[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.215' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 34.519742] audit: type=1400 audit(1589147950.113:8): avc: denied { execmem } for pid=6340 comm="syz-executor271" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 34.541782] ================================================================== [ 34.549264] BUG: KASAN: null-ptr-deref in choke_reset+0x1fc/0x330 [ 34.555492] Write of size 8 at addr (null) by task syz-executor271/6340 [ 34.563609] [ 34.565217] CPU: 0 PID: 6340 Comm: syz-executor271 Not tainted 4.14.180-syzkaller #0 [ 34.573133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 34.582476] Call Trace: [ 34.585051] dump_stack+0x13e/0x194 [ 34.588675] ? choke_reset+0x1fc/0x330 [ 34.592555] kasan_report.cold+0x127/0x2ae [ 34.596778] memset+0x20/0x40 [ 34.599875] choke_reset+0x1fc/0x330 [ 34.603570] ? lock_acquire+0x170/0x3f0 [ 34.607530] ? choke_destroy+0x40/0x40 [ 34.611394] qdisc_reset+0x61/0x1e0 [ 34.615009] dev_deactivate_queue.constprop.0+0xc5/0x150 [ 34.620436] dev_deactivate_many+0xd6/0x960 [ 34.624747] dev_deactivate+0xe2/0x190 [ 34.628645] ? dev_deactivate_many+0x960/0x960 [ 34.633463] qdisc_graft+0x989/0xcd0 [ 34.637162] ? tc_dump_tclass+0x400/0x400 [ 34.642271] tc_modify_qdisc+0x99e/0x1181 [ 34.646402] ? qdisc_create+0xe30/0xe30 [ 34.650355] ? save_trace+0x290/0x290 [ 34.654148] ? rtnetlink_rcv_msg+0x2e8/0xb10 [ 34.658541] ? qdisc_create+0xe30/0xe30 [ 34.662511] rtnetlink_rcv_msg+0x3be/0xb10 [ 34.666742] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 34.671339] ? save_trace+0x290/0x290 [ 34.675133] ? save_trace+0x290/0x290 [ 34.678923] netlink_rcv_skb+0x127/0x370 [ 34.682981] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 34.687636] ? netlink_ack+0x980/0x980 [ 34.693166] netlink_unicast+0x437/0x620 [ 34.697226] ? netlink_attachskb+0x600/0x600 [ 34.701797] netlink_sendmsg+0x733/0xbe0 [ 34.705944] ? netlink_unicast+0x620/0x620 [ 34.710209] ? SYSC_sendto+0x2b0/0x2b0 [ 34.714108] ? security_socket_sendmsg+0x83/0xb0 [ 34.718844] ? netlink_unicast+0x620/0x620 [ 34.723056] sock_sendmsg+0xc5/0x100 [ 34.726750] ___sys_sendmsg+0x70a/0x840 [ 34.730731] ? copy_msghdr_from_user+0x380/0x380 [ 34.735586] ? trace_hardirqs_on+0x10/0x10 [ 34.739988] ? save_trace+0x290/0x290 [ 34.743781] ? selinux_file_alloc_security+0xaf/0x190 [ 34.748954] ? find_held_lock+0x2d/0x110 [ 34.753953] ? __fd_install+0x1ec/0x5c0 [ 34.757926] ? __lock_is_held+0xad/0x140 [ 34.761983] ? lock_downgrade+0x6e0/0x6e0 [ 34.766108] ? __fget_light+0x16a/0x1f0 [ 34.770158] ? sockfd_lookup_light+0xb2/0x160 [ 34.774652] __sys_sendmsg+0xa3/0x120 [ 34.778462] ? SyS_shutdown+0x160/0x160 [ 34.782419] ? move_addr_to_kernel+0x60/0x60 [ 34.786949] SyS_sendmsg+0x27/0x40 [ 34.790588] ? __sys_sendmsg+0x120/0x120 [ 34.794652] do_syscall_64+0x1d5/0x640 [ 34.798537] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 34.804081] RIP: 0033:0x440719 [ 34.807254] RSP: 002b:00007ffd0563b2c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 34.815991] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000440719 [ 34.823529] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000006 [ 34.830951] RBP: 0000000000000001 R08: 00000000ffffffff R09: 00000000004002c8 [ 34.838215] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000007166 [ 34.845462] R13: 