Warning: Permanently added '10.128.0.118' (ECDSA) to the list of known hosts. executing program executing program syzkaller login: [ 41.951124] audit: type=1400 audit(1587366481.735:8): avc: denied { execmem } for pid=6431 comm="syz-executor604" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 42.006477] ================================================================== [ 42.014405] BUG: KASAN: null-ptr-deref in choke_reset+0x208/0x340 [ 42.020647] Write of size 8 at addr 0000000000000000 by task syz-executor604/6433 [ 42.028256] [ 42.029875] CPU: 1 PID: 6433 Comm: syz-executor604 Not tainted 4.19.116-syzkaller #0 [ 42.037739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 42.047113] Call Trace: [ 42.049697] dump_stack+0x188/0x20d [ 42.053327] ? choke_reset+0x208/0x340 [ 42.057208] kasan_report.cold+0x194/0x2b9 [ 42.061460] memset+0x20/0x40 [ 42.064582] choke_reset+0x208/0x340 [ 42.068409] ? choke_destroy+0x40/0x40 [ 42.072301] qdisc_reset+0x6b/0x4c0 [ 42.075990] dev_deactivate_queue.constprop.0+0x138/0x220 [ 42.081546] dev_deactivate_many+0xe2/0xb30 [ 42.085869] dev_deactivate+0xfe/0x1d0 [ 42.089759] ? dev_deactivate_many+0xb30/0xb30 [ 42.094335] qdisc_graft+0xbf3/0xf90 [ 42.098047] ? qdisc_create+0x845/0x1170 [ 42.102107] ? tc_dump_tclass+0x480/0x480 [ 42.106336] ? nla_parse+0x1f3/0x2f0 [ 42.110051] tc_modify_qdisc+0xb9c/0x1929 [ 42.114232] ? qdisc_create+0x1170/0x1170 [ 42.118402] ? mutex_trylock+0x1a0/0x1a0 [ 42.122509] ? qdisc_create+0x1170/0x1170 [ 42.126672] rtnetlink_rcv_msg+0x453/0xaf0 [ 42.130901] ? rtnetlink_put_metrics+0x520/0x520 [ 42.135650] ? find_held_lock+0x2d/0x110 [ 42.139750] netlink_rcv_skb+0x160/0x410 [ 42.143822] ? rtnetlink_put_metrics+0x520/0x520 [ 42.148582] ? netlink_ack+0xa60/0xa60 [ 42.152466] netlink_unicast+0x4d7/0x6a0 [ 42.156550] ? netlink_attachskb+0x710/0x710 [ 42.160972] netlink_sendmsg+0x80b/0xcd0 [ 42.165037] ? netlink_unicast+0x6a0/0x6a0 [ 42.169696] ? move_addr_to_kernel.part.0+0x110/0x110 [ 42.174887] ? netlink_unicast+0x6a0/0x6a0 [ 42.179231] sock_sendmsg+0xcf/0x120 [ 42.182937] ___sys_sendmsg+0x803/0x920 [ 42.186905] ? copy_msghdr_from_user+0x410/0x410 [ 42.191664] ? rcu_read_lock_sched_held+0x10a/0x130 [ 42.196674] ? kmem_cache_alloc+0x31b/0x710 [ 42.201031] ? mark_held_locks+0xf0/0xf0 [ 42.205092] ? percpu_counter_add_batch+0x123/0x180 [ 42.210111] ? alloc_empty_file+0xd7/0x170 [ 42.214346] ? find_held_lock+0x2d/0x110 [ 42.218406] ? __fd_install+0x1b4/0x610 [ 42.222394] ? __fget_light+0x1a2/0x230 [ 42.226383] __sys_sendmsg+0xec/0x1b0 [ 42.230190] ? __ia32_sys_shutdown+0x70/0x70 [ 42.234624] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 42.239466] ? trace_hardirqs_off_caller+0x55/0x210 [ 42.244474] ? do_syscall_64+0x21/0x620 [ 42.248499] do_syscall_64+0xf9/0x620 [ 42.252297] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 42.257473] RIP: 0033:0x4415c9 [ 42.260660] Code: e8 fc ab 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 9b 09 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 42.279565] RSP: 002b:00007ffee1ba3838 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 42.287313] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004415c9 [ 42.294572] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000004 [ 42.301831] RBP: 000000000000a3e1 R08: 00000000004002c8 R09: 00000000004002c8 [ 42.309521] R10: 00000000004002c8 R11: 0000000000000246 R12: 00000000004023f0 [ 42.316778] R13: 0000000000402480 R14: 0000000000000000 