[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.61' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 46.079652] audit: type=1400 audit(1591806322.932:8): avc: denied { execmem } for pid=6431 comm="syz-executor457" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 46.164966] kasan: CONFIG_KASAN_INLINE enabled [ 46.164979] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 46.164994] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 46.165007] CPU: 0 PID: 6432 Comm: syz-executor457 Not tainted 4.19.127-syzkaller #0 [ 46.165014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 46.165032] RIP: 0010:do_con_write.part.0+0x9c3/0x1db0 [ 46.165044] Code: 24 b6 00 00 00 45 01 ef e8 3a 2a c7 fd 48 8b 44 24 78 80 38 00 0f 85 4c 12 00 00 49 8b 9c 24 a0 03 00 00 48 89 d8 48 c1 e8 03 <0f> b6 14 28 48 89 d8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 c8 [ 46.165050] RSP: 0018:ffff8880a66977c0 EFLAGS: 00010203 [ 46.165059] RAX: 0000000020000001 RBX: 000000010000000e RCX: ffffffff83a06036 [ 46.165066] RDX: 0000000000000000 RSI: ffffffff83a06086 RDI: 0000000000000003 [ 46.165072] RBP: dffffc0000000000 R08: ffff8880a6366300 R09: 0000000000000004 [ 46.165078] R10: ffffed1015cc473a R11: ffff8880ae6239d3 R12: ffff8880a648f440 [ 46.165084] R13: 0000000000000000 R14: ffff8880a648f7cc R15: 000000000000075e [ 46.165093] FS: 00007f9ada69d700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 46.165099] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 46.165105] CR2: 00005615c1cbd9a8 CR3: 0000000091576000 CR4: 00000000001406f0 [ 46.165115] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 46.165119] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 46.165121] Call Trace: [ 46.165138] ? do_con_trol+0x5a80/0x5a80 [ 46.165152] ? n_tty_receive_buf_common+0xb82/0x2a90 [ 46.165167] con_put_char+0xf0/0x100 [ 46.165179] ? do_con_write.part.0+0x1db0/0x1db0 [ 46.165193] ? do_con_write.part.0+0x1db0/0x1db0 [ 46.165204] tty_put_char+0xb7/0x150 [ 46.165216] ? dev_match_devt+0x90/0x90 [ 46.165228] ? n_tty_receive_signal_char+0xc5/0x110 [ 46.165240] ? con_write_room+0x59/0x70 [ 46.165252] __process_echoes+0x56d/0xa00 [ 46.165268] n_tty_receive_buf_common+0xbc1/0x2a90 [ 46.165286] ? n_tty_receive_buf2+0x40/0x40 [ 46.165297] tty_ioctl+0xe0e/0x1420 [ 46.165309] ? tty_vhangup+0x30/0x30 [ 46.165322] ? mark_held_locks+0xf0/0xf0 [ 46.165339] ? debug_check_no_obj_freed+0x1f5/0x3e1 [ 46.165356] ? tty_vhangup+0x30/0x30 [ 46.165369] do_vfs_ioctl+0xcda/0x12e0 [ 46.165384] ? selinux_file_ioctl+0x46c/0x5d0 [ 46.165396] ? selinux_file_ioctl+0x125/0x5d0 [ 46.165407] ? check_preemption_disabled+0x41/0x280 [ 46.165417] ? ioctl_preallocate+0x200/0x200 [ 46.165429] ? selinux_socket_sock_rcv_skb+0x570/0x570 [ 46.165439] ? __fget+0x345/0x520 [ 46.165457] ? ksys_dup3+0x3c0/0x3c0 [ 46.165467] ? __se_sys_futex+0x2ac/0x3f0 [ 46.165475] ? __se_sys_futex+0x2b6/0x3f0 [ 46.165487] ? security_file_ioctl+0x6c/0xb0 [ 46.165495] ksys_ioctl+0x9b/0xc0 [ 46.165504] __x64_sys_ioctl+0x6f/0xb0 [ 46.165512] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 46.165524] do_syscall_64+0xf9/0x620 [ 46.165539] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 46.165547] RIP: 0033:0x445ab9 [ 46.165558] Code: e8 fc b8 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 8b 12 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 46.165564] RSP: 002b:00007f9ada69cdb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 46.165575] RAX: ffffffffffffffda RBX: 00000000006dac28 RCX: 0000000000445ab9 [ 46.165582] RDX: 00000000200000c0 RSI: 0000000000005412 RDI: 0000000000000004 [ 46.165588] RBP: 00000000006dac20 R08: 0000000000000000 R09: 0000000000000000 [ 46.165595] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dac2c [ 46.165601] R13: 00007ffd106db2ff R14: 00007f9ada69d9c0 R15: 20c49ba5e353f7cf [ 46.165611] Modules linked in: [ 46.165626] ---[ end trace 1574e1cc4569987d ]--- [ 46.165638] RIP: 0010:do_con_write.part.0+0x9c3/0x1db0 [ 46.165648] Code: 24 b6 00 00 00 45 01 ef e8 3a 2a c7 fd 48 8b 44 24 78 80 38 00 0f 85 4c 12 00 00 49 8b 9c 24 a0 03 00 00 48 89 d8 48 c1 e8 03 <0f> b6 14 28 48 89 d8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 c8 [ 46.165654] RSP: 0018:ffff8880a66977c0 EFLAGS: 00010203 [ 46.165662] RAX: 0000000020000001 RBX: 000000010000000e RCX: ffffffff83a06036 [ 46.165668] RDX: 0000000000000000 RSI: ffffffff83a06086 RDI: 0000000000000003 [ 46.165674] RBP: dffffc0000000000 R08: ffff8880a6366300 R09: 0000000000000004 [ 46.165681] R10: ffffed1015cc473a R11: ffff8880ae6239d3 R12: ffff8880a648f440 [ 46.165688] R13: 0000000000000000 R14: ffff8880a648f7cc R15: 000000000000075e [ 46.165697] FS: 00007f9ada69d700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 46.165705] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 46.165712] CR2: 00005615c1cbd9a8 CR3: 0000000091576000 CR4: 00000000001406f0 [ 46.165723] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 46.165730] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 46.165735] Kernel panic - not syncing: Fatal exception [ 46.166908] Kernel Offset: disabled [ 46.632316] Rebooting in 86400 seconds..