[info] Using makefile-style concurrent boot in runlevel 2. [ 26.033871] audit: type=1800 audit(1542186238.941:21): pid=5845 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2419 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 31.494639] sshd (5984) used greatest stack depth: 15632 bytes left Warning: Permanently added '10.128.0.66' (ECDSA) to the list of known hosts. executing program [ 44.172632] BUG: GPF in non-whitelisted uaccess (non-canonical address?) [ 44.179777] kasan: CONFIG_KASAN_INLINE enabled [ 44.184689] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 44.192203] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 44.198439] CPU: 0 PID: 6001 Comm: syz-executor819 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 44.207083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 44.216432] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 44.222306] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 [ 44.241201] RSP: 0018:ffff8801bfdd7398 EFLAGS: 00010206 [ 44.246548] RAX: 0000000000000000 RBX: 0000000000000109 RCX: 0000000000000109 [ 44.253932] RDX: 0000000000000109 RSI: 241037f828e5769d RDI: ffff8801ccaf06b8 [ 44.261187] RBP: ffff8801bfdd73d0 R08: ffffed003995e0f9 R09: ffffed003995e0f9 [ 44.268448] R10: ffffed003995e0f8 R11: ffff8801ccaf07c0 R12: 241037f828e577a6 [ 44.275705] R13: 241037f828e5769d R14: ffff8801ccaf06b8 R15: ffffffffffffffff [ 44.282965] FS: 0000000001054880(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 44.291186] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.297055] CR2: 0000000020d83ff8 CR3: 00000001c162a000 CR4: 00000000001406f0 [ 44.304425] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 44.311680] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 44.318930] Call Trace: [ 44.321509] ? _copy_from_user+0x10d/0x150 [ 44.325731] uhid_dev_create+0x20c/0xb40 [ 44.329777] ? uhid_dev_create2+0x7e0/0x7e0 [ 44.334098] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 44.339622] uhid_char_write+0xc74/0xef0 [ 44.343681] __vfs_write+0x119/0x9f0 [ 44.347396] ? uhid_hid_stop+0x90/0x90 [ 44.351273] ? kernel_read+0x120/0x120 [ 44.355153] ? perf_trace_sched_process_exec+0x860/0x860 [ 44.360682] ? aa_path_link+0x5e0/0x5e0 [ 44.364659] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 44.370188] __kernel_write+0x10c/0x370 [ 44.374152] write_pipe_buf+0x180/0x240 [ 44.378290] ? debug_mutex_init+0x2d/0x60 [ 44.382534] ? do_splice_direct+0x420/0x420 [ 44.386896] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 44.392427] ? splice_from_pipe_next.part.11+0x296/0x340 [ 44.397861] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 44.403388] __splice_from_pipe+0x38b/0x7c0 [ 44.407695] ? do_splice_direct+0x420/0x420 [ 44.412005] splice_from_pipe+0x1ec/0x340 [ 44.416140] ? do_splice_direct+0x420/0x420 [ 44.420450] ? splice_shrink_spd+0xd0/0xd0 [ 44.424686] default_file_splice_write+0x3c/0x90 [ 44.429427] ? generic_splice_sendpage+0x50/0x50 [ 44.434166] direct_splice_actor+0x128/0x190 [ 44.438565] splice_direct_to_actor+0x318/0x8f0 [ 44.443352] ? pipe_to_sendpage+0x400/0x400 [ 44.447678] ? do_splice_to+0x190/0x190 [ 44.451641] ? security_file_permission+0x1c2/0x220 [ 44.456649] ? rw_verify_area+0x118/0x360 [ 44.460783] do_splice_direct+0x2d4/0x420 [ 44.464919] ? splice_direct_to_actor+0x8f0/0x8f0 [ 44.469744] ? apparmor_file_permission+0x24/0x30 [ 44.474574] ? rw_verify_area+0x118/0x360 [ 44.478705] do_sendfile+0x62a/0xe20 [ 44.482492] ? do_compat_pwritev64+0x1c0/0x1c0 [ 44.487071] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 44.492607] ? _copy_from_user+0xdf/0x150 [ 44.496852] __x64_sys_sendfile64+0x15d/0x250 [ 44.501340] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 44.505921] do_syscall_64+0x1b9/0x820 [ 44.509794] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 44.515352] ? syscall_return_slowpath+0x5e0/0x5e0 [ 44.520265] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 44.525202] ? trace_hardirqs_on_caller+0x310/0x310 [ 44.530291] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 44.535821] ? prepare_exit_to_usermode+0x291/0x3b0 [ 44.540929] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 44.545879] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 44.551054] RIP: 0033:0x440309 [ 44.554240] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 44.573144] RSP: 002b:00007ffc051894f8 EFLAGS: 00000203 ORIG_RAX: 0000000000000028 [ 44.580877] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440309 [ 44.588666] RDX: 0000000020d83ff8 RSI: 0000000000000004 RDI: 0000000000000003 [ 44.596031] RBP: 00000000006cb018 R08: 00000000004002c8 R09: 00000000004002c8 [ 44.603375] R10: 00008000fffffffe R11: 0000000000000203 R12: 0000000000401b90 [ 44.610640] R13: 0000000000401c20 R14: 0000000000000000 R15: 0000000000000000 [ 44.617903] Modules linked in: [ 44.621566] ---[ end trace 6639440217ff234f ]--- [ 44.626431] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 44.632348] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 [ 44.651271] RSP: 0018:ffff8801bfdd7398 EFLAGS: 00010206 [ 44.656627] RAX: 0000000000000000 RBX: 0000000000000109 RCX: 0000000000000109 [ 44.663921] RDX: 0000000000000109 RSI: 241037f828e5769d RDI: ffff8801ccaf06b8 [ 44.671213] RBP: ffff8801bfdd73d0 R08: ffffed003995e0f9 R09: ffffed003995e0f9 [ 44.678472] R10: ffffed003995e0f8 R11: ffff8801ccaf07c0 R12: 241037f828e577a6 [ 44.685762] R13: 241037f828e5769d R14: ffff8801ccaf06b8 R15: ffffffffffffffff [ 44.693076] FS: 0000000001054880(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 44.701306] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.707179] CR2: 0000000020d83ff8 CR3: 00000001c162a000 CR4: 00000000001406f0 [ 44.714536] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 44.721870] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 44.729145] Kernel panic - not syncing: Fatal exception [ 44.735854] Kernel Offset: disabled [ 44.739525] Rebooting in 86400 seconds..