[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 37.731631] audit: type=1800 audit(1550377605.539:25): pid=7693 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 37.767010] audit: type=1800 audit(1550377605.539:26): pid=7693 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 37.797171] audit: type=1800 audit(1550377605.539:27): pid=7693 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.169' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 51.147292] FAULT_INJECTION: forcing a failure. [ 51.147292] name failslab, interval 1, probability 0, space 0, times 1 [ 51.159041] CPU: 1 PID: 7846 Comm: syz-executor184 Not tainted 5.0.0-rc6+ #74 [ 51.166540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 51.176132] Call Trace: [ 51.178721] dump_stack+0x172/0x1f0 [ 51.182403] should_fail.cold+0xa/0x1b [ 51.186296] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 51.191506] ? lock_downgrade+0x810/0x810 [ 51.195763] ? ___might_sleep+0x163/0x280 [ 51.199908] __should_failslab+0x121/0x190 [ 51.204165] should_failslab+0x9/0x14 [ 51.207980] kmem_cache_alloc_trace+0x2d1/0x760 [ 51.212649] ? h5_open+0x472/0x5f0 [ 51.216202] ? h5_rx_crc+0x20/0x20 [ 51.219838] ? ___might_sleep+0x163/0x280 [ 51.223987] hci_alloc_dev+0x43/0x1d00 [ 51.227875] hci_uart_tty_ioctl+0x321/0xa70 [ 51.232465] tty_ioctl+0xac9/0x14d0 [ 51.236093] ? hci_uart_init_work+0x150/0x150 [ 51.240580] ? tty_vhangup+0x30/0x30 [ 51.244289] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 51.249834] ? proc_fail_nth_write+0x9d/0x1e0 [ 51.254336] ? proc_cwd_link+0x1d0/0x1d0 [ 51.258387] ? kasan_check_read+0x11/0x20 [ 51.262524] ? __vfs_write+0x11e/0x8e0 [ 51.266397] ? vfs_write+0x2f0/0x580 [ 51.270102] ? find_held_lock+0x35/0x130 [ 51.274150] ? vfs_write+0x2f0/0x580 [ 51.277862] ? tty_vhangup+0x30/0x30 [ 51.281724] do_vfs_ioctl+0xd6e/0x1390 [ 51.285604] ? ioctl_preallocate+0x210/0x210 [ 51.290000] ? check_preemption_disabled+0x48/0x290 [ 51.295013] ? __sb_end_write+0xd9/0x110 [ 51.299064] ? vfs_write+0x160/0x580 [ 51.302768] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 51.308299] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 51.313933] ? security_file_ioctl+0x93/0xc0 [ 51.318478] ksys_ioctl+0xab/0xd0 [ 51.321922] __x64_sys_ioctl+0x73/0xb0 [ 51.325899] do_syscall_64+0x103/0x610 [ 51.329781] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 51.334957] RIP: 0033:0x441009 [ 51.338151] Code: e8 0c ad 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 bb 0a fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 51.357041] RSP: 002b:00007ffde580b6d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 51.364756] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000441009 [ 51.372022] RDX: 0000000000000002 RSI: 00000000400455c8 RDI: 0000000000000003 [ 51.379804] RBP: 00007ffde580b6f0 R08: 0000000000000001 R09: 0000000000000000 [ 51.387218] R10: 0000000000000000 R11: 0000000000000246 R12: ffffffffffffffff [ 51.394479] R13: 0000000000000004 R14: 0000000000000000 R15: 0000000000000000 [ 51.403428] kasan: CONFIG_KASAN_INLINE enabled [ 51.404402] Bluetooth: Invalid header checksum [ 51.408108] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 51.408124] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 51.426566] CPU: 1 PID: 22 Comm: kworker/1:1 Not tainted 5.0.0-rc6+ #74 [ 51.433407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 51.442851] Workqueue: events hci_uart_write_work [ 51.447687] RIP: 0010:hci_uart_write_work+0x1b6/0x710 [ 51.452880] Code: 0f 85 6a 04 00 00 49 8b b4 24 c8 00 00 00 4c 89 ef e8 5e 72 53 02 89 c6 48 8b 45 d0 48 8d b8 5c 10 00 00 48 89 f8 48 c1 e8 03 <0f> b6 14 18 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 1d [ 51.460358] Bluetooth: Can't allocate HCI device [ 51.471887] RSP: 0018:ffff8880a99cfcb0 EFLAGS: 00010203 [ 51.471898] RAX: 000000000000020b RBX: dffffc0000000000 RCX: 0000000000000000 [ 51.471906] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 000000000000105c [ 51.471914] RBP: ffff8880a99cfd30 R08: ffff8880a99bc5c0 R09: ffff8880a99bce88 [ 51.471921] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888093057500 [ 51.471929] R13: ffff88808cc54480 R14: ffff88809f5be828 R15: ffff888093057570 [ 51.471941] FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 51.471953] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.532999] CR2: 00000000004b4a3c CR3: 