Warning: Permanently added '10.128.0.150' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 40.433645] audit: type=1400 audit(1589137558.335:8): avc: denied { execmem } for pid=6450 comm="syz-executor869" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 40.454241] ================================================================== [ 40.461685] BUG: KASAN: null-ptr-deref in choke_reset+0x208/0x340 [ 40.467914] Write of size 8 at addr 0000000000000000 by task syz-executor869/6450 [ 40.475509] [ 40.477153] CPU: 0 PID: 6450 Comm: syz-executor869 Not tainted 4.19.122-syzkaller #0 [ 40.485010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 40.494356] Call Trace: [ 40.496953] dump_stack+0x188/0x20d [ 40.500568] ? choke_reset+0x208/0x340 [ 40.504438] kasan_report.cold+0x194/0x2b9 [ 40.508654] memset+0x20/0x40 [ 40.511758] choke_reset+0x208/0x340 [ 40.515455] ? choke_destroy+0x40/0x40 [ 40.519324] qdisc_reset+0x6b/0x4c0 [ 40.522934] dev_deactivate_queue.constprop.0+0x138/0x220 [ 40.528453] dev_deactivate_many+0xe2/0xb30 [ 40.532771] dev_deactivate+0xfe/0x1d0 [ 40.536638] ? dev_deactivate_many+0xb30/0xb30 [ 40.541203] qdisc_graft+0xbf3/0xf90 [ 40.544894] ? qdisc_create+0x845/0x1170 [ 40.548952] ? tc_dump_tclass+0x480/0x480 [ 40.553093] ? nla_parse+0x1f3/0x2f0 [ 40.556789] tc_modify_qdisc+0xb9c/0x1929 [ 40.560921] ? qdisc_create+0x1170/0x1170 [ 40.565047] ? mutex_trylock+0x1a0/0x1a0 [ 40.569094] ? qdisc_create+0x1170/0x1170 [ 40.573223] rtnetlink_rcv_msg+0x453/0xaf0 [ 40.577441] ? rtnetlink_put_metrics+0x520/0x520 [ 40.582204] ? find_held_lock+0x2d/0x110 [ 40.586260] netlink_rcv_skb+0x160/0x410 [ 40.590307] ? rtnetlink_put_metrics+0x520/0x520 [ 40.595041] ? netlink_ack+0xa60/0xa60 [ 40.598914] netlink_unicast+0x4d7/0x6a0 [ 40.602970] ? netlink_attachskb+0x710/0x710 [ 40.607367] netlink_sendmsg+0x80b/0xcd0 [ 40.611411] ? netlink_unicast+0x6a0/0x6a0 [ 40.615625] ? move_addr_to_kernel.part.0+0x110/0x110 [ 40.620798] ? netlink_unicast+0x6a0/0x6a0 [ 40.625010] sock_sendmsg+0xcf/0x120 [ 40.628702] ___sys_sendmsg+0x803/0x920 [ 40.632655] ? copy_msghdr_from_user+0x410/0x410 [ 40.637399] ? rcu_read_lock_sched_held+0x10a/0x130 [ 40.642510] ? kmem_cache_alloc+0x31b/0x710 [ 40.646826] ? mark_held_locks+0xf0/0xf0 [ 40.650885] ? percpu_counter_add_batch+0x123/0x180 [ 40.655883] ? alloc_empty_file+0xd7/0x170 [ 40.660100] ? find_held_lock+0x2d/0x110 [ 40.664148] ? __fd_install+0x1b4/0x610 [ 40.668102] ? __fget_light+0x1a2/0x230 [ 40.672057] __sys_sendmsg+0xec/0x1b0 [ 40.675849] ? __ia32_sys_shutdown+0x70/0x70 [ 40.680242] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 40.684975] ? trace_hardirqs_off_caller+0x55/0x210 [ 40.689970] ? do_syscall_64+0x21/0x620 [ 40.693926] do_syscall_64+0xf9/0x620 [ 40.697710] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 40.702882] RIP: 0033:0x440719 [ 40.706056] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 40.724938] RSP: 002b:00007ffd1c3e99b8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 40.732640] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000440719 [ 40.739889] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000006 [ 40.747137] RBP: 0000000000000001 R08: 00000000ffffffff R09: 00000000004002c8 [ 40.754383] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000007166 [ 40.761642] R13: 0000000000402030 R14: 0000000000000000 R15: 