.19.0-rc6+ #267 [ 46.255745] RBP: ffff8801cdecefc0 R08: ffff8801d9062580 R09: 0000000000000000 [ 46.260566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 46.260587] RIP: 0010:memcmp+0x28/0x160 [ 46.260601] Code: 00 00 48 85 d2 0f 84 0a 01 00 00 48 b8 00 00 00 00 00 fc ff df 55 48 89 f9 48 89 e5 48 c1 e9 03 41 54 53 48 89 fb 48 83 ec 18 <0f> b6 04 01 48 89 f9 83 e1 07 38 c8 7f 08 84 c0 0f 85 98 00 00 00 [ 46.260608] RSP: 0018:ffff8801cebb6f98 EFLAGS: 00010292 [ 46.281193] R10: ffffed0039bd9e5a R11: 0000000000000000 R12: 0000000000000002 [ 46.281219] R13: ffffffff883ba540 R14: c5b168c7c90a6f50 R15: dffffc0000000000 [ 46.300100] RAX: dffffc0000000000 RBX: dffffc0000000000 RCX: 1bffff8000000000 [ 46.300108] RDX: 0000000000000002 RSI: ffffffff883ba540 RDI: dffffc0000000000 [ 46.300116] RBP: ffff8801cebb6fc0 R08: ffff8801bc2b8280 R09: 0000000000000000 [ 46.300124] R10: ffffed0039d76e5a R11: 0000000000000000 R12: 0000000000000002 [ 46.300131] R13: ffffffff883ba540 R14: dfff8401cebb7350 R15: dffffc0000000000 [ 46.300143] FS: 0000000001e6a880(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 46.300157] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 46.325381] FS: 0000000001e6a880(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 46.327316] CR2: 0000000000414ad0 CR3: 00000001d7124000 CR4: 00000000001406e0 [ 46.327326] Call Trace: [ 46.327351] strnstr+0x4b/0x70 [ 46.327372] __aa_lookupn_ns+0xc1/0x570 [ 46.336920] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 46.341908] ? aa_find_ns+0x30/0x30 [ 46.341925] ? lock_acquire+0x1ed/0x520 [ 46.341943] ? __aa_lookupn_ns+0x570/0x570 [ 46.362502] CR2: 0000000000414ad0 CR3: 00000001bc224000 CR4: 00000000001406f0 [ 46.364688] ? __lru_cache_add+0x2ff/0x4e0 [ 46.364705] ? lock_release+0x970/0x970 [ 46.364722] ? mark_held_locks+0x130/0x130 [ 46.379524] Kernel panic - not syncing: Fatal exception [ 46.386082] ? __account_cfs_rq_runtime+0x790/0x790 [ 46.443510] aa_lookupn_ns+0x88/0x1e0 [ 46.447326] aa_fqlookupn_profile+0x1b9/0x1010 [ 46.451902] ? lru_cache_add+0x417/0xa50 [ 46.455992] ? lru_cache_add_file+0x20/0x20 [ 46.460313] ? aa_lookup_profile+0x30/0x30 [ 46.464551] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 46.470088] ? refcount_inc_not_zero_checked+0x1e5/0x2f0 [ 46.475537] ? refcount_add_not_zero_checked+0x330/0x330 [ 46.480987] ? mark_held_locks+0x130/0x130 [ 46.485230] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 46.490771] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 46.496310] fqlookupn_profile+0x80/0xc0 [ 46.500372] aa_label_strn_parse+0xa3a/0x1230 [ 46.504885] ? aa_label_printk+0x850/0x850 [ 46.509136] ? mem_cgroup_commit_charge+0x275/0x9d0 [ 46.514149] ? mem_cgroup_uncharge_swap+0x1a0/0x1a0 [ 46.519162] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 46.524723] ? refcount_inc_not_zero_checked+0x1e5/0x2f0 [ 46.530172] ? refcount_add_not_zero_checked+0x330/0x330 [ 46.535621] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 46.540641] ? bpf_prog_kallsyms_find+0xde/0x4a0 [ 46.545401] aa_label_parse+0x42/0x50 [ 46.549220] aa_change_profile+0x513/0x3260 [ 