[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.194' (ECDSA) to the list of known hosts. 2020/09/03 19:17:41 parsed 1 programs 2020/09/03 19:17:41 executed programs: 0 syzkaller login: [ 38.975645] audit: type=1400 audit(1599160661.535:8): avc: denied { execmem } for pid=6509 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 40.048554] IPVS: ftp: loaded support on port[0] = 21 [ 40.159710] chnl_net:caif_netlink_parms(): no params data found [ 40.235817] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.243025] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.250173] device bridge_slave_0 entered promiscuous mode [ 40.258108] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.264762] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.271698] device bridge_slave_1 entered promiscuous mode [ 40.289565] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 40.298772] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 40.317940] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 40.325324] team0: Port device team_slave_0 added [ 40.330844] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 40.338731] team0: Port device team_slave_1 added [ 40.353935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.360204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.385445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.397033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.403435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.429094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.440117] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 40.447804] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 40.466971] device hsr_slave_0 entered promiscuous mode [ 40.472743] device hsr_slave_1 entered promiscuous mode [ 40.478718] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 40.485994] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 40.554188] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.560716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.567645] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.574063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.605991] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 40.612085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.621157] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 40.630419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.641020] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.648298] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.655673] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 40.666721] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 40.673198] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.681763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.691307] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.697840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.707881] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.715955] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.722352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.737436] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.745738] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.760420] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 40.770736] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.781828] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 40.790057] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.798344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.807262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.814994] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.826721] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 40.834478] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.841104] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.851970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.866667] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 40.876398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.910289] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 40.917469] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 40.925272] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 40.935382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.943042] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.949832] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.959425] device veth0_vlan entered promiscuous mode [ 40.968631] device veth1_vlan entered promiscuous mode [ 40.974965] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 40.983632] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 40.995970] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 41.005226] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.012927] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.020305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.030274] device veth0_macvtap entered promiscuous mode [ 41.036940] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 41.045915] device veth1_macvtap entered promiscuous mode [ 41.055412] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 41.064385] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 41.074838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.081606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.090963] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.101502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.108600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.937340] kasan: CONFIG_KASAN_INLINE enabled [ 41.942460] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 41.949834] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 41.956046] CPU: 1 PID: 6890 Comm: syz-executor.0 Not tainted 4.19.143-syzkaller #0 [ 41.963849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 41.973198] RIP: 0010:__sock_release+0xbb/0x2a0 [ 41.977856] Code: ff df 48 c1 ea 03 80 3c 02 00 0f 85 c9 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 63 28 49 8d 7c 24 10 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 b2 01 00 00 48 89 df 41 ff 54 24 10 48 8d 7b 20 [ 41.996738] RSP: 0018:ffff88808618fdf8 EFLAGS: 00010202 [ 42.002165] RAX: dffffc0000000000 RBX: ffff888093766900 RCX: 0000000000001879 [ 42.009412] RDX: 0000000000000002 RSI: 000000007fddc9ed RDI: 0000000000000010 [ 42.016764] RBP: ffff888093766a08 R08: ffffffff8b3f6c48 R09: 0000000000000000 [ 42.024010] R10: ffff888086248f48 R11: 0000000000000000 R12: 0000000000000000 [ 42.031258] R13: ffff888093766928 R14: 0000000000000000 R15: ffff8880a943fa20 [ 42.038522] FS: 0000000001bde940(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 42.046730] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.052590] CR2: 00007f3106d1adb8 CR3: 0000000086b3a000 CR4: 00000000001406e0 [ 42.059880] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 42.067149] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 42.074395] Call Trace: [ 42.076965] ? __sock_release+0x2a0/0x2a0 [ 42.081101] sock_close+0x15/0x20 [ 42.084541] __fput+0x2ce/0x890 [ 42.087802] task_work_run+0x148/0x1c0 [ 42.091674] exit_to_usermode_loop+0x251/0x2a0 [ 42.096243] do_syscall_64+0x538/0x620 [ 42.100119] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 42.105303] RIP: 0033:0x416f01 [ 42.108495] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 42.127413] RSP: 002b:00007ffea77a9620 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 42.135099] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000416f01 [ 42.142347] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 0000000000000003 [ 42.149614] RBP: 0000000000000000 R08: 00000000011902e0 R09: 0000000000000000 [ 42.156881] R10: 00007ffea77a9700 R11: 0000000000000293 R12: 00000000011902e8 [ 42.164148] R13: 0000000000000001 R14: ffffffffffffffff R15: 000000000118cfec [ 42.171540] Modules linked in: [ 42.175537] Bluetooth: hci0: command 0x0409 tx timeout [ 42.189143] ---[ end trace 1a5a8b496f74f38e ]--- [ 42.194094] RIP: 0010:__sock_release+0xbb/0x2a0 [ 42.198745] Code: ff df 48 c1 ea 03 80 3c 02 00 0f 85 c9 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 63 28 49 8d 7c 24 10 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 b2 01 00 00 48 89 df 41 ff 54 24 10 48 8d 7b 20 [ 42.218638] RSP: 0018:ffff88808618fdf8 EFLAGS: 00010202 [ 42.224428] RAX: dffffc0000000000 RBX: ffff888093766900 RCX: 0000000000001879 [ 42.232117] RDX: 0000000000000002 RSI: 000000007fddc9ed RDI: 0000000000000010 [ 42.239377] RBP: ffff888093766a08 R08: ffffffff8b3f6c48 R09: 0000000000000000 [ 42.248116] R10: ffff888086248f48 R11: 0000000000000000 R12: 0000000000000000 [ 42.255858] R13: ffff888093766928 R14: 0000000000000000 R15: ffff8880a943fa20 [ 42.263395] FS: 0000000001bde940(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 42.271836] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.277747] CR2: 00007f3106d1adb8 CR3: 0000000086b3a000 CR4: 00000000001406e0 [ 42.285077] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 42.292393] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 42.299650] Kernel panic - not syncing: Fatal exception [ 42.306395] Kernel Offset: disabled [ 42.310010] Rebooting in 86400 seconds..