[ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Load/Save RF Kill Switch Status. [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.85' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 58.804486][ T7078] IPVS: ftp: loaded support on port[0] = 21 [ 58.893063][ T7102] BUG: unable to handle page fault for address: ffff887f8908ffff [ 58.900825][ T7102] #PF: supervisor read access in kernel mode [ 58.906900][ T7102] #PF: error_code(0x0000) - not-present page [ 58.912863][ T7102] PGD 0 P4D 0 [ 58.916221][ T7102] Oops: 0000 [#1] PREEMPT SMP KASAN [ 58.921407][ T7102] CPU: 0 PID: 7102 Comm: syz-executor104 Not tainted 5.7.0-rc3-syzkaller #0 [ 58.930857][ T7102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.940925][ T7102] RIP: 0010:do_xdp_generic.part.0+0x45f/0x1780 [ 58.947223][ T7102] Code: 4c 89 f8 4c 29 f0 4c 89 ac 24 b0 00 00 00 48 89 84 24 b8 00 00 00 48 b8 00 00 00 00 00 fc ff df 80 3c 02 00 0f 85 bd 10 00 00 <49> 8b 45 00 49 8d 7d 0c 48 ba 00 00 00 00 00 fc ff df 48 89 44 24 [ 58.966894][ T7102] RSP: 0018:ffffc90000f87648 EFLAGS: 00010246 [ 58.972959][ T7102] RAX: dffffc0000000000 RBX: ffff88808908ffff RCX: 00000000ffff0101 [ 58.980935][ T7102] RDX: 1ffff10ff1211fff RSI: ffffffff8621b610 RDI: 0000000000000005 [ 58.988898][ T7102] RBP: ffff8880a3143d00 R08: ffff888099eda040 R09: ffffed10112107dd [ 58.996852][ T7102] R10: ffff888089083ee3 R11: ffffed10112107dc R12: ffffc90000e9e000 [ 59.004834][ T7102] R13: ffff887f8908ffff R14: 0000000000000100 R15: ffff888089080100 [ 59.012784][ T7102] FS: 00007f6693779700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 59.021772][ T7102] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.028353][ T7102] CR2: ffff887f8908ffff CR3: 00000000a8fcd000 CR4: 00000000001406f0 [ 59.036316][ T7102] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 59.044272][ T7102] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 59.052223][ T7102] Call Trace: [ 59.055503][ T7102] ? tun_get_user+0x2896/0x3c70 [ 59.060351][ T7102] ? generic_xdp_tx+0x710/0x710 [ 59.065192][ T7102] ? rcu_read_lock_held+0x9c/0xb0 [ 59.070191][ T7102] do_xdp_generic+0x2b/0x40 [ 59.074666][ T7102] tun_get_user+0x2993/0x3c70 [ 59.079331][ T7102] ? tun_build_skb.isra.0+0x13e0/0x13e0 [ 59.085003][ T7102] ? tun_get+0x16d/0x290 [ 59.089226][ T7102] ? rcu_read_lock_held_common+0x130/0x130 [ 59.095018][ T7102] tun_chr_write_iter+0xba/0x151 [ 59.099942][ T7102] new_sync_write+0x4a2/0x700 [ 59.104608][ T7102] ? new_sync_read+0x7a0/0x7a0 [ 59.109355][ T7102] ? pipe_lock+0x5a/0x70 [ 59.113584][ T7102] ? lock_release+0x800/0x800 [ 59.118255][ T7102] __vfs_write+0xc9/0x100 [ 59.122572][ T7102] __kernel_write+0x11c/0x3a0 [ 59.127223][ T7102] write_pipe_buf+0x153/0x1e0 [ 59.131873][ T7102] ? do_splice_direct+0x280/0x280 [ 59.136872][ T7102] ? splice_from_pipe_next.part.0+0x29c/0x350 [ 59.142925][ T7102] __splice_from_pipe+0x3e6/0x7b0 [ 59.148097][ T7102] ? do_splice_direct+0x280/0x280 [ 59.153105][ T7102] ? do_splice_direct+0x280/0x280 [ 59.158102][ T7102] splice_from_pipe+0xd9/0x140 [ 59.162863][ T7102] ? splice_shrink_spd+0xc0/0xc0 [ 59.167787][ T7102] ? security_file_permission+0x8c/0x470 [ 59.173404][ T7102] default_file_splice_write+0x37/0x90 [ 59.179269][ T7102] ? generic_splice_sendpage+0x40/0x40 [ 59.184699][ T7102] do_splice+0xb2e/0x1550 [ 59.189001][ T7102] ? __fget_files+0x32f/0x500 [ 59.193652][ T7102] ? ksys_dup3+0x3c0/0x3c0 [ 59.198061][ T7102] ? default_file_splice_write+0x90/0x90 [ 59.203673][ T7102] __x64_sys_splice+0x2c1/0x330 [ 59.208510][ T7102] do_syscall_64+0xf6/0x7d0 [ 59.213007][ T7102] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 59.218879][ T7102] RIP: 0033:0x4464c9 [ 59.222758][ T7102] Code: e8 1c ba 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 ab 0e fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 59.242679][ T7102] RSP: 002b:00007f6693778d98 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 59.251087][ T7102] RAX: ffffffffffffffda RBX: 00000000006dbc78 RCX: 00000000004464c9 [ 59.259129][ T7102] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 59.267078][ T7102] RBP: 00000000006dbc70 R08: 0000000000010008 R09: 0000000000000000 [ 59.275112][ T7102] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc7c [ 59.283065][ T7102] R13: 0000000000003172 R14: 656c6c616b7a7973 R15: 0000000000000064 [ 59.291014][ T7102] Modules linked in: [ 59.294892][ T7102] CR2: ffff887f8908ffff [ 59.299039][ T7102] ---[ end trace 5ffa42cc81b6b3e7 ]--- [ 59.304493][ T7102] RIP: 0010:do_xdp_generic.part.0+0x45f/0x1780 [ 59.310643][ T7102] Code: 4c 89 f8 4c 29 f0 4c 89 ac 24 b0 00 00 00 48 89 84 24 b8 00 00 00 48 b8 00 00 00 00 00 fc ff df 80 3c 02 00 0f 85 bd 10 00 00 <49> 8b 45 00 49 8d 7d 0c 48 ba 00 00 00 00 00 fc ff df 48 89 44 24 [ 59.330584][ T7102] RSP: 0018:ffffc90000f87648 EFLAGS: 00010246 [ 59.336629][ T7102] RAX: dffffc0000000000 RBX: ffff88808908ffff RCX: 00000000ffff0101 [ 59.345199][ T7102] RDX: 1ffff10ff1211fff RSI: ffffffff8621b610 RDI: 0000000000000005 [ 59.353596][ T7102] RBP: ffff8880a3143d00 R08: ffff888099eda040 R09: ffffed10112107dd [ 59.361553][ T7102] R10: ffff888089083ee3 R11: ffffed10112107dc R12: ffffc90000e9e000 [ 59.369510][ T7102] R13: ffff887f8908ffff R14: 0000000000000100 R15: ffff888089080100 [ 59.377469][ T7102] FS: 00007f6693779700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 59.386370][ T7102] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.393359][ T7102] CR2: ffff887f8908ffff CR3: 00000000a8fcd000 CR4: 00000000001406f0 [ 59.401404][ T7102] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 59.409358][ T7102] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 59.417934][ T7102] Kernel panic - not syncing: Fatal exception in interrupt [ 59.426591][ T7102] Kernel Offset: disabled [ 59.430910][ T7102] Rebooting in 86400 seconds..