[ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.89' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 42.117402] audit: type=1400 audit(1601923137.963:8): avc: denied { execmem } for pid=6486 comm="syz-executor764" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 42.146651] ================================================================================ [ 42.155321] UBSAN: Undefined behaviour in arch/x86/kernel/uprobes.c:276:56 [ 42.162436] index 4 is out of range for type 'insn_byte_t [4]' [ 42.168409] CPU: 1 PID: 6486 Comm: syz-executor764 Not tainted 4.19.149-syzkaller #0 [ 42.176296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 42.185655] Call Trace: [ 42.188243] dump_stack+0x22c/0x33e [ 42.191877] ubsan_epilogue+0xe/0x3a [ 42.195580] __ubsan_handle_out_of_bounds.cold+0x63/0x6f [ 42.201033] arch_uprobe_analyze_insn+0x9d8/0xaa0 [ 42.205876] ? default_abort_op+0x110/0x110 [ 42.210181] ? do_read_cache_page+0xfe/0x11d0 [ 42.214710] ? copy_insn+0x3f3/0x4f0 [ 42.218432] uprobe_mmap+0x8c2/0xa70 [ 42.222133] ? uprobe_apply+0x160/0x160 [ 42.226233] mmap_region+0x552/0x1510 [ 42.230020] ? vm_brk+0x20/0x20 [ 42.233298] ? security_mmap_addr+0x73/0x90 [ 42.237605] ? get_unmapped_area+0x296/0x3b0 [ 42.241997] do_mmap+0x8e8/0x1080 [ 42.245451] vm_mmap_pgoff+0x197/0x200 [ 42.249351] ? vma_is_stack_for_current+0xc0/0xc0 [ 42.254191] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 42.258428] ? perf_event_set_output+0x4c0/0x4c0 [ 42.263180] ksys_mmap_pgoff+0x2d1/0x660 [ 42.267255] ? find_mergeable_anon_vma+0x260/0x260 [ 42.272167] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 42.277536] ? trace_hardirqs_off_caller+0x6e/0x210 [ 42.282562] ? do_syscall_64+0x21/0x670 [ 42.286535] do_syscall_64+0xf9/0x670 [ 42.290327] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 42.295508] RIP: 0033:0x440379 [ 42.298682] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 42.317582] RSP: 002b:00007ffe8214d558 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 42.325272] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440379 [ 42.332523] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020007000 [ 42.340565] RBP: 00000000006ca018 R08: 0000000000000003 R09: 0000000000000000 [ 42.347825] R10: 0000000000000412 R11: 0000000000000246 R12: 0000000000401b80 [ 42.355076] R13: 0000000000401c10 R14: 0000000000000000 R15: 0000000000000000 [ 42.362346] ========================================================