[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [ 39.060847] audit: type=1800 audit(1575835856.894:33): pid=7469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 39.091218] audit: type=1800 audit(1575835856.894:34): pid=7469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 [ 39.378201] audit: type=1400 audit(1575835857.214:35): avc: denied { map } for pid=7641 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.40' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 45.992313] audit: type=1400 audit(1575835863.834:36): avc: denied { map } for pid=7656 comm="syz-executor943" path="/root/syz-executor943995212" dev="sda1" ino=16483 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 45.996929] ================================================================== [ 46.026021] BUG: KASAN: null-ptr-deref in llcp_sock_getname+0x358/0x460 [ 46.032755] Read of size 43 at addr 0000000000000000 by task syz-executor943/7656 [ 46.040354] [ 46.041966] CPU: 1 PID: 7656 Comm: syz-executor943 Not tainted 4.19.88-syzkaller #0 [ 46.049740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 46.059071] Call Trace: [ 46.061645] dump_stack+0x197/0x210 [ 46.065261] ? llcp_sock_getname+0x358/0x460 [ 46.069656] kasan_report.cold+0x199/0x2ba [ 46.073874] check_memory_region+0x123/0x190 [ 46.078265] memcpy+0x24/0x50 [ 46.081352] llcp_sock_getname+0x358/0x460 [ 46.085569] __sys_getpeername+0x12b/0x290 [ 46.089787] ? __ia32_sys_getsockname+0xb0/0xb0 [ 46.094461] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 46.099214] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 46.103954] ? do_syscall_64+0x26/0x620 [ 46.107913] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 46.113259] ? do_syscall_64+0x26/0x620 [ 46.117231] __x64_sys_getpeername+0x73/0xb0 [ 46.121625] do_syscall_64+0xfd/0x620 [ 46.125423] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 46.130595] RIP: 0033:0x440349 [ 46.133779] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 46.152661] RSP: 002b:00007fff33e94a18 EFLAGS: 00000246 ORIG_RAX: 0000000000000034 [ 46.160354] RAX: ffffffffffffffda RBX: fe7f62c7329d9aaa RCX: 0000000000440349 [ 46.167607] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 46.174898] RBP: 65e500001d7ef6cc R08: 00007fff33e94b88 R09: 00007fff33e94b88 [ 46.182150] R10: 00007fff33e94b88 R11: 0000000000000246 R12: 211e267fffffffff [ 46.189399] R13: ffff000000004d02 R14: aac8030fa4d62b9c R15: d303a55487e71188 [ 46.196657] ================================================================== [ 46.203993] Disabling lock debugging due to kernel taint [ 46.209807] Kernel panic - not syncing: panic_on_warn set ... [ 46.209807] [ 46.217170] CPU: 1 PID: 7656 Comm: syz-executor943 Tainted: G B 4.19.88-syzkaller #0 [ 46.226328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 46.235679] Call Trace: [ 46.238255] dump_stack+0x197/0x210 [ 46.241863] ? llcp_sock_getname+0x358/0x460 [ 46.246267] panic+0x26a/0x50e [ 46.249563] ? __warn_printk+0xf3/0xf3 [ 46.253444] ? llcp_sock_getname+0x358/0x460 [ 46.257835] ? preempt_schedule+0x4b/0x60 [ 46.261966] ? ___preempt_schedule+0x16/0x18 [ 46.266357] ? trace_hardirqs_on+0x5e/0x220 [ 46.270661] ? llcp_sock_getname+0x358/0x460 [ 46.275056] kasan_end_report+0x47/0x4f [ 46.279024] kasan_report.cold+0xa9/0x2ba [ 46.283177] check_memory_region+0x123/0x190 [ 46.287568] memcpy+0x24/0x50 [ 46.290655] llcp_sock_getname+0x358/0x460 [ 46.294875] __sys_getpeername+0x12b/0x290 [ 46.299090] ? __ia32_sys_getsockname+0xb0/0xb0 [ 46.303784] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 46.308519] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 46.313254] ? do_syscall_64+0x26/0x620 [ 46.317210] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 46.322550] ? do_syscall_64+0x26/0x620 [ 46.326506] __x64_sys_getpeername+0x73/0xb0 [ 46.330893] do_syscall_64+0xfd/0x620 [ 46.334717] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 46.339914] RIP: 0033:0x440349 [ 46.343090] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 46.362003] RSP: 002b:00007fff33e94a18 EFLAGS: 00000246 ORIG_RAX: 0000000000000034 [ 46.369689] RAX: ffffffffffffffda RBX: fe7f62c7329d9aaa RCX: 0000000000440349 [ 46.376939] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 46.384188] RBP: 65e500001d7ef6cc R08: 00007fff33e94b88 R09: 00007fff33e94b88 [ 46.391444] R10: 00007fff33e94b88 R11: 0000000000000246 R12: 211e267fffffffff [ 46.398699] R13: ffff000000004d02 R14: aac8030fa4d62b9c R15: d303a55487e71188 [ 46.407304] Kernel Offset: disabled [ 46.410925] Rebooting in 86400 seconds..