R15: 0000000000000000 [ 42.324045] ================================================================== [ 42.331385] Disabling lock debugging due to kernel taint [ 42.336875] Kernel panic - not syncing: panic_on_warn set ... [ 42.336875] [ 42.344342] CPU: 1 PID: 6433 Comm: syz-executor604 Tainted: G B 4.19.116-syzkaller #0 [ 42.353622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 42.362982] Call Trace: [ 42.365585] dump_stack+0x188/0x20d [ 42.369222] panic+0x26a/0x50e [ 42.372418] ? __warn_printk+0xf3/0xf3 [ 42.376291] ? choke_reset+0x208/0x340 [ 42.380425] ? trace_hardirqs_on+0x55/0x210 [ 42.384744] ? choke_reset+0x208/0x340 [ 42.388638] kasan_end_report+0x43/0x49 [ 42.392625] kasan_report.cold+0xa4/0x2b9 [ 42.396771] memset+0x20/0x40 [ 42.399868] choke_reset+0x208/0x340 [ 42.403587] ? choke_destroy+0x40/0x40 [ 42.407482] qdisc_reset+0x6b/0x4c0 [ 42.411110] dev_deactivate_queue.constprop.0+0x138/0x220 [ 42.416635] dev_deactivate_many+0xe2/0xb30 [ 42.420941] dev_deactivate+0xfe/0x1d0 [ 42.424827] ? dev_deactivate_many+0xb30/0xb30 [ 42.429409] qdisc_graft+0xbf3/0xf90 [ 42.433112] ? qdisc_create+0x845/0x1170 [ 42.437162] ? tc_dump_tclass+0x480/0x480 [ 42.441316] ? nla_parse+0x1f3/0x2f0 [ 42.445021] tc_modify_qdisc+0xb9c/0x1929 [ 42.449168] ? qdisc_create+0x1170/0x1170 [ 42.453310] ? mutex_trylock+0x1a0/0x1a0 [ 42.457452] ? qdisc_create+0x1170/0x1170 [ 42.461624] rtnetlink_rcv_msg+0x453/0xaf0 [ 42.465847] ? rtnetlink_put_metrics+0x520/0x520 [ 42.470587] ? find_held_lock+0x2d/0x110 [ 42.474633] netlink_rcv_skb+0x160/0x410 [ 42.478680] ? rtnetlink_put_metrics+0x520/0x520 [ 42.483449] ? netlink_ack+0xa60/0xa60 [ 42.487326] netlink_unicast+0x4d7/0x6a0 [ 42.491374] ? netlink_attachskb+0x710/0x710 [ 42.495783] netlink_sendmsg+0x80b/0xcd0 [ 42.499832] ? netlink_unicast+0x6a0/0x6a0 [ 42.504063] ? move_addr_to_kernel.part.0+0x110/0x110 [ 42.509243] ? netlink_unicast+0x6a0/0x6a0 [ 42.513562] sock_sendmsg+0xcf/0x120 [ 42.517261] ___sys_sendmsg+0x803/0x920 [ 42.521234] ? copy_msghdr_from_user+0x410/0x410 [ 42.525979] ? rcu_read_lock_sched_held+0x10a/0x130 [ 42.530981] ? kmem_cache_alloc+0x31b/0x710 [ 42.537204] ? mark_held_locks+0xf0/0xf0 [ 42.541253] ? percpu_counter_add_batch+0x123/0x180 [ 42.546269] ? alloc_empty_file+0xd7/0x170 [ 42.550507] ? find_held_lock+0x2d/0x110 [ 42.554996] ? __fd_install+0x1b4/0x610 [ 42.558961] ? __fget_light+0x1a2/0x230 [ 42.562924] __sys_sendmsg+0xec/0x1b0 [ 42.566716] ? __ia32_sys_shutdown+0x70/0x70 [ 42.571142] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 42.575882] ? trace_hardirqs_off_caller+0x55/0x210 [ 42.581011] ? do_syscall_64+0x21/0x620 [ 42.584978] do_syscall_64+0xf9/0x620 [ 42.588784] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 42.593982] RIP: 0033:0x4415c9 [ 42.597172] Code: e8 fc ab 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 9b 09 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 42.616066] RSP: 002b:00007ffee1ba3838 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 42.623767] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004415c9 [ 42.631132] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000004 [ 42.638395] RBP: 000000000000a3e1 R08: 00000000004002c8 R09: 00000000004002c8 [ 42.645661] R10: 00000000004002c8 R11: 0000000000000246 R12: 00000000004023f0 [ 42.652965] R13: 0000000000402480 R14: 0000000000000000 R15: 0000000000000000 [ 42.661896] Kernel Offset: disabled [ 42.665572] Rebooting in 86400 seconds..