[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 63.322581][ T26] audit: type=1800 audit(1571055965.006:25): pid=8892 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 63.363312][ T26] audit: type=1800 audit(1571055965.016:26): pid=8892 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 63.398993][ T26] audit: type=1800 audit(1571055965.016:27): pid=8892 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.128' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program syzkaller login: [ 73.468533][ T9052] ================================================================== [ 73.476977][ T9052] BUG: KASAN: null-ptr-deref in llcp_sock_getname+0x358/0x460 [ 73.484441][ T9052] Read of size 3 at addr 0000000000000000 by task syz-executor387/9052 [ 73.492696][ T9052] [ 73.495043][ T9052] CPU: 0 PID: 9052 Comm: syz-executor387 Not tainted 5.4.0-rc1+ #0 [ 73.503020][ T9052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 73.513106][ T9052] Call Trace: executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 73.516410][ T9052] dump_stack+0x172/0x1f0 [ 73.520758][ T9052] ? llcp_sock_getname+0x358/0x460 [ 73.525902][ T9052] ? llcp_sock_getname+0x358/0x460 [ 73.531033][ T9052] __kasan_report.cold+0x5/0x41 [ 73.535914][ T9052] ? llcp_sock_getname+0x358/0x460 [ 73.541040][ T9052] kasan_report+0x12/0x20 [ 73.545382][ T9052] check_memory_region+0x134/0x1a0 [ 73.550508][ T9052] memcpy+0x24/0x50 [ 73.554358][ T9052] llcp_sock_getname+0x358/0x460 [ 73.559313][ T9052] __sys_getpeername+0x12b/0x290 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 73.564388][ T9052] ? __ia32_sys_getsockname+0xb0/0xb0 [ 73.569797][ T9052] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 73.575360][ T9052] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 73.580831][ T9052] ? do_syscall_64+0x26/0x760 [ 73.585515][ T9052] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 73.591589][ T9052] ? do_syscall_64+0x26/0x760 [ 73.596283][ T9052] __x64_sys_getpeername+0x73/0xb0 [ 73.601404][ T9052] do_syscall_64+0xfa/0x760 [ 73.605933][ T9052] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 73.611830][ T9052] RIP: 0033:0x4412b9 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 73.615747][ T9052] Code: e8 ac e8 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb 08 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 73.635532][ T9052] RSP: 002b:00007ffc88da3208 EFLAGS: 00000246 ORIG_RAX: 0000000000000034 [ 73.643969][ T9052] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004412b9 [ 73.651941][ T9052] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 73.659922][ T9052] RBP: 00000000006cb018 R08: 00000000004002c8 R09: 00000000004002c8 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 73.667906][ T9052] R10: 00000000004002c8 R11: 0000000000000246 R12: 0000000000402030 [ 73.675981][ T9052] R13: 00000000004020c0 R14: 0000000000000000 R15: 0000000000000000 [ 73.684033][ T9052] ================================================================== [ 73.692104][ T9052] Disabling lock debugging due to kernel taint [ 73.711057][ T9114] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 73.719674][ T9114] #PF: supervisor read access in kernel mode [ 73.726857][ T9114] #PF: error_code(0x0000) - not-present page [ 73.733152][ T9114] PGD 98cb3067 P4D 98cb3067 PUD 9deb9067 PMD 0 [ 73.740555][ T9114] Oops: 0000 [#1] PREEMPT SMP KASAN [ 73.747671][ T9114] CPU: 0 PID: 9114 Comm: syz-executor387 Tainted: G B 5.4.0-rc1+ #0 [ 73.757104][ T9114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 73.768617][ T9114] RIP: 0010:memcpy_erms+0x6/0x10 [ 73.774160][ T9114] Code: 90 90 90 90 eb 1e 0f 1f 00 48 89 f8 48 89 d1 48 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 c3 66 0f 1f 44 00 00 48 89 f8 48 89 d1 a4 c3 0f 1f 80 00 00 00 00 48 89 f8 48 83 fa 20 72 7e 40 38 fe [ 73.795412][ T9114] RSP: 0018:ffff888099d77d50 EFLAGS: 00010246 [ 73.802667][ T9114] RAX: ffff888099d77e12 RBX: ffff888099d77e00 RCX: 0000000000000003 [ 73.810831][ T9114] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ffff888099d77e12 [ 73.818798][ T9114] RBP: ffff888099d77d70 R08: 1ffff110133aefc2 R09: ffffed10133aefc3 [ 73.826764][ T9114] R10: ffffed10133aefc2 R11: ffff888099d77e14 R12: 0000000000000003 [ 73.834997][ T9114] R13: ffff888099d77e12 R14: 0000000000000000 R15: ffffffff88655760 [ 73.842976][ T9114] FS: 0000000001f0f880(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 73.852049][ T9114] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 73.858753][ T9114] CR2: 0000000000000000 CR3: 00000000a596e000 CR4: 00000000001406f0 [ 73.866717][ T9114] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 73.874681][ T9114] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 73.882631][ T9114] Call Trace: [ 73.885930][ T9114] ? memcpy+0x46/0x50 [ 73.889900][ T9114] llcp_sock_getname+0x358/0x460 [ 73.894819][ T9114] __sys_getpeername+0x12b/0x290 [ 73.900307][ T9114] ? __ia32_sys_getsockname+0xb0/0xb0 [ 73.905673][ T9114] ? up_read+0x1d2/0x810 [ 73.909906][ T9114] ? __kasan_check_write+0x14/0x20 [ 73.915000][ T9114] ? switch_fpu_return+0x1fa/0x4f0 [ 73.920275][ T9114] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 73.926610][ T9114] __x64_sys_getpeername+0x73/0xb0 [ 73.931714][ T9114] do_syscall_64+0xfa/0x760 [ 73.936756][ T9114] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 73.942862][ T9114] RIP: 0033:0x4412b9 [ 73.946892][ T9114] Code: e8 ac e8 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb 08 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 73.966498][ T9114] RSP: 002b:00007ffc88da3208 EFLAGS: 00000246 ORIG_RAX: 0000000000000034 [ 73.975064][ T9114] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004412b9 [ 73.983281][ T9114] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 73.991947][ T9114] RBP: 0000000000011f32 R08: 00000000004002c8 R09: 00000000004002c8 [ 74.000026][ T9114] R10: 00000000004002c8 R11: 0000000000000246 R12: 0000000000402030 [ 74.008016][ T9114] R13: 00000000004020c0 R14: 0000000000000000 R15: 0000000000000000 [ 74.015976][ T9114] Modules linked in: [ 74.020218][ T9114] CR2: 0000000000000000 [ 74.024488][ T9111] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 74.032315][ T9111] #PF: supervisor read access in kernel mode [ 74.038446][ T9111] #PF: error_code(0x0000) - not-present page [ 74.044410][ T9111] PGD 945dc067 P4D 945dc067 PUD 97276067 PMD 0 [ 74.050662][ T9111] Oops: 0000 [#2] PREEMPT SMP KASAN [ 74.055860][ T9111] CPU: 1 PID: 9111 Comm: syz-executor387 Tainted: G B D 5.4.0-rc1+ #0 [ 74.065593][ T9111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 74.076330][ T9111] RIP: 0010:memcpy_erms+0x6/0x10 [ 74.081270][ T9111] Code: 90 90 90 90 eb 1e 0f 1f 00 48 89 f8 48 89 d1 48 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 c3 66 0f 1f 44 00 00 48 89 f8 48 89 d1 a4 c3 0f 1f 80 00 00 00 00 48 89 f8 48 83 fa 20 72 7e 40 38 fe [ 74.102131][ T9111] RSP: 0018:ffff888095c2fd50 EFLAGS: 00010246 [ 74.108183][ T9111] RAX: ffff888095c2fe12 RBX: ffff888095c2fe00 RCX: 0000000000000003 [ 74.116236][ T9111] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ffff888095c2fe12 [ 74.124663][ T9111] RBP: ffff888095c2fd70 R08: 1ffff11012b85fc2 R09: ffffed1012b85fc3 [ 74.132655][ T9111] R10: ffffed1012b85fc2 R11: ffff888095c2fe14 R12: 0000000000000003 [ 74.140786][ T9111] R13: ffff888095c2fe12 R14: 0000000000000000 R15: ffffffff88655760 [ 74.148767][ T9111] FS: 0000000001f0f880(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 74.157678][ T9111] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.164243][ T9111] CR2: 0000000000000000 CR3: 00000000a8762000 CR4: 00000000001406e0 [ 74.172529][ T9111] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 74.180938][ T9111] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 74.188910][ T9111] Call Trace: [ 74.192189][ T9111] ? memcpy+0x46/0x50 [ 74.196162][ T9111] llcp_sock_getname+0x358/0x460 [ 74.201109][ T9111] __sys_getpeername+0x12b/0x290 [ 74.206042][ T9111] ? __ia32_sys_getsockname+0xb0/0xb0 [ 74.211421][ T9111] ? up_read+0x1d2/0x810 [ 74.215670][ T9111] ? __kasan_check_write+0x14/0x20 [ 74.220870][ T9111] ? switch_fpu_return+0x1fa/0x4f0 [ 74.225991][ T9111] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 74.232069][ T9111] __x64_sys_getpeername+0x73/0xb0 [ 74.237183][ T9111] do_syscall_64+0xfa/0x760 [ 74.241701][ T9111] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 74.247593][ T9111] RIP: 0033:0x4412b9 [ 74.251578][ T9111] Code: e8 ac e8 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb 08 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 74.272083][ T9111] RSP: 002b:00007ffc88da3208 EFLAGS: 00000246 ORIG_RAX: 0000000000000034 [ 74.280659][ T9111] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004412b9 [ 74.289034][ T9111] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 74.297143][ T9111] RBP: 