[ OK ] Started OpenBSD Secure Shell server. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.17' (ECDSA) to the list of known hosts. 2020/08/28 07:34:06 parsed 1 programs 2020/08/28 07:34:06 executed programs: 0 syzkaller login: [ 146.860853] audit: type=1400 audit(1598600046.392:8): avc: denied { execmem } for pid=6370 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 148.019195] IPVS: ftp: loaded support on port[0] = 21 [ 148.117521] chnl_net:caif_netlink_parms(): no params data found [ 148.174857] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.181538] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.189354] device bridge_slave_0 entered promiscuous mode [ 148.196861] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.204056] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.211041] device bridge_slave_1 entered promiscuous mode [ 148.228115] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 148.237047] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 148.255464] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 148.262845] team0: Port device team_slave_0 added [ 148.269111] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 148.276856] team0: Port device team_slave_1 added [ 148.291684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.298069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.324326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.336511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.342795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.368872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.379837] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 148.387600] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 148.406092] device hsr_slave_0 entered promiscuous mode [ 148.411730] device hsr_slave_1 entered promiscuous mode [ 148.418461] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 148.425901] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 148.494519] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.500996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.508217] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.514657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.544330] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 148.550459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.559187] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 148.568462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 148.587682] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.594962] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.605302] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 148.611422] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.620801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 148.628917] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.635346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.653968] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 148.661600] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.668126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.675634] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 148.683500] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 148.692930] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 148.700006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 148.710350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 148.720263] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 148.726370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 148.738600] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 148.748001] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 148.756573] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 148.767239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.823178] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 148.833112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 148.865854] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 148.872933] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 148.881137] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 148.890989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 148.899255] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 148.906634] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 148.917822] device veth0_vlan entered promiscuous mode [ 148.927783] device veth1_vlan entered promiscuous mode [ 148.934092] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 148.942335] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 148.954105] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 148.963134] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 148.971252] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 148.979277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 148.988821] device veth0_macvtap entered promiscuous mode [ 148.995049] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 149.004709] device veth1_macvtap entered promiscuous mode [ 149.013171] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 149.022565] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 149.032999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.040213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 149.059254] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 149.069503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.076833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 149.086045] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 149.870722] kasan: CONFIG_KASAN_INLINE enabled [ 149.875591] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 149.883111] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 149.889347] Modules linked in: [ 149.892521] CPU: 1 PID: 6774 Comm: syz-executor.0 Not tainted 4.14.195-syzkaller #0 [ 149.900330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 149.909771] task: ffff8880a86aa600 task.stack: ffff888085550000 [ 149.915829] RIP: 0010:__sock_release+0xbb/0x2b0 [ 149.920496] RSP: 0018:ffff888085557dc0 EFLAGS: 00010202 [ 149.925840] RAX: dffffc0000000000 RBX: ffff88808239f5c0 RCX: 000000000000754e [ 149.933443] RDX: 0000000000000002 RSI: 0000000000000001 RDI: 0000000000000010 [ 149.940792] RBP: ffff88808239f6d0 R08: ffffffff8a0b43f0 R09: 000000000004044f [ 149.948064] R10: ffff8880a86aae88 R11: ffff8880a86aa600 R12: 0000000000000000 [ 149.955320] R13: ffff88808239f5e8 R14: 0000000000000000 R15: ffff888091bad850 [ 149.962893] FS: 00007fce17977700(0000) GS:ffff8880aeb00000(0000) knlGS:0000000000000000 [ 149.971291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 149.977160] CR2: 0000000000000000 CR3: 00000000a938d000 CR4: 00000000001406e0 [ 149.984418] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 149.991748] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 149.999057] Call Trace: [ 150.001656] ? __sock_release+0x2b0/0x2b0 [ 150.005783] sock_close+0x15/0x20 [ 150.009219] __fput+0x25f/0x7a0 [ 150.012478] task_work_run+0x11f/0x190 [ 150.016369] exit_to_usermode_loop+0x1ad/0x200 [ 150.020933] do_syscall_64+0x4a3/0x640 [ 150.024823] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 150.030440] RIP: 0033:0x45d5b9 [ 150.033606] RSP: 002b:00007fce17976c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 150.041319] RAX: 0000000000000000 RBX: 0000000000002ac0 RCX: 000000000045d5b9 [ 150.048574] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 150.055833] RBP: 000000000118cf88 R08: 0000000000000000 R09: 0000000000000000 [ 150.063102] R10: 0000000020000000 R11: 0000000000000246 R12: 000000000118cf4c [ 150.070411] R13: 00007ffda4823a0f R14: 00007fce179779c0 R15: 000000000118cf4c [ 150.077746] Code: fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 d5 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 63 28 49 8d 7c 24 10 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 be 01 00 00 48 89 df 41 ff 54 24 10 48 8d 7b [ 150.096966] RIP: __sock_release+0xbb/0x2b0 RSP: ffff888085557dc0 [ 150.103837] Bluetooth: hci0 command 0x0409 tx timeout [ 150.111103] ---[ end trace e9fabf8cfb573128 ]--- [ 150.116194] Kernel panic - not syncing: Fatal exception [ 150.122699] Kernel Offset: disabled [ 150.126324] Rebooting in 86400 seconds..