[info] Using makefile-style concurrent boot in runlevel 2. [ 24.141514] audit: type=1800 audit(1541260515.215:21): pid=5492 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2419 res=0 [ 24.176642] audit: type=1800 audit(1541260515.225:22): pid=5492 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="motd" dev="sda1" ino=2447 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 44.644134] sshd (5636) used greatest stack depth: 15744 bytes left Warning: Permanently added '10.128.0.64' (ECDSA) to the list of known hosts. executing program [ 51.108373] BUG: pagefault on kernel address 0xffffc90002569000 in non-whitelisted uaccess [ 51.117024] BUG: unable to handle kernel paging request at ffffc90002569000 [ 51.124103] PGD 1da948067 P4D 1da948067 PUD 1da949067 PMD 1c0211067 PTE 0 [ 51.131025] Oops: 0000 [#1] PREEMPT SMP KASAN [ 51.135506] CPU: 0 PID: 5650 Comm: syz-executor571 Not tainted 4.19.0+ #317 [ 51.142672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 51.152022] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 51.157891] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 [ 51.176783] RSP: 0018:ffff8801d8fcf680 EFLAGS: 00010202 [ 51.182137] RAX: 0000000000000000 RBX: 000000000000ca80 RCX: 0000000000004a80 [ 51.189389] RDX: 000000000000ca80 RSI: ffffc90002569000 RDI: 00000000200080c0 [ 51.196646] RBP: ffff8801d8fcf6b8 R08: 0000000000000000 R09: 000000000000032a [ 51.203913] R10: fffff520004adb4f R11: ffffc9000256da7f R12: 000000002000cb40 [ 51.211181] R13: 00000000200000c0 R14: ffffc90002561000 R15: 00007ffffffff000 [ 51.218440] FS: 00000000017ca880(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 51.226654] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.232523] CR2: ffffc90002569000 CR3: 00000001ba5d7000 CR4: 00000000001406f0 [ 51.239779] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 51.247039] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 51.254294] Call Trace: [ 51.256866] ? _copy_to_user+0xf6/0x110 [ 51.260831] vidioc_g_fmt_vid_overlay+0x392/0x550 [ 51.265662] v4l_g_fmt+0x2ad/0x640 [ 51.269185] __video_do_ioctl+0x8b1/0x1050 [ 51.273406] ? v4l_s_fmt+0x990/0x990 [ 51.277194] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 51.282718] video_usercopy+0x5c1/0x1760 [ 51.286874] ? v4l_s_fmt+0x990/0x990 [ 51.290575] ? v4l_enumstd+0x70/0x70 [ 51.294272] ? rcu_softirq_qs+0x20/0x20 [ 51.298237] ? is_bpf_text_address+0xd3/0x170 [ 51.302740] ? __kernel_text_address+0xd/0x40 [ 51.307233] ? unwind_get_return_address+0x61/0xa0 [ 51.312147] ? __save_stack_trace+0x8d/0xf0 [ 51.316458] ? save_stack+0xa9/0xd0 [ 51.320068] ? save_stack+0x43/0xd0 [ 51.323795] ? __kasan_slab_free+0x102/0x150 [ 51.328204] ? kasan_slab_free+0xe/0x10 [ 51.332165] ? kmem_cache_free+0x83/0x290 [ 51.336297] ? putname+0xf2/0x130 [ 51.339734] ? __x64_sys_open+0x7e/0xc0 [ 51.343692] ? do_syscall_64+0x1b9/0x820 [ 51.347759] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 51.353108] ? trace_hardirqs_off+0xb8/0x310 [ 51.357501] ? kasan_check_read+0x11/0x20 [ 51.361636] ? do_raw_spin_unlock+0xa7/0x330 [ 51.366027] ? trace_hardirqs_on+0x310/0x310 [ 51.370422] ? video_usercopy+0x1760/0x1760 [ 51.374729] video_ioctl2+0x2c/0x33 [ 51.378350] v4l2_ioctl+0x154/0x1b0 [ 51.381963] ? video_devdata+0xa0/0xa0 [ 51.385925] do_vfs_ioctl+0x1de/0x1790 [ 51.389798] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 51.395336] ? ioctl_preallocate+0x300/0x300 [ 51.399830] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 51.405349] ? __fget_light+0x2e9/0x430 [ 51.409307] ? fget_raw+0x20/0x20 [ 51.412750] ? rcu_read_lock_sched_held+0x14f/0x180 [ 51.417753] ? kmem_cache_free+0x24f/0x290 [ 51.421984] ? putname+0xf7/0x130 [ 51.425423] ? do_syscall_64+0x9a/0x820 [ 51.429379] ? do_syscall_64+0x9a/0x820 [ 51.433343] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 51.437914] ? security_file_ioctl+0x94/0xc0 [ 51.442311] ksys_ioctl+0xa9/0xd0 [ 51.445752] __x64_sys_ioctl+0x73/0xb0 [ 51.449628] do_syscall_64+0x1b9/0x820 [ 51.453504] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 51.458964] ? syscall_return_slowpath+0x5e0/0x5e0 [ 51.463975] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 51.468814] ? trace_hardirqs_on_caller+0x310/0x310 [ 51.473820] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 51.478818] ? prepare_exit_to_usermode+0x291/0x3b0 [ 51.483835] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 51.488666] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 51.493956] RIP: 0033:0x443f49 [ 51.497235] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b d8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 51.516216] RSP: 002b:00007fffbe4a44c8 EFLAGS: 00000217 ORIG_RAX: 0000000000000010 [ 51.523908] RAX: ffffffffffffffda RBX: 00000000004002e0 RCX: 0000000000443f49 [ 51.531159] RDX: 00000000200000c0 RSI: 00000000c0d05604 RDI: 0000000000000004 [ 51.538413] RBP: 00000000006ce018 R08: 00000000004002e0 R09: 00000000004002e0 [ 51.545666] R10: 00000000004002e0 R11: 0000000000000217 R12: 0000000000401c50 [ 51.552918] R13: 0000000000401ce0 R14: 0000000000000000 R15: 0000000000000000 [ 51.560176] Modules linked in: [ 51.563364] CR2: ffffc90002569000 [ 51.566802] ---[ end trace e294d16803c6d199 ]--- [ 51.571550] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 51.577542] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 [ 51.596531] RSP: 0018:ffff8801d8fcf680 EFLAGS: 00010202 [ 51.601895] RAX: 0000000000000000 RBX: 000000000000ca80 RCX: 0000000000004a80 [ 51.609366] RDX: 000000000000ca80 RSI: ffffc90002569000 RDI: 00000000200080c0 [ 51.616619] RBP: ffff8801d8fcf6b8 R08: 0000000000000000 R09: 000000000000032a [ 51.623870] R10: fffff520004adb4f R11: ffffc9000256da7f R12: 000000002000cb40 [ 51.631141] R13: 00000000200000c0 R14: ffffc90002561000 R15: 00007ffffffff000 [ 51.638411] FS: 00000000017ca880(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 51.646619] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.652484] CR2: ffffc90002569000 CR3: 00000001ba5d7000 CR4: 00000000001406f0 [ 51.659739] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 51.666991] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 51.674242] Kernel panic - not syncing: Fatal exception [ 51.680930] Kernel Offset: disabled [ 51.684564] Rebooting in 86400 seconds..