[ 38.068650] audit: type=1800 audit(1576385118.888:32): pid=7521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2450 res=0 Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 38.787072] audit: type=1800 audit(1576385119.698:33): pid=7521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.180' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 47.137484] kauditd_printk_skb: 2 callbacks suppressed [ 47.137500] audit: type=1400 audit(1576385128.048:36): avc: denied { map } for pid=7707 comm="syz-executor305" path="/root/syz-executor305741632" dev="sda1" ino=16483 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 47.237118] FAULT_INJECTION: forcing a failure. [ 47.237118] name failslab, interval 1, probability 0, space 0, times 1 [ 47.248465] CPU: 0 PID: 7708 Comm: syz-executor305 Not tainted 4.19.89-syzkaller #0 [ 47.256260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 47.265612] Call Trace: [ 47.268212] dump_stack+0x197/0x210 [ 47.271836] should_fail.cold+0xa/0x1b [ 47.275758] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 47.280857] __should_failslab+0x121/0x190 [ 47.285081] should_failslab+0x9/0x14 [ 47.288878] kmem_cache_alloc_node_trace+0x274/0x720 [ 47.293972] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 47.299493] ? find_next_bit+0x107/0x130 [ 47.303544] __kmalloc_node+0x3d/0x80 [ 47.307331] blk_mq_realloc_hw_ctxs+0x1e0/0x1000 [ 47.312080] blk_mq_update_nr_hw_queues+0x546/0xb70 [ 47.317085] ? blk_mq_init_queue+0xb0/0xb0 [ 47.321356] nbd_start_device+0x1f7/0xd00 [ 47.325496] nbd_ioctl+0x412/0xcb0 [ 47.329035] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 47.334564] ? avc_has_extended_perms+0xa78/0x10f0 [ 47.339488] ? nbd_add_socket+0x690/0x690 [ 47.343626] ? avc_ss_reset+0x190/0x190 [ 47.347654] ? kasan_check_read+0x11/0x20 [ 47.351802] ? nbd_add_socket+0x690/0x690 [ 47.355952] blkdev_ioctl+0xc38/0x1ab6 [ 47.359835] ? blkpg_ioctl+0xa90/0xa90 [ 47.363746] ? proc_cwd_link+0x1d0/0x1d0 [ 47.367805] block_ioctl+0xee/0x130 [ 47.371424] ? blkdev_fallocate+0x410/0x410 [ 47.375751] do_vfs_ioctl+0xd5f/0x1380 [ 47.379648] ? selinux_file_ioctl+0x46f/0x5e0 [ 47.384152] ? selinux_file_ioctl+0x125/0x5e0 [ 47.388697] ? ioctl_preallocate+0x210/0x210 [ 47.393106] ? selinux_file_mprotect+0x620/0x620 [ 47.397850] ? __sb_end_write+0xd9/0x110 [ 47.401905] ? vfs_write+0x160/0x560 [ 47.405609] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 47.411141] ? security_file_ioctl+0x8d/0xc0 [ 47.415539] ksys_ioctl+0xab/0xd0 [ 47.419032] __x64_sys_ioctl+0x73/0xb0 [ 47.423316] do_syscall_64+0xfd/0x620 [ 47.427156] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 47.432372] RIP: 0033:0x445379 [ 47.435553] Code: e8 cc ac 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db ce fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 47.455057] RSP: 002b:00007ffe34005398 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 47.462823] RAX: ffffffffffffffda RBX: 00007ffe340053a0 RCX: 0000000000445379 [ 47.470084] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 47.477342] RBP: 0000000000000007 R08: 0000000000000002 R09: 0000000001003031 [ 47.484605] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000004026e0 [ 47.491868] R13: 0000000000402770 R14: 0000000000000000 R15: 0000000000000000 [ 47.501046] BUG: unable to handle kernel NULL pointer dereference at 0000000000000118 [ 47.509009] PGD 95387067 P4D 95387067 PUD 94351067 PMD 0 [ 47.514538] Oops: 0002 [#1] PREEMPT SMP KASAN [ 47.519021] CPU: 0 PID: 7708 Comm: syz-executor305 Not tainted 4.19.89-syzkaller #0 [ 47.526877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 47.536255] RIP: 0010:blk_mq_map_swqueue+0x29e/0xa60 [ 47.541361] Code: 80 3c 18 00 0f 85 e9 06 00 00 44 89 e6 bf 3f 00 00 00 4d 8b 6d 00 e8 c1 0b 1a fe 41 83 fc 3f 0f 87 17 05 00 00 e8 32 0a 1a fe 4d 0f ab b5 18 01 00 00 49 8d bd 74 01 00 00 48 89 fa 48 c1 ea [ 47.560249] RSP: 0018:ffff88808fb1f8b8 EFLAGS: 00010293 [ 47.565599] RAX: ffff888096e340c0 RBX: dffffc0000000000 