0000000000402030 R14: 0000000000000000 R15: 0000000000000000 [ 34.852735] ================================================================== [ 34.860096] Disabling lock debugging due to kernel taint [ 34.865582] Kernel panic - not syncing: panic_on_warn set ... [ 34.865582] [ 34.873027] CPU: 0 PID: 6340 Comm: syz-executor271 Tainted: G B 4.14.180-syzkaller #0 [ 34.882116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 34.891460] Call Trace: [ 34.894029] dump_stack+0x13e/0x194 [ 34.897654] panic+0x1f9/0x42d [ 34.900822] ? add_taint.cold+0x16/0x16 [ 34.904794] ? choke_reset+0x1fc/0x330 [ 34.908672] kasan_end_report+0x43/0x49 [ 34.913404] kasan_report.cold+0x12f/0x2ae [ 34.917615] memset+0x20/0x40 [ 34.920698] choke_reset+0x1fc/0x330 [ 34.924391] ? lock_acquire+0x170/0x3f0 [ 34.928342] ? choke_destroy+0x40/0x40 [ 34.932206] qdisc_reset+0x61/0x1e0 [ 34.935808] dev_deactivate_queue.constprop.0+0xc5/0x150 [ 34.941235] dev_deactivate_many+0xd6/0x960 [ 34.945720] dev_deactivate+0xe2/0x190 [ 34.949582] ? dev_deactivate_many+0x960/0x960 [ 34.954227] qdisc_graft+0x989/0xcd0 [ 34.957921] ? tc_dump_tclass+0x400/0x400 [ 34.962052] tc_modify_qdisc+0x99e/0x1181 [ 34.966175] ? qdisc_create+0xe30/0xe30 [ 34.970124] ? save_trace+0x290/0x290 [ 34.973899] ? rtnetlink_rcv_msg+0x2e8/0xb10 [ 34.978283] ? qdisc_create+0xe30/0xe30 [ 34.982414] rtnetlink_rcv_msg+0x3be/0xb10 [ 34.986631] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 34.991190] ? save_trace+0x290/0x290 [ 34.994968] ? save_trace+0x290/0x290 [ 34.998748] netlink_rcv_skb+0x127/0x370 [ 35.002791] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 35.007526] ? netlink_ack+0x980/0x980 [ 35.011514] netlink_unicast+0x437/0x620 [ 35.015557] ? netlink_attachskb+0x600/0x600 [ 35.019941] netlink_sendmsg+0x733/0xbe0 [ 35.024065] ? netlink_unicast+0x620/0x620 [ 35.028288] ? SYSC_sendto+0x2b0/0x2b0 [ 35.032174] ? security_socket_sendmsg+0x83/0xb0 [ 35.036926] ? netlink_unicast+0x620/0x620 [ 35.041137] sock_sendmsg+0xc5/0x100 [ 35.045008] ___sys_sendmsg+0x70a/0x840 [ 35.049076] ? copy_msghdr_from_user+0x380/0x380 [ 35.054089] ? trace_hardirqs_on+0x10/0x10 [ 35.058425] ? save_trace+0x290/0x290 [ 35.062376] ? selinux_file_alloc_security+0xaf/0x190 [ 35.067643] ? find_held_lock+0x2d/0x110 [ 35.071685] ? __fd_install+0x1ec/0x5c0 [ 35.075924] ? __lock_is_held+0xad/0x140 [ 35.079971] ? lock_downgrade+0x6e0/0x6e0 [ 35.084120] ? __fget_light+0x16a/0x1f0 [ 35.088268] ? sockfd_lookup_light+0xb2/0x160 [ 35.092756] __sys_sendmsg+0xa3/0x120 [ 35.096653] ? SyS_shutdown+0x160/0x160 [ 35.100620] ? move_addr_to_kernel+0x60/0x60 [ 35.105125] SyS_sendmsg+0x27/0x40 [ 35.108666] ? __sys_sendmsg+0x120/0x120 [ 35.112818] do_syscall_64+0x1d5/0x640 [ 35.116869] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 35.122320] RIP: 0033:0x440719 [ 35.125487] RSP: 002b:00007ffd0563b2c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 35.133916] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000440719 [ 35.141313] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000006 [ 35.148746] RBP: 0000000000000001 R08: 00000000ffffffff R09: 00000000004002c8 [ 35.155995] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000007166 [ 35.163239] R13: 0000000000402030 R14: 0000000000000000 R15: 0000000000000000 [ 35.171694] Kernel Offset: disabled [ 35.175320] Rebooting in 86400 seconds..