[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.87' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 42.829735] audit: type=1400 audit(1588534725.329:8): avc: denied { execmem } for pid=6468 comm="syz-executor462" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 42.842979] IPVS: ftp: loaded support on port[0] = 21 executing program [ 43.229401] BUG: unable to handle kernel paging request at ffffffffffffffff [ 43.229408] PGD 8c70067 P4D 8c70067 PUD 8c72067 PMD 0 [ 43.229431] Oops: 0000 [#1] PREEMPT SMP KASAN [ 43.229444] CPU: 0 PID: 6469 Comm: syz-executor462 Not tainted 4.19.120-syzkaller #0 [ 43.229451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 43.229472] RIP: 0010:do_syscall_64+0x14c/0x620 [ 43.229487] Code: b8 00 00 00 00 00 fc ff df 65 48 8b 1c 25 00 70 00 70 48 89 da 48 c1 ea 03 80 3c 02 00 0f 85 84 04 00 00 48 c7 c0 c0 56 d2 88 <4c> 8b 23 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 0f [ 43.292337] RSP: 0018:ffff888089007f28 EFLAGS: 00010246 [ 43.298024] RAX: ffffffff88d256c0 RBX: ffffffffffffffff RCX: 1ffff11011200ff5 [ 43.305296] RDX: 1fffffffffffffff RSI: ffffffff81009b31 RDI: ffff888089007fa8 [ 43.313011] RBP: ffff888089007f58 R08: ffff888089e946c0 R09: 0000000000000000 [ 43.320832] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 43.328478] R13: ffffffff88d256d8 R14: 0000000000000000 R15: 0000000000000000 [ 43.336230] FS: 0000000002211880(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 43.344859] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.351078] CR2: ffffffffffffffff CR3: 00000000a97e3000 CR4: 00000000001406f0 [ 43.358623] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 43.366197] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 43.373696] Call Trace: [ 43.376283] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 43.381801] RIP: 0033:0x472160 [ 43.385200] Code: 05 48 3d 01 f0 ff ff 0f 83 ed 52 f9 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 83 3d b1 0e 27 00 00 75 14 b8 23 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 c4 52 f9 ff c3 48 83 ec 08 e8 ea 74 fd ff [ 43.406751] RSP: 002b:00007fff8714a9f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000023 [ 43.415050] RAX: 0000000000000000 RBX: 00007fff8714aa40 RCX: 0000000000472160 [ 43.424170] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007fff8714aa00 [ 43.432332] RBP: 0000000000000006 R08: 0000000000000001 R09: 0000000002211880 [ 43.440478] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000a863 [ 43.448444] R13: 0000000000407940 R14: 0000000000000000 R15: 0000000000000000 [ 43.455849] Modules linked in: [ 43.459036] CR2: ffffffffffffffff [ 43.462695] ---[ end trace 105ca70c34b27fe1 ]--- [ 43.462748] BUG: unable to handle kernel NULL pointer dereference at 0000000000000007 [ 43.467696] RIP: 0010:do_syscall_64+0x14c/0x620 [ 43.476996] PGD 891b8067 P4D 891b8067 PUD 949a3067 PMD 0 [ 43.481753] Code: b8 00 00 00 00 00 fc ff df 65 48 8b 1c 25 00 70 00 70 48 89 da 48 c1 ea 03 80 3c 02 00 0f 85 84 04 00 00 48 c7 c0 c0 56 d2 88 <4c> 8b 23 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 0f [ 43.487639] Oops: 0002 [#2] PREEMPT SMP KASAN [ 43.507521] RSP: 0018:ffff888089007f28 EFLAGS: 00010246 [ 43.512378] CPU: 1 PID: 6495 Comm: syz-executor462 Tainted: G D 4.19.120-syzkaller #0 [ 43.517959] RAX: ffffffff88d256c0 RBX: ffffffffffffffff