0000000093815000 CR4: 00000000001406e0 [ 51.540303] Call Trace: [ 51.542906] process_one_work+0x98e/0x1790 executing program [ 51.547175] ? pwq_dec_nr_in_flight+0x320/0x320 [ 51.551851] ? lock_acquire+0x16f/0x3f0 [ 51.555828] worker_thread+0x98/0xe40 [ 51.559649] ? trace_hardirqs_on+0x67/0x230 [ 51.563973] kthread+0x357/0x430 [ 51.567351] ? process_one_work+0x1790/0x1790 [ 51.571844] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 51.577377] ret_from_fork+0x3a/0x50 [ 51.581087] Modules linked in: [ 51.585557] ---[ end trace d63ba73a318fa0e3 ]--- [ 51.590454] RIP: 0010:hci_uart_write_work+0x1b6/0x710 [ 51.592565] FAULT_INJECTION: forcing a failure. [ 51.592565] name failslab, interval 1, probability 0, space 0, times 0 [ 51.595652] Code: 0f 85 6a 04 00 00 49 8b b4 24 c8 00 00 00 4c 89 ef e8 5e 72 53 02 89 c6 48 8b 45 d0 48 8d b8 5c 10 00 00 48 89 f8 48 c1 e8 03 <0f> b6 14 18 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 1d [ 51.595661] RSP: 0018:ffff8880a99cfcb0 EFLAGS: 00010203 [ 51.607127] CPU: 0 PID: 7847 Comm: syz-executor184 Tainted: G D 5.0.0-rc6+ #74 [ 51.625911] RAX: 000000000000020b RBX: dffffc0000000000 RCX: 0000000000000000 [ 51.631238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 51.631243] Call Trace: [ 51.631266] dump_stack+0x172/0x1f0 [ 51.631282] should_fail.cold+0xa/0x1b [ 51.631298] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 51.639962] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 000000000000105c [ 51.647230] ? lock_downgrade+0x810/0x810 [ 51.647243] ? set_page_refcounted+0x100/0x100 [ 51.647260] ? ___might_sleep+0x163/0x280 [ 51.656635] RBP: ffff8880a99cfd30 R08: ffff8880a99bc5c0 R09: ffff8880a99bce88 [ 51.659204] __should_failslab+0x121/0x190 [ 51.662820] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888093057500 [ 51.666727] should_failslab+0x9/0x14 [ 51.671837] R13: ffff88808cc54480 R14: ffff88809f5be828 R15: ffff888093057570 [ 51.679086] kmem_cache_alloc_trace+0x2d1/0x760 [ 51.683231] FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 51.687789] ? h5_open+0x472/0x5f0 [ 51.691935] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.699218] ? h5_rx_crc+0x20/0x20 [ 51.703445] CR2: 00000000004b4a3c CR3: 0000000008871000 CR4: 00000000001406e0 [ 51.710693] ? ___might_sleep+0x163/0x280 [ 51.710710] hci_alloc_dev+0x43/0x1d00 [ 51.714491] Kernel panic - not syncing: Fatal exception [ 51.721765] hci_uart_tty_ioctl+0x321/0xa70 [ 51.772852] tty_ioctl+0xac9/0x14d0 [ 51.776483] ? hci_uart_init_work+0x150/0x150 [ 51.780982] ? tty_vhangup+0x30/0x30 [ 51.784712] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 51.790253] ? proc_fail_nth_write+0x9d/0x1e0 [ 51.794751] ? proc_cwd_link+0x1d0/0x1d0 [ 51.798812] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 51.803851] ? kasan_check_read+0x11/0x20 [ 51.807993] ? __vfs_write+0x11e/0x8e0 [ 51.811887] ? debug_check_no_obj_freed+0xbe/0x464 [ 51.816821] ? proc_cwd_link+0x1d0/0x1d0 [ 51.820879] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 51.826416] ? fsnotify+0x395/0xbd0 [ 51.830056] ? tty_vhangup+0x30/0x30 [ 51.833772] do_vfs_ioctl+0xd6e/0x1390 [ 51.837663] ? ioctl_preallocate+0x210/0x210 [ 51.842073] ? check_preemption_disabled+0x48/0x290 [ 51.847091] ? __sb_end_write+0xd9/0x110 [ 51.851147] ? vfs_write+0x160/0x580 [ 51.854863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 51.860401] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 51.866155] ? security_file_ioctl+0x93/0xc0 [ 51.870571] ksys_ioctl+0xab/0xd0 [ 51.874027] __x64_sys_ioctl+0x73/0xb0 [ 51.877914] do_syscall_64+0x103/0x610 [ 51.881836] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 51.887023] RIP: 0033:0x441009 [ 51.890221] Code: e8 0c ad 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 bb 0a fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 51.909129] RSP: 002b:00007ffde580b6d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 51.916833] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000441009 [ 51.924103] RDX: 0000000000000002 RSI: 00000000400455c8 RDI: 0000000000000003 [ 51.931366] RBP: 00007ffde580b6f0 R08: 0000000000000001 R09: 0000000000000000 [ 51.938642] R10: 0000000000000000 R11: 0000000000000246 R12: ffffffffffffffff [ 51.945904] R13: 0000000000000004 R14: 0000000000000000 R15: 0000000000000000 [ 51.954119] Kernel Offset: disabled [ 51.957742] Rebooting in 86400 seconds..