[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.210' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 39.087262] audit: type=1400 audit(1587893087.566:8): avc: denied { execmem } for pid=6339 comm="syz-executor651" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 executing program [ 39.176133] ================================================================== [ 39.183609] BUG: KASAN: null-ptr-deref in choke_reset+0x1fc/0x330 [ 39.189825] Write of size 8 at addr (null) by task syz-executor651/6341 [ 39.197588] [ 39.199207] CPU: 0 PID: 6341 Comm: syz-executor651 Not tainted 4.14.177-syzkaller #0 [ 39.207064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 39.216414] Call Trace: [ 39.218987] dump_stack+0x13e/0x194 [ 39.222593] ? choke_reset+0x1fc/0x330 [ 39.226459] kasan_report.cold+0x127/0x2ae [ 39.230672] memset+0x20/0x40 [ 39.233758] choke_reset+0x1fc/0x330 [ 39.237448] ? lock_acquire+0x170/0x3f0 [ 39.241400] ? choke_destroy+0x40/0x40 [ 39.245267] qdisc_reset+0x61/0x1e0 [ 39.248870] dev_deactivate_queue.constprop.0+0xc5/0x150 [ 39.254358] dev_deactivate_many+0xd6/0x960 [ 39.258659] dev_deactivate+0xe2/0x190 [ 39.262868] ? dev_deactivate_many+0x960/0x960 [ 39.267436] qdisc_graft+0x989/0xcd0 [ 39.271126] ? tc_dump_tclass+0x400/0x400 [ 39.275254] ? nla_parse+0x183/0x240 [ 39.278942] tc_modify_qdisc+0x99e/0x1181 [ 39.283067] ? qdisc_create+0xe30/0xe30 [ 39.287018] ? save_trace+0x290/0x290 [ 39.290796] ? rtnetlink_rcv_msg+0x2e8/0xb10 [ 39.295186] ? qdisc_create+0xe30/0xe30 [ 39.299139] rtnetlink_rcv_msg+0x3be/0xb10 [ 39.303362] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 39.307928] ? save_trace+0x290/0x290 [ 39.311718] ? save_trace+0x290/0x290 [ 39.315511] netlink_rcv_skb+0x127/0x370 [ 39.319563] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 39.324121] ? netlink_ack+0x980/0x980 [ 39.327986] netlink_unicast+0x437/0x620 [ 39.332031] ? netlink_attachskb+0x600/0x600 [ 39.336419] netlink_sendmsg+0x733/0xbe0 [ 39.340456] ? netlink_unicast+0x620/0x620 [ 39.344666] ? SYSC_sendto+0x2b0/0x2b0 [ 39.348540] ? security_socket_sendmsg+0x83/0xb0 [ 39.353284] ? netlink_unicast+0x620/0x620 [ 39.357491] sock_sendmsg+0xc5/0x100 [ 39.361195] ___sys_sendmsg+0x70a/0x840 [ 39.365145] ? copy_msghdr_from_user+0x380/0x380 [ 39.369892] ? trace_hardirqs_on+0x10/0x10 [ 39.374117] ? save_trace+0x290/0x290 [ 39.377895] ? selinux_file_alloc_security+0xaf/0x190 [ 39.383063] ? find_held_lock+0x2d/0x110 [ 39.387099] ? __fd_install+0x1ec/0x5c0 [ 39.391050] ? __lock_is_held+0xad/0x140 [ 39.395115] ? lock_downgrade+0x6e0/0x6e0 [ 39.399247] ? __fget_light+0x16a/0x1f0 [ 39.403201] ? sockfd_lookup_light+0xb2/0x160 [ 39.409766] __sys_sendmsg+0xa3/0x120 [ 39.413549] ? SyS_shutdown+0x160/0x160 [ 39.417503] ? move_addr_to_kernel+0x60/0x60 [ 39.421893] SyS_sendmsg+0x27/0x40 [ 39.425410] ? __sys_sendmsg+0x120/0x120 [ 39.429448] do_syscall_64+0x1d5/0x640 [ 39.433330] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 39.438502] RIP: 0033:0x441499 [ 39.441667] RSP: 002b:00007ffddc2ad438 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 39.449356] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441499 [ 39.456607] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000004 [ 39.463930] RBP: 00000000000098ca R08: 00000000004002c8 R09: 00000000004002c8 [ 39.471189] R10: 00000000004002c8 R11: 0000000000000246 R12: 00000000004022c0 [ 39.478456] R13: 