RCX: 1ffff11011200ff5 [ 43.527231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 43.534670] RDX: 1fffffffffffffff RSI: ffffffff81009b31 RDI: ffff888089007fa8 [ 43.545504] RIP: 0010:update_vsyscall+0x128/0x380 [ 43.553437] RBP: ffff888089007f58 R08: ffff888089e946c0 R09: 0000000000000000 [ 43.558448] Code: 48 8d 7d 1c 48 89 fa 48 c1 ea 03 89 05 69 25 9c 09 48 b8 00 00 00 00 00 fc ff df 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 <00> 00 00 00 0f 85 d8 01 00 00 8b 45 1c 48 8d 7d 70 48 89 fa 48 c1 [ 43.565976] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 43.586437] RSP: 0018:ffff8880ae707c48 EFLAGS: 00010002 [ 43.593793] R13: ffffffff88d256d8 R14: 0000000000000000 R15: 0000000000000000 [ 43.599245] RAX: 0000000000000007 RBX: ffffffff88d250c0 RCX: ffffffff8159a0cf [ 43.607644] FS: 0000000002211880(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 43.615184] RDX: 0000000000000000 RSI: ffffffff8100ba36 RDI: ffffffff8b8e1b3c [ 43.624201] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.632069] RBP: ffffffff8b8e1b20 R08: ffff8880a94be600 R09: 0000000000000001 [ 43.638089] CR2: ffffffffffffffff CR3: 00000000a97e3000 CR4: 00000000001406f0 [ 43.645762] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 43.654342] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 43.661787] R13: ffffffff8b8e1bb0 R14: 000000004a08dfb7 R15: ffffffff8b8e1b48 [ 43.669429] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 43.677044] FS: 00007f3325d06700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 43.684393] Kernel panic - not syncing: Fatal exception [ 43.692878] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.704532] CR2: 0000000000000007 CR3: 00000000958d5000 CR4: 00000000001406e0 [ 43.711886] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 43.719634] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 43.727290] Call Trace: [ 43.729870] [ 43.732028] ? lock_acquire+0x170/0x400 [ 43.736056] timekeeping_update+0x264/0x4a0 [ 43.740591] timekeeping_advance+0x647/0x990 [ 43.745579] ? tick_do_update_jiffies64.part.0+0x187/0x290 [ 43.751636] ? do_settimeofday64+0x3b0/0x3b0 [ 43.756128] ? lock_downgrade+0x740/0x740 [ 43.760339] ? tick_sched_do_timer+0x15c/0x1a0 [ 43.765115] tick_do_update_jiffies64.part.0+0x187/0x290 [ 43.770656] tick_sched_do_timer+0x15c/0x1a0 [ 43.775162] tick_sched_timer+0x29/0x130 [ 43.779485] __hrtimer_run_queues+0x2fc/0xd50 [ 43.783977] ? tick_sched_do_timer+0x1a0/0x1a0 [ 43.788769] ? hrtimer_fixup_activate+0x30/0x30 [ 43.793686] ? kvm_clock_read+0x14/0x30 [ 43.797733] ? ktime_get_update_offsets_now+0x2db/0x450 [ 43.803530] hrtimer_interrupt+0x312/0x770 [ 43.807854] smp_apic_timer_interrupt+0x10c/0x550 [ 43.812784] apic_timer_interrupt+0xf/0x20 [ 43.817533] [ 43.819766] RIP: 0010:console_unlock+0xe4b/0xfe0 [ 43.824537] Code: ff df 48 c1 e8 03 80 3c 10 00 0f 85 cf 00 00 00 48 83 3d 6f b6 7f 07 00 0f 84 ba 00 00 00 e8 0c 29 15 00 48 8b 7c 24 30 57 9d <0f> 1f 44 00 00 e9 80 f9 ff ff 48 8b 7c 24 18 e8 01 0e 4b 00 e9 4f [ 43.843907] RSP: 0018:ffff8880a7fcf898 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 [ 43.851872] RAX: ffff8880a94be600 RBX: 0000000000000200 RCX: 1ffffffff1238a88 [ 43.859353] RDX: 0000000000000000 RSI: ffffffff8152a064 RDI: 0000000000000293 [ 43.867269] RBP: 0000000000000001 R08: ffff8880a94be600 R09: fffffbfff11b1095 [ 