0000000000011ecf R08: 00000000004002c8 R09: 00000000004002c8 [ 74.305291][ T9111] R10: 00000000004002c8 R11: 0000000000000246 R12: 0000000000402030 [ 74.313249][ T9111] R13: 00000000004020c0 R14: 0000000000000000 R15: 0000000000000000 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 74.321320][ T9111] Modules linked in: [ 74.325205][ T9111] CR2: 0000000000000000 [ 74.329376][ T9115] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 74.337315][ T9115] #PF: supervisor read access in kernel mode [ 74.343319][ T9115] #PF: error_code(0x0000) - not-present page [ 74.349298][ T9115] PGD 8a7cc067 P4D 8a7cc067 PUD 9b09d067 PMD 0 [ 74.356862][ T9115] Oops: 0000 [#3] PREEMPT SMP KASAN [ 74.362070][ T9115] CPU: 0 PID: 9115 Comm: syz-executor387 Tainted: G B D 5.4.0-rc1+ #0 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 74.371351][ T9115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 74.381428][ T9115] RIP: 0010:memcpy_erms+0x6/0x10 [ 74.386375][ T9115] Code: 90 90 90 90 eb 1e 0f 1f 00 48 89 f8 48 89 d1 48 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 c3 66 0f 1f 44 00 00 48 89 f8 48 89 d1 a4 c3 0f 1f 80 00 00 00 00 48 89 f8 48 83 fa 20 72 7e 40 38 fe [ 74.406133][ T9115] RSP: 0018:ffff888092287d50 EFLAGS: 00010246 [ 74.412207][ T9115] RAX: ffff888092287e12 RBX: ffff888092287e00 RCX: 0000000000000003 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 74.421750][ T9115] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ffff888092287e12 [ 74.429737][ T9115] RBP: ffff888092287d70 R08: 1ffff11012450fc2 R09: ffffed1012450fc3 [ 74.437719][ T9115] R10: ffffed1012450fc2 R11: ffff888092287e14 R12: 0000000000000003 [ 74.445702][ T9115] R13: ffff888092287e12 R14: 0000000000000000 R15: ffffffff88655760 [ 74.453693][ T9115] FS: 0000000001f0f880(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 74.462718][ T9115] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 executing program executing program executing program [ 74.463841][ T9111] ---[ end trace 2437b54ce6ca3415 ]--- [ 74.469299][ T9115] CR2: 0000000000000000 CR3: 0000000096de9000 CR4: 00000000001406f0 [ 74.469309][ T9115] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 74.469317][ T9115] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 74.469321][ T9115] Call Trace: [ 74.469338][ T9115] ? memcpy+0x46/0x50 [ 74.469357][ T9115] llcp_sock_getname+0x358/0x460 [ 74.478331][ T9111] RIP: 0010:memcpy_erms+0x6/0x10 executing program [ 74.482765][ T9115] __sys_getpeername+0x12b/0x290 [ 74.482779][ T9115] ? __ia32_sys_getsockname+0xb0/0xb0 [ 74.482790][ T9115] ? up_read+0x1d2/0x810 [ 74.482808][ T9115] ? __kasan_check_write+0x14/0x20 [ 74.495194][ T9111] Code: 90 90 90 90 eb 1e 0f 1f 00 48 89 f8 48 89 d1 48 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 c3 66 0f 1f 44 00 00 48 89 f8 48 89 d1 a4 c3 0f 1f 80 00 00 00 00 48 89 f8 48 83 fa 20 72 7e 40 38 fe [ 74.499326][ T9115] ? switch_fpu_return+0x1fa/0x4f0 [ 74.499342][ T9115] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 74.499360][ T9115] __x64_sys_getpeername+0x73/0xb0 [ 74.503129][ T9111] RSP: 0018:ffff888099d77d50 EFLAGS: 00010246 [ 74.509497][ T9115] do_syscall_64+0xfa/0x760 [ 74.509520][ T9115] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 74.509530][ T9115] RIP: 0033:0x4412b9 [ 74.509545][ T9115] Code: e8 ac e8 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb 08 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 74.509550][ T9115] RSP: 002b:00007ffc88da3208 EFLAGS: 00000246 ORIG_RAX: 0000000000000034 [ 74.518186][ T9111] RAX: ffff888099d77e12 RBX: ffff888099d77e00 RCX: 0000000000000003 [ 74.519430][ T9115] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004412b9 [ 74.519438][ T9115] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 74.519446][ T9115] RBP: 0000000000011fc1 R08: 00000000004002c8 R09: 00000000004002c8 [ 74.519453][ T9115] R10: 00000000004002c8 R11: 0000000000000246 R12: 0000000000402030 [ 74.519459][ T9115] R13: 00000000004020c0 R14: 0000000000000000 R15: 0000000000000000 [ 74.519471][ T9115] Modules linked in: [ 74.528193][ T9111] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ffff888099d77e12 [ 74.529766][ T9115] CR2: 0000000000000000 [ 74.530513][ T9052] Kernel panic - not syncing: panic_on_warn set ... [ 74.536109][ T9111] RBP: ffff888099d77d70 R08: 1ffff110133aefc2 R09: ffffed10133aefc3 [ 74.540470][ T9052] Kernel Offset: disabled [ 74.707692][ T9052] Rebooting in 86400 seconds..