0000000000402350 R14: 0000000000000000 R15: 0000000000000000 [ 39.485717] ================================================================== [ 39.493067] Disabling lock debugging due to kernel taint [ 39.498526] Kernel panic - not syncing: panic_on_warn set ... [ 39.498526] [ 39.505884] CPU: 0 PID: 6341 Comm: syz-executor651 Tainted: G B 4.14.177-syzkaller #0 [ 39.514970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 39.524410] Call Trace: [ 39.526981] dump_stack+0x13e/0x194 [ 39.530581] panic+0x1f9/0x42d [ 39.533747] ? add_taint.cold+0x16/0x16 [ 39.537701] ? choke_reset+0x1fc/0x330 [ 39.541566] kasan_end_report+0x43/0x49 [ 39.545639] kasan_report.cold+0x12f/0x2ae [ 39.549865] memset+0x20/0x40 [ 39.552946] choke_reset+0x1fc/0x330 [ 39.556633] ? lock_acquire+0x170/0x3f0 [ 39.560589] ? choke_destroy+0x40/0x40 [ 39.564452] qdisc_reset+0x61/0x1e0 [ 39.568053] dev_deactivate_queue.constprop.0+0xc5/0x150 [ 39.573479] dev_deactivate_many+0xd6/0x960 [ 39.577774] dev_deactivate+0xe2/0x190 [ 39.581633] ? dev_deactivate_many+0x960/0x960 [ 39.586188] qdisc_graft+0x989/0xcd0 [ 39.590046] ? tc_dump_tclass+0x400/0x400 [ 39.594166] ? nla_parse+0x183/0x240 [ 39.597859] tc_modify_qdisc+0x99e/0x1181 [ 39.601995] ? qdisc_create+0xe30/0xe30 [ 39.605941] ? save_trace+0x290/0x290 [ 39.609717] ? rtnetlink_rcv_msg+0x2e8/0xb10 [ 39.614108] ? qdisc_create+0xe30/0xe30 [ 39.618079] rtnetlink_rcv_msg+0x3be/0xb10 [ 39.622289] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 39.626859] ? save_trace+0x290/0x290 [ 39.630631] ? save_trace+0x290/0x290 [ 39.634422] netlink_rcv_skb+0x127/0x370 [ 39.638472] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 39.643026] ? netlink_ack+0x980/0x980 [ 39.646888] netlink_unicast+0x437/0x620 [ 39.650923] ? netlink_attachskb+0x600/0x600 [ 39.655313] netlink_sendmsg+0x733/0xbe0 [ 39.659354] ? netlink_unicast+0x620/0x620 [ 39.663568] ? SYSC_sendto+0x2b0/0x2b0 [ 39.667438] ? security_socket_sendmsg+0x83/0xb0 [ 39.672195] ? netlink_unicast+0x620/0x620 [ 39.676426] sock_sendmsg+0xc5/0x100 [ 39.680127] ___sys_sendmsg+0x70a/0x840 [ 39.684086] ? copy_msghdr_from_user+0x380/0x380 [ 39.688880] ? trace_hardirqs_on+0x10/0x10 [ 39.693099] ? save_trace+0x290/0x290 [ 39.696936] ? selinux_file_alloc_security+0xaf/0x190 [ 39.702106] ? find_held_lock+0x2d/0x110 [ 39.706218] ? __fd_install+0x1ec/0x5c0 [ 39.710169] ? __lock_is_held+0xad/0x140 [ 39.714221] ? lock_downgrade+0x6e0/0x6e0 [ 39.718477] ? __fget_light+0x16a/0x1f0 [ 39.722456] ? sockfd_lookup_light+0xb2/0x160 [ 39.726936] __sys_sendmsg+0xa3/0x120 [ 39.730715] ? SyS_shutdown+0x160/0x160 [ 39.734670] ? move_addr_to_kernel+0x60/0x60 [ 39.739065] SyS_sendmsg+0x27/0x40 [ 39.742581] ? __sys_sendmsg+0x120/0x120 [ 39.746622] do_syscall_64+0x1d5/0x640 [ 39.750497] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 39.755660] RIP: 0033:0x441499 [ 39.758822] RSP: 002b:00007ffddc2ad438 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 39.766511] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441499 [ 39.773765] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000004 [ 39.781007] RBP: 00000000000098ca R08: 00000000004002c8 R09: 00000000004002c8 [ 39.788248] R10: 00000000004002c8 R11: 0000000000000246 R12: 00000000004022c0 [ 39.795493] R13: 0000000000402350 R14: 0000000000000000 R15: 0000000000000000 [ 39.803961] Kernel Offset: disabled [ 39.807587] Rebooting in 86400 seconds..