INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.22' (ECDSA) to the list of known hosts. 2018/03/31 09:50:13 parsed 1 programs 2018/03/31 09:50:13 executed programs: 0 syzkaller login: [ 41.497936] IPVS: Creating netns size=2536 id=1 [ 41.518516] IPVS: Creating netns size=2536 id=2 [ 41.540302] IPVS: Creating netns size=2536 id=3 RESULT: signal 0, coverage 0 errno 0 [ 41.562273] IPVS: Creating netns size=2536 id=4 RESULT: signal 0, coverage 0 errno 0 [ 41.596340] IPVS: Creating netns size=2536 id=5 RESULT: signal 0, coverage 0 errno 0 [ 41.618731] IPVS: Creating netns size=2536 id=6 [ 41.653480] IPVS: Creating netns size=2536 id=7 [ 41.686436] IPVS: Creating netns size=2536 id=8 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 RESULT: signal 0, coverage 0 errno 0 [ 45.574516] kasan: CONFIG_KASAN_INLINE enabled [ 45.579958] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 45.588675] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 45.594979] Dumping ftrace buffer: [ 45.598486] (ftrace buffer empty) [ 45.602166] Modules linked in: [ 45.605445] CPU: 1 PID: 4125 Comm: syz-executor7 Not tainted 4.9.91-gcc88c05 #9 [ 45.612859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 45.622183] task: ffff8801d69b3000 task.stack: ffff8801c67d0000 [ 45.628205] RIP: 0010:[] [] sg_remove_scat.isra.19+0x17b/0x2d0 [ 45.637482] RSP: 0018:ffff8801c67d7ac0 EFLAGS: 00010202 [ 45.642897] RAX: 1ffff1003ad6144d RBX: ffff8801d6b0a258 RCX: 0000000000000002 [ 45.650136] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffff8801d62d801c [ 45.657377] RBP: ffff8801c67d7b10 R08: 0000000000000000 R09: ffffed003af3d8d1 [ 45.664618] R10: 0000000000000005 R11: ffffed003af3d8d0 R12: 0000000000000002 [ 45.671858] R13: 0000000000000010 R14: 0000000000000000 R15: dffffc0000000000 [ 45.679101] FS: 0000000000000000(0000) GS:ffff8801db300000(0063) knlGS:00000000f76feb40 [ 45.687295] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 45.693155] CR2: 00000000f76fedb0 CR3: 00000001be9ea000 CR4: 0000000000160670 [ 45.700396] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 45.707634] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 45.714966] Stack: [ 45.717085] ffff8801d6b0a270 ffffed003ad6144b ffffed003ad6144e ffff8801d6b0a268 [ 45.725045] ffff8801d62d8000 ffff8801d6b0a240 0000000000000000 0000000000000000 [ 45.733004] 0000000000000000 ffff8801d6b0a338 ffff8801c67d7b50 ffffffff82669686 [ 45.740964] Call Trace: [ 45.743521] [] sg_finish_rem_req+0x2a6/0x320 [ 45.749546] [] sg_read+0xa22/0x1470 [ 45.754790] [] ? sg_proc_seq_show_debug+0xd90/0xd90 [ 45.761427] [] ? debug_check_no_locks_freed+0x2c0/0x2c0 [ 45.768407] [] ? sg_proc_seq_show_debug+0xd90/0xd90 [ 45.775045] [] __vfs_read+0x103/0x670 [ 45.780493] [] ? default_llseek+0x290/0x290 [ 45.786434] [] ? fsnotify+0x86/0xf30 [ 45.791764] [] ? fsnotify+0xf30/0xf30 [ 45.797183] [] ? avc_policy_seqno+0x9/0x20 [ 45.803039] [] ? selinux_file_permission+0x82/0x460 [ 45.809673] [] ? security_file_permission+0x89/0x1e0 [ 45.816393] [] ? rw_verify_area+0xe5/0x2b0 [ 45.822246] [] vfs_read+0x11e/0x380 [ 45.827501] [] SyS_read+0xd9/0x1b0 [ 45.832658] [] ? vfs_copy_file_range+0x740/0x740 [ 45.839447] [] ? do_fast_syscall_32+0xcf/0x870 [ 45.845651] [] ? vfs_copy_file_range+0x740/0x740 [ 45.852024] [] do_fast_syscall_32+0x2f5/0x870 [ 45.858135] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 45.864771] [] entry_SYSENTER_compat+0x90/0xa2 [ 45.870967] Code: 45 b8 eb 3e e8 c7 13 d0 fe 48 8b 45 c8 48 c1 e8 03 42 80 3c 38 00 0f 85 3a 01 00 00 4c 8b 73 10 4b 8d 14 2e 48 89 d1 48 c1 e9 03 <42> 80 3c 39 00 0f 85 0b 01 00 00 48 8b 12 49 83 c5 08 48 85 d2 [ 45.897478] RIP [] sg_remove_scat.isra.19+0x17b/0x2d0 [ 45.904417] RSP [ 45.908259] ---[ end trace 43f9b97de340781c ]--- [ 45.913018] Kernel panic - not syncing: Fatal exception [ 45.918707] Dumping ftrace buffer: [ 45.922216] (ftrace buffer empty) [ 45.925896] Kernel Offset: disabled [ 45.929494] Rebooting in 86400 seconds..