RCX: ffffffff8351391f [ 47.572852] RDX: 0000000000000000 RSI: ffffffff8351392e RDI: 0000000000000005 [ 47.580105] RBP: ffff88808fb1f928 R08: ffff888096e340c0 R09: 0000000000000000 [ 47.587357] R10: ffffed1012573ff0 R11: ffff888092b9ff83 R12: 0000000000000001 [ 47.594661] R13: 0000000000000000 R14: 0000000000000001 R15: ffff8880a3cc50c0 [ 47.601918] FS: 0000000001902940(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 47.610137] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 47.616003] CR2: 0000000000000118 CR3: 000000009b0f5000 CR4: 00000000001406f0 [ 47.623258] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 47.630513] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 47.637764] Call Trace: [ 47.640339] ? blk_mq_sysfs_unregister+0x197/0x210 [ 47.645253] blk_mq_update_nr_hw_queues+0x5ab/0xb70 [ 47.650265] ? blk_mq_init_queue+0xb0/0xb0 [ 47.654487] nbd_start_device+0x1f7/0xd00 [ 47.658632] nbd_ioctl+0x412/0xcb0 [ 47.662154] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 47.667674] ? avc_has_extended_perms+0xa78/0x10f0 [ 47.672606] ? nbd_add_socket+0x690/0x690 [ 47.676745] ? avc_ss_reset+0x190/0x190 [ 47.680707] ? kasan_check_read+0x11/0x20 [ 47.684835] ? nbd_add_socket+0x690/0x690 [ 47.688968] blkdev_ioctl+0xc38/0x1ab6 [ 47.692839] ? blkpg_ioctl+0xa90/0xa90 [ 47.696720] ? proc_cwd_link+0x1d0/0x1d0 [ 47.700778] block_ioctl+0xee/0x130 [ 47.704387] ? blkdev_fallocate+0x410/0x410 [ 47.708689] do_vfs_ioctl+0xd5f/0x1380 [ 47.712556] ? selinux_file_ioctl+0x46f/0x5e0 [ 47.717033] ? selinux_file_ioctl+0x125/0x5e0 [ 47.721510] ? ioctl_preallocate+0x210/0x210 [ 47.725898] ? selinux_file_mprotect+0x620/0x620 [ 47.730636] ? __sb_end_write+0xd9/0x110 [ 47.734677] ? vfs_write+0x160/0x560 [ 47.738373] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 47.743907] ? security_file_ioctl+0x8d/0xc0 [ 47.748308] ksys_ioctl+0xab/0xd0 [ 47.751755] __x64_sys_ioctl+0x73/0xb0 [ 47.755636] do_syscall_64+0xfd/0x620 [ 47.759421] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 47.764591] RIP: 0033:0x445379 [ 47.767763] Code: e8 cc ac 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db ce fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 47.786644] RSP: 002b:00007ffe34005398 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 47.794334] RAX: ffffffffffffffda RBX: 00007ffe340053a0 RCX: 0000000000445379 [ 47.801582] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 47.808833] RBP: 0000000000000007 R08: 0000000000000002 R09: 0000000001003031 [ 47.816084] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000004026e0 [ 47.823346] R13: 0000000000402770 R14: 0000000000000000 R15: 0000000000000000 [ 47.830600] Modules linked in: [ 47.833775] CR2: 0000000000000118 [ 47.837364] ---[ end trace 42f62637b7a3b2e6 ]--- [ 47.842142] RIP: 0010:blk_mq_map_swqueue+0x29e/0xa60 [ 47.847418] Code: 80 3c 18 00 0f 85 e9 06 00 00 44 89 e6 bf 3f 00 00 00 4d 8b 6d 00 e8 c1 0b 1a fe 41 83 fc 3f 0f 87 17 05 00 00 e8 32 0a 1a fe 4d 0f ab b5 18 01 00 00 49 8d bd 74 01 00 00 48 89 fa 48 c1 ea [ 47.866360] RSP: 0018:ffff88808fb1f8b8 EFLAGS: 00010293 [ 47.871728] RAX: ffff888096e340c0 RBX: dffffc0000000000 RCX: ffffffff8351391f [ 47.879365] RDX: 0000000000000000 RSI: ffffffff8351392e RDI: 0000000000000005 [ 47.886660] RBP: ffff88808fb1f928 R08: ffff888096e340c0 R09: 0000000000000000 [ 47.893937] R10: ffffed1012573ff0 R11: ffff888092b9ff83 R12: 0000000000000001 [ 47.901224] R13: 0000000000000000 R14: 0000000000000001 R15: ffff8880a3cc50c0 [ 47.908523] FS: 0000000001902940(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 47.916761] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 47.922635] CR2: 0000000000000118 CR3: 000000009b0f5000 CR4: 00000000001406f0 [ 47.929956] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 47.937261] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 47.944514] Kernel panic - not syncing: Fatal exception [ 47.951404] Kernel Offset: disabled [ 47.955045] Rebooting in 86400 seconds..