43.874750] R10: fffffbfff11b1094 R11: ffffffff88d884a3 R12: ffffffff844e5c10 [ 43.882855] R13: 000000000000004f R14: dffffc0000000000 R15: ffffffff8945e450 [ 43.890339] ? netconsole_netdev_event+0x280/0x280 [ 43.895484] ? console_unlock+0xe44/0xfe0 [ 43.899725] ? con2fb_acquire_newinfo+0x300/0x300 [ 43.904744] do_con_write.part.0+0xe79/0x1db0 [ 43.909246] ? do_con_trol+0x5c00/0x5c00 [ 43.913619] ? mark_held_locks+0xa6/0xf0 [ 43.918075] con_write+0x41/0xe0 [ 43.921702] n_tty_write+0x3ee/0x1080 [ 43.925506] ? process_echoes+0x160/0x160 [ 43.929688] ? do_wait_intr_irq+0x270/0x270 [ 43.934032] ? __might_fault+0x192/0x1d0 [ 43.938131] tty_write+0x452/0x790 [ 43.942625] ? process_echoes+0x160/0x160 [ 43.946767] __vfs_write+0xf7/0x760 [ 43.950401] ? tty_read+0x290/0x290 [ 43.954055] ? kernel_read+0x110/0x110 [ 43.958058] ? __inode_security_revalidate+0xd3/0x120 [ 43.963363] ? avc_policy_seqno+0x9/0x70 [ 43.967550] ? selinux_file_permission+0x87/0x520 [ 43.972395] ? security_file_permission+0x84/0x220 [ 43.977528] vfs_write+0x206/0x550 [ 43.981371] ksys_write+0x12b/0x2a0 [ 43.984994] ? __ia32_sys_read+0xb0/0xb0 [ 43.990175] ? fput+0x2b/0x190 [ 43.993366] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 43.998120] ? trace_hardirqs_off_caller+0x55/0x210 [ 44.003240] ? do_syscall_64+0x21/0x620 [ 44.007210] do_syscall_64+0xf9/0x620 [ 44.011017] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 44.016236] RIP: 0033:0x446b79 [ 44.019423] Code: e8 fc b5 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 ab 08 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 44.038518] RSP: 002b:00007f3325d05d98 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 44.046453] RAX: ffffffffffffffda RBX: 00000000006dcc48 RCX: 0000000000446b79 [ 44.053887] RDX: 0000000000001006 RSI: 0000000020000000 RDI: 0000000000000006 [ 44.061237] RBP: 00000000006dcc40 R08: 0000000000000000 R09: 0000000000000000 [ 44.068496] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dcc4c [ 44.075973] R13: 00000000004aee64 R14: a07c6c90a71ef05a R15: 105c89af3f9b7711 [ 44.083290] Modules linked in: [ 44.086847] CR2: 0000000000000007 [ 44.090338] ---[ end trace 105ca70c34b27fe2 ]--- [ 44.095096] RIP: 0010:do_syscall_64+0x14c/0x620 [ 44.099756] Code: b8 00 00 00 00 00 fc ff df 65 48 8b 1c 25 00 70 00 70 48 89 da 48 c1 ea 03 80 3c 02 00 0f 85 84 04 00 00 48 c7 c0 c0 56 d2 88 <4c> 8b 23 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 0f [ 44.118657] RSP: 0018:ffff888089007f28 EFLAGS: 00010246 [ 44.132165] RAX: ffffffff88d256c0 RBX: ffffffffffffffff RCX: 1ffff11011200ff5 [ 44.139523] RDX: 1fffffffffffffff RSI: ffffffff81009b31 RDI: ffff888089007fa8 [ 44.146787] RBP: ffff888089007f58 R08: ffff888089e946c0 R09: 0000000000000000 [ 44.154127] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 44.161739] R13: ffffffff88d256d8 R14: 0000000000000000 R15: 0000000000000000 [ 44.169080] FS: 00007f3325d06700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 44.177288] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.183156] CR2: 0000000000000007 CR3: 00000000958d5000 CR4: 00000000001406e0 [ 44.190410] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 44.197666] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 44.812823] Shutting down cpus with NMI [ 44.818249] Kernel Offset: disabled [ 44.821882] Rebooting in 86400 seconds..