[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.38' (ECDSA) to the list of known hosts. 2020/08/29 07:24:41 parsed 1 programs 2020/08/29 07:24:41 executed programs: 0 syzkaller login: [ 143.026158] audit: type=1400 audit(1598685881.722:8): avc: denied { execmem } for pid=6372 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 144.163298] IPVS: ftp: loaded support on port[0] = 21 [ 144.253233] chnl_net:caif_netlink_parms(): no params data found [ 144.343191] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.349855] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.356700] device bridge_slave_0 entered promiscuous mode [ 144.364720] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.371144] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.378490] device bridge_slave_1 entered promiscuous mode [ 144.393907] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 144.402644] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 144.420312] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 144.427579] team0: Port device team_slave_0 added [ 144.432855] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 144.440167] team0: Port device team_slave_1 added [ 144.453924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.460267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.485578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.496600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.502889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.528225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.539186] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 144.546423] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 144.564475] device hsr_slave_0 entered promiscuous mode [ 144.570189] device hsr_slave_1 entered promiscuous mode [ 144.576034] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 144.583130] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 144.641007] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.647435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.654199] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.660585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.687902] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 144.693968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.702655] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 144.711021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 144.729207] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.736077] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.746062] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 144.752290] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.760280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 144.768142] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.774453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.788408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 144.795899] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.802246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.809922] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 144.817770] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 144.829784] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 144.839681] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 144.850373] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 144.856738] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 144.864377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 144.871854] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 144.879521] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 144.890534] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 144.898943] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 144.905589] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 144.915249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.961227] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 144.970976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 145.000334] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 145.008214] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 145.014575] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 145.024496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 145.032206] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 145.039278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 145.047233] device veth0_vlan entered promiscuous mode [ 145.055341] device veth1_vlan entered promiscuous mode [ 145.061415] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 145.069633] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 145.081061] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 145.090145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 145.097295] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 145.105645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 145.114873] device veth0_macvtap entered promiscuous mode [ 145.121190] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 145.128826] device veth1_macvtap entered promiscuous mode [ 145.136446] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 145.145143] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 145.154333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.161305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 145.169454] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 145.179677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.188575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 145.237691] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 146.208321] Bluetooth: hci0 command 0x0409 tx timeout 2020/08/29 07:24:46 executed programs: 178 [ 148.277729] Bluetooth: hci0 command 0x041b tx timeout [ 150.367336] Bluetooth: hci0 command 0x040f tx timeout [ 152.437200] Bluetooth: hci0 command 0x0419 tx timeout 2020/08/29 07:24:51 executed programs: 744 [ 153.957928] kasan: CONFIG_KASAN_INLINE enabled [ 153.962685] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 153.971823] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 153.978056] Modules linked in: [ 153.981222] CPU: 0 PID: 9430 Comm: syz-executor.0 Not tainted 4.14.195-syzkaller #0 [ 153.988984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 153.998317] task: ffff8880881be5c0 task.stack: ffff88809f9c8000 [ 154.004355] RIP: 0010:tty_release+0xf0/0xe20 [ 154.008732] RSP: 0018:ffff88809f9cfd80 EFLAGS: 00010246 [ 154.014066] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 154.021324] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff88809f4f06a0 [ 154.028631] RBP: ffff88809f4f0240 R08: ffffffff8a095d68 R09: 0000000000000001 [ 154.035871] R10: 0000000000000000 R11: ffff8880881be5c0 R12: ffff8880a47a6638 [ 154.043131] R13: ffff8880a61b9b3c R14: ffffffff834296d0 R15: ffff8880a696ac60 [ 154.050375] FS: 00007fde242c2700(0000) GS:ffff8880aea00000(0000) knlGS:0000000000000000 [ 154.058658] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 154.064523] CR2: 00007fd0b92a4000 CR3: 00000000a10e4000 CR4: 00000000001406f0 [ 154.071772] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 154.079013] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 154.086255] Call Trace: [ 154.088822] ? ima_file_free+0x4f/0x330 [ 154.092771] ? do_tty_hangup+0x30/0x30 [ 154.096629] __fput+0x25f/0x7a0 [ 154.099936] task_work_run+0x11f/0x190 [ 154.103796] exit_to_usermode_loop+0x1ad/0x200 [ 154.108345] do_syscall_64+0x4a3/0x640 [ 154.112242] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 154.117404] RIP: 0033:0x45d5b9 [ 154.120568] RSP: 002b:00007fde242c1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 154.128247] RAX: 0000000000000000 RBX: 0000000000002ac0 RCX: 000000000045d5b9 [ 154.135487] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000004 [ 154.142747] RBP: 000000000118cf88 R08: 0000000000000000 R09: 0000000000000000 [ 154.149988] R10: 0000000020000040 R11: 0000000000000246 R12: 000000000118cf4c [ 154.157230] R13: 00007fff9335d5bf R14: 00007fde242c29c0 R15: 000000000118cf4c [ 154.164513] Code: df 48 c1 ea 03 80 3c 02 00 0f 85 10 0c 00 00 48 8b 04 24 48 8b 98 90 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 <80> 3c 02 00 0f 85 ab 0b 00 00 48 8b 04 24 48 8b 1b 48 8d 78 20 [ 154.183575] RIP: tty_release+0xf0/0xe20 RSP: ffff88809f9cfd80 [ 154.195906] ---[ end trace fecb1019fa9eb992 ]--- [ 154.200830] Kernel panic - not syncing: Fatal exception [ 154.207720] Kernel Offset: disabled [ 154.211326] Rebooting in 86400 seconds..