[ 32.956188][ T27] audit: type=1800 audit(1550447654.009:28): pid=7337 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 33.484885][ T27] audit: type=1800 audit(1550447654.629:29): pid=7337 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 33.505497][ T27] audit: type=1800 audit(1550447654.629:30): pid=7337 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 [....] startpar: service(s) returned failure: ssh ...[?25l[?1c7[FAIL8[?25h[?0c failed! Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.9' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 59.446185][ T7513] FAULT_INJECTION: forcing a failure. [ 59.446185][ T7513] name failslab, interval 1, probability 0, space 0, times 1 [ 59.458987][ T7513] CPU: 0 PID: 7513 Comm: syz-executor142 Not tainted 5.0.0-rc6-next-20190215 #36 [ 59.468169][ T7513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.478224][ T7513] Call Trace: [ 59.481502][ T7513] dump_stack+0x172/0x1f0 [ 59.485831][ T7513] should_fail.cold+0xa/0x15 [ 59.490523][ T7513] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 59.496324][ T7513] ? ___might_sleep+0x163/0x280 [ 59.501163][ T7513] __should_failslab+0x121/0x190 [ 59.506083][ T7513] should_failslab+0x9/0x14 [ 59.510566][ T7513] kmem_cache_alloc_trace+0x2d1/0x760 [ 59.516102][ T7513] ? h5_open+0x472/0x5f0 [ 59.520330][ T7513] ? h5_rx_crc+0x20/0x20 [ 59.524555][ T7513] ? ___might_sleep+0x163/0x280 [ 59.529398][ T7513] hci_alloc_dev+0x43/0x1d00 [ 59.533980][ T7513] hci_uart_tty_ioctl+0x321/0xa70 [ 59.539089][ T7513] tty_ioctl+0xac9/0x14d0 [ 59.543400][ T7513] ? hci_uart_init_work+0x150/0x150 [ 59.548575][ T7513] ? tty_register_device+0x40/0x40 [ 59.553668][ T7513] ? kstrtouint+0x142/0x1a0 [ 59.558160][ T7513] ? _kstrtoul+0x170/0x170 [ 59.562554][ T7513] ? get_pid_task+0xc9/0x190 [ 59.567133][ T7513] ? find_held_lock+0x35/0x130 [ 59.571874][ T7513] ? get_pid_task+0xc9/0x190 [ 59.576449][ T7513] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 59.582741][ T7513] ? refcount_sub_and_test_checked+0x154/0x200 [ 59.588988][ T7513] ? refcount_dec_not_one+0x1f0/0x1f0 [ 59.594367][ T7513] ? vfs_write+0x2f0/0x580 [ 59.598970][ T7513] ? find_held_lock+0x35/0x130 [ 59.603965][ T7513] ? vfs_write+0x2f0/0x580 [ 59.608395][ T7513] ? tty_register_device+0x40/0x40 [ 59.613492][ T7513] do_vfs_ioctl+0xd6e/0x1390 [ 59.618210][ T7513] ? ioctl_preallocate+0x210/0x210 [ 59.623313][ T7513] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 59.629560][ T7513] ? __sb_end_write+0xd9/0x110 [ 59.634426][ T7513] ? vfs_write+0x160/0x580 [ 59.638831][ T7513] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 59.645065][ T7513] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 59.651302][ T7513] ? security_file_ioctl+0x93/0xc0 [ 59.656401][ T7513] ksys_ioctl+0xab/0xd0 [ 59.660621][ T7513] __x64_sys_ioctl+0x73/0xb0 [ 59.665215][ T7513] do_syscall_64+0x103/0x610 [ 59.670491][ T7513] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 59.676584][ T7513] RIP: 0033:0x441009 [ 59.680660][ T7513] Code: e8 0c ad 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 bb 0a fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 59.700719][ T7513] RSP: 002b:00007ffcc6a92198 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 59.709970][ T7513] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000441009 [ 59.717936][ T7513] RDX: 0000000000000002 RSI: 00000000400455c8 RDI: 0000000000000003 [ 59.726172][ T7513] RBP: 00007ffcc6a921b0 R08: 0000000000000001 R09: 0000000000000000 [ 59.734135][ T7513] R10: 