0000000000000000 [ 40.768893] ================================================================== [ 40.776224] Disabling lock debugging due to kernel taint [ 40.781720] Kernel panic - not syncing: panic_on_warn set ... [ 40.781720] [ 40.789087] CPU: 0 PID: 6450 Comm: syz-executor869 Tainted: G B 4.19.122-syzkaller #0 [ 40.798345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 40.807689] Call Trace: [ 40.810276] dump_stack+0x188/0x20d [ 40.813903] panic+0x26a/0x50e [ 40.817094] ? __warn_printk+0xf3/0xf3 [ 40.821074] ? choke_reset+0x208/0x340 [ 40.824940] ? trace_hardirqs_on+0x55/0x210 [ 40.829258] ? choke_reset+0x208/0x340 [ 40.833220] kasan_end_report+0x43/0x49 [ 40.837173] kasan_report.cold+0xa4/0x2b9 [ 40.841301] memset+0x20/0x40 [ 40.844383] choke_reset+0x208/0x340 [ 40.848075] ? choke_destroy+0x40/0x40 [ 40.851939] qdisc_reset+0x6b/0x4c0 [ 40.855544] dev_deactivate_queue.constprop.0+0x138/0x220 [ 40.861058] dev_deactivate_many+0xe2/0xb30 [ 40.865474] dev_deactivate+0xfe/0x1d0 [ 40.869341] ? dev_deactivate_many+0xb30/0xb30 [ 40.874005] qdisc_graft+0xbf3/0xf90 [ 40.877696] ? qdisc_create+0x845/0x1170 [ 40.881734] ? tc_dump_tclass+0x480/0x480 [ 40.885862] ? nla_parse+0x1f3/0x2f0 [ 40.889568] tc_modify_qdisc+0xb9c/0x1929 [ 40.893708] ? qdisc_create+0x1170/0x1170 [ 40.897846] ? mutex_trylock+0x1a0/0x1a0 [ 40.901900] ? qdisc_create+0x1170/0x1170 [ 40.906026] rtnetlink_rcv_msg+0x453/0xaf0 [ 40.910271] ? rtnetlink_put_metrics+0x520/0x520 [ 40.915019] ? find_held_lock+0x2d/0x110 [ 40.919058] netlink_rcv_skb+0x160/0x410 [ 40.923097] ? rtnetlink_put_metrics+0x520/0x520 [ 40.927841] ? netlink_ack+0xa60/0xa60 [ 40.931708] netlink_unicast+0x4d7/0x6a0 [ 40.935758] ? netlink_attachskb+0x710/0x710 [ 40.940145] netlink_sendmsg+0x80b/0xcd0 [ 40.944185] ? netlink_unicast+0x6a0/0x6a0 [ 40.948398] ? move_addr_to_kernel.part.0+0x110/0x110 [ 40.953566] ? netlink_unicast+0x6a0/0x6a0 [ 40.957776] sock_sendmsg+0xcf/0x120 [ 40.961465] ___sys_sendmsg+0x803/0x920 [ 40.965416] ? copy_msghdr_from_user+0x410/0x410 [ 40.970149] ? rcu_read_lock_sched_held+0x10a/0x130 [ 40.975142] ? kmem_cache_alloc+0x31b/0x710 [ 40.979452] ? mark_held_locks+0xf0/0xf0 [ 40.983491] ? percpu_counter_add_batch+0x123/0x180 [ 40.988486] ? alloc_empty_file+0xd7/0x170 [ 40.992698] ? find_held_lock+0x2d/0x110 [ 40.996737] ? __fd_install+0x1b4/0x610 [ 41.000695] ? __fget_light+0x1a2/0x230 [ 41.004647] __sys_sendmsg+0xec/0x1b0 [ 41.008438] ? __ia32_sys_shutdown+0x70/0x70 [ 41.012859] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 41.017590] ? trace_hardirqs_off_caller+0x55/0x210 [ 41.022580] ? do_syscall_64+0x21/0x620 [ 41.026532] do_syscall_64+0xf9/0x620 [ 41.030314] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 41.035477] RIP: 0033:0x440719 [ 41.038660] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 41.057536] RSP: 002b:00007ffd1c3e99b8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 41.065220] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000440719 [ 41.072467] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000006 [ 41.079728] RBP: 0000000000000001 R08: 00000000ffffffff R09: 00000000004002c8 [ 41.086973] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000007166 [ 41.094216] R13: 0000000000402030 R14: 0000000000000000 R15: 0000000000000000 [ 41.102736] Kernel Offset: disabled [ 41.106357] Rebooting in 86400 seconds..