46.553551] ? lock_acquire+0x1ed/0x520 [ 46.557526] ? aa_change_hat+0x1890/0x1890 [ 46.561760] ? is_bpf_text_address+0xd3/0x170 [ 46.566264] ? __mutex_lock+0x85e/0x1700 [ 46.570328] ? proc_pid_attr_write+0x28a/0x540 [ 46.574917] ? mutex_trylock+0x2b0/0x2b0 [ 46.578986] ? save_stack+0xa9/0xd0 [ 46.582624] ? save_stack+0x43/0xd0 [ 46.586245] ? kasan_kmalloc+0xc7/0xe0 [ 46.590135] ? __kmalloc_track_caller+0x14a/0x750 [ 46.595002] ? memdup_user+0x2c/0xa0 [ 46.598709] ? proc_pid_attr_write+0x198/0x540 [ 46.603289] ? __vfs_write+0x119/0x9f0 [ 46.607171] ? vfs_write+0x1fc/0x560 [ 46.610880] ? ksys_write+0x101/0x260 [ 46.614675] ? __x64_sys_write+0x73/0xb0 [ 46.618733] ? do_syscall_64+0x1b9/0x820 [ 46.622802] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 46.628201] ? mark_held_locks+0x130/0x130 [ 46.632459] apparmor_setprocattr+0xa8b/0x1150 [ 46.637052] ? apparmor_task_kill+0xcb0/0xcb0 [ 46.641545] ? lock_downgrade+0x900/0x900 [ 46.645692] ? arch_local_save_flags+0x40/0x40 [ 46.650287] security_setprocattr+0x66/0xc0 [ 46.654605] proc_pid_attr_write+0x301/0x540 [ 46.659016] __vfs_write+0x119/0x9f0 [ 46.662763] ? proc_loginuid_write+0x4f0/0x4f0 [ 46.667343] ? kernel_read+0x120/0x120 [ 46.671235] ? lock_release+0x970/0x970 [ 46.675230] ? arch_local_save_flags+0x40/0x40 [ 46.679826] ? check_preemption_disabled+0x48/0x200 [ 46.684858] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 46.690407] ? check_preemption_disabled+0x48/0x200 [ 46.695436] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 46.700973] ? __sb_start_write+0x1b2/0x370 [ 46.705296] vfs_write+0x1fc/0x560 [ 46.708837] ksys_write+0x101/0x260 [ 46.712476] ? __ia32_sys_read+0xb0/0xb0 [ 46.716537] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 46.721988] __x64_sys_write+0x73/0xb0 [ 46.725878] do_syscall_64+0x1b9/0x820 [ 46.729766] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 46.735129] ? syscall_return_slowpath+0x5e0/0x5e0 [ 46.740058] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 46.744897] ? trace_hardirqs_on_caller+0x310/0x310 [ 46.749909] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 46.754943] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 46.760487] ? prepare_exit_to_usermode+0x291/0x3b0 [ 46.765507] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 46.770355] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 46.775541] RIP: 0033:0x440e59 [ 46.778735] Code: e8 ac e8 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 0b 0a fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 46.797630] RSP: 002b:00007ffdc38743f8 EFLAGS: 00000213 ORIG_RAX: 0000000000000001 [ 46.805345] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000440e59 [ 46.812606] RDX: 0000000000000008 RSI: 0000000020000000 RDI: 0000000000000003 [ 46.819880] RBP: 0000000000000000 R08: 00000000004002c8 R09: 00000000004002c8 [ 46.827151] R10: 0000000001e6a880 R11: 0000000000000213 R12: 000000000000b45a [ 46.834420] R13: 0000000000401d80 R14: 0000000000000000 R15: 0000000000000000 [ 46.841699] Modules linked in: [ 46.845864] Kernel Offset: disabled [ 46.849492] Rebooting in 86400 seconds..