0000000000000000 R11: 0000000000000246 R12: ffffffffffffffff [ 59.742087][ T7513] R13: 0000000000000004 R14: 0000000000000000 R15: 0000000000000000 [ 59.752086][ T2933] kasan: CONFIG_KASAN_INLINE enabled [ 59.752728][ T2499] Bluetooth: Invalid header checksum [ 59.757454][ T2933] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 59.757469][ T2933] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 59.757479][ T2933] CPU: 0 PID: 2933 Comm: kworker/0:2 Not tainted 5.0.0-rc6-next-20190215 #36 [ 59.757492][ T2933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.796625][ T2933] Workqueue: events hci_uart_write_work [ 59.802154][ T2933] RIP: 0010:hci_uart_write_work+0x1b6/0x710 [ 59.808024][ T2933] Code: 0f 85 6a 04 00 00 49 8b b4 24 c8 00 00 00 4c 89 ef e8 9e 2a 4f 02 89 c6 48 8b 45 d0 48 8d b8 5c 10 00 00 48 89 f8 48 c1 e8 03 <0f> b6 14 18 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 1d [ 59.827618][ T2933] RSP: 0018:ffff88800b947cb0 EFLAGS: 00010203 [ 59.833665][ T2933] RAX: 000000000000020b RBX: dffffc0000000000 RCX: 0000000000000000 executing program [ 59.841728][ T2933] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 000000000000105c [ 59.849693][ T2933] RBP: ffff88800b947d30 R08: ffff88800b972140 R09: ffff88800b972a08 [ 59.857646][ T2933] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880631c5e40 [ 59.865884][ T2933] R13: ffff88803e4308c0 R14: ffff888062ec1d68 R15: ffff8880631c5eb0 [ 59.873927][ T2933] FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 59.875533][ T7513] Bluetooth: Can't allocate HCI device [ 59.882844][ T2933] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.882850][ T2933] CR2: 00000000004b4a3c CR3: 000000007fe89000 CR4: 00000000001406f0 [ 59.882857][ T2933] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 59.882862][ T2933] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 59.882865][ T2933] Call Trace: [ 59.882898][ T2933] process_one_work+0x98e/0x1790 [ 59.893485][ T7514] FAULT_INJECTION: forcing a failure. [ 59.893485][ T7514] name failslab, interval 1, probability 0, space 0, times 0 [ 59.894941][ T2933] ? pwq_dec_nr_in_flight+0x320/0x320 [ 59.894957][ T2933] ? lock_acquire+0x16f/0x3f0 [ 59.902972][ T7514] CPU: 1 PID: 7514 Comm: syz-executor142 Not tainted 5.0.0-rc6-next-20190215 #36 [ 59.910889][ T2933] worker_thread+0x98/0xe40 [ 59.918844][ T7514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.922131][ T2933] ? trace_hardirqs_on+0x67/0x230 [ 59.927017][ T7514] Call Trace: [ 59.927042][ T7514] dump_stack+0x172/0x1f0 [ 59.939710][ T2933] kthread+0x357/0x430 [ 59.945046][ T7514] should_fail.cold+0xa/0x15 [ 59.945063][ T7514] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 59.949906][ T2933] ? process_one_work+0x1790/0x1790 [ 59.959063][ T7514] ? lock_downgrade+0x880/0x880 [ 59.963693][ T2933] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 59.973754][ T7514] ? page_to_nid.part.0+0x20/0x20 [ 59.978757][ T2933] ret_from_fork+0x3a/0x50 [ 59.982029][ T7514] ? ___might_sleep+0x163/0x280 [ 59.986330][ T2933] Modules linked in: [ 59.990401][ T7514] __should_failslab+0x121/0x190 [ 59.995212][ T2933] ---[ end trace a8e8fd05bc9907d7 ]--- [ 60.000750][ T7514] should_failslab+0x9/0x14 [ 60.000761][ T7514] kmem_cache_alloc_trace+0x2d1/0x760 [ 60.000779][ T7514] ? h5_open+0x472/0x5f0 [ 60.005976][ T2933] RIP: 0010:hci_uart_write_work+0x1b6/0x710 [ 60.010796][ T7514] ? h5_rx_crc+0x20/0x20 [ 60.010805][ T7514] ? ___might_sleep+0x163/0x280 [ 60.010821][ T7514] hci_alloc_dev+0x43/0x1d00 [ 60.017041][ T2933] Code: 0f 85 6a 04 00 00 49 8b b4 24 c8 00 00 00 4c 89 ef e8 9e 2a 4f 02 89 c6 48 8b 45 d0 48 8d b8 5c 10 00 00 48 89 f8 48 c1 e8 03 <0f> b6 14 18 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 1d [ 60.022047][ T7514] hci_uart_tty_ioctl+0x321/0xa70 [ 60.022060][ T7514] tty_ioctl+0xac9/0x14d0 [ 60.022076][ T7514] ? hci_uart_init_work+0x150/0x150 [ 60.026461][ T2933] RSP: 0018:ffff88800b947cb0 EFLAGS: 00010203 [ 60.031333][ T7514] ? tty_register_device+0x40/0x40 [ 60.031352][ T7514] ? kstrtouint+0x142/0x1a0 [ 60.035291][ T2933] RAX: 000000000000020b RBX: dffffc0000000000 RCX: 0000000000000000 [ 60.040210][ T7514] ? _kstrtoul+0x170/0x170 [ 60.040227][ T7514] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 60.040245][ T7514] ? _copy_from_user+0xdd/0x150 [ 60.045680][ T2933] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 000000000000105c [ 60.050159][ T7514] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 60.050172][ T7514] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 60.050189][ T7514] ? refcount_sub_and_test_checked+0x154/0x200 [ 60.055531][ T2933] RBP: ffff88800b947d30 R08: ffff88800b972140 R09: ffff88800b972a08 [ 60.059753][ T7514] ? refcount_dec_not_one+0x1f0/0x1f0 [ 60.065893][ T2933] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880631c5e40 [ 60.070098][ T7514] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 60.070120][ T7514] ? fsnotify+0x811/0xbc0 [ 60.075109][ T2933] R13: ffff88803e4308c0 R14: ffff888062ec1d68 R15: ffff8880631c5eb0 [ 60.079685][ T7514] ? tty_register_device+0x40/0x40 [ 60.099287][ T2933] FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 60.104290][ T7514] do_vfs_ioctl+0xd6e/0x1390 [ 60.104308][ T7514] ? ioctl_preallocate+0x210/0x210 [ 60.108610][ T2933] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 60.113778][ T7514] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 60.113792][ T7514] ? __sb_end_write+0xd9/0x110 [ 60.113810][ T7514] ? vfs_write+0x160/0x580 [ 60.119864][ T2933] CR2: 00000000004b4a3c CR3: 000000007fe89000 CR4: 00000000001406f0 [ 60.124951][ T7514] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 60.129418][ T2933] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 60.137381][ T7514] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 60.137396][ T7514] ? security_file_ioctl+0x93/0xc0 [ 60.137413][ T7514] ksys_ioctl+0xab/0xd0 [ 60.141829][ T2933] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 60.148034][ T7514] __x64_sys_ioctl+0x73/0xb0 [ 60.148057][ T7514] do_syscall_64+0x103/0x610 [ 60.152899][ T2933] Kernel panic - not syncing: Fatal exception [ 60.160843][ T7514] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 60.331398][ T7514] RIP: 0033:0x441009 [ 60.335278][ T7514] Code: e8 0c ad 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 bb 0a fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 60.355124][ T7514] RSP: 002b:00007ffcc6a92198 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 60.364176][ T7514] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000441009 [ 60.372138][ T7514] RDX: 0000000000000002 RSI: 00000000400455c8 RDI: 0000000000000003 [ 60.380100][ T7514] RBP: 00007ffcc6a921b0 R08: 0000000000000001 R09: 0000000000000000 [ 60.388060][ T7514] R10: 0000000000000000 R11: 0000000000000246 R12: ffffffffffffffff [ 60.396017][ T7514] R13: 0000000000000004 R14: 0000000000000000 R15: 0000000000000000 [ 60.405129][ T2933] Kernel Offset: disabled [ 60.409459][ T2933] Rebooting in 86400 seconds..