[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.131' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 36.701053] block nbd0: NBD_DISCONNECT [ 36.705718] kasan: CONFIG_KASAN_INLINE enabled [ 36.710317] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 36.717673] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 36.723890] CPU: 0 PID: 8118 Comm: syz-executor468 Not tainted 4.19.190-syzkaller #0 [ 36.731841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 36.741191] RIP: 0010:__lock_acquire+0x1eb/0x3ff0 [ 36.746026] Code: 2b 29 00 00 48 81 c4 98 01 00 00 44 89 f8 5b 5d 41 5c 41 5d 41 5e 41 5f c3 48 b8 00 00 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 <80> 3c 02 00 0f 85 b3 2a 00 00 49 81 3e 20 d2 66 8c 0f 84 65 ff ff [ 36.764936] RSP: 0018:ffff88809ee7f270 EFLAGS: 00010006 [ 36.770288] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 36.777544] RDX: 0000000000000022 RSI: 0000000000000000 RDI: 0000000000000001 [ 36.784796] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 36.792164] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 36.799425] R13: ffff8880b0c0c200 R14: 0000000000000110 R15: 0000000000000001 [ 36.806773] FS: 0000000000c4b300(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000 [ 36.815089] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.821111] CR2: 00007faf9528b6c0 CR3: 00000000a5faa000 CR4: 00000000001406f0 [ 36.828371] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.835625] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.842876] Call Trace: [ 36.845476] ? __lock_acquire+0x6de/0x3ff0 [ 36.849724] ? mark_held_locks+0xf0/0xf0 [ 36.853771] ? __lock_acquire+0x6de/0x3ff0 [ 36.858016] ? mark_held_locks+0xf0/0xf0 [ 36.862074] ? __free_object+0xdd/0x1e0 [ 36.866048] ? mark_held_locks+0xf0/0xf0 [ 36.870098] ? mark_held_locks+0xa6/0xf0 [ 36.874244] lock_acquire+0x170/0x3c0 [ 36.878033] ? flush_workqueue+0xe8/0x13e0 [ 36.882253] flush_workqueue+0x117/0x13e0 [ 36.886384] ? flush_workqueue+0xe8/0x13e0 [ 36.890652] ? lock_downgrade+0x720/0x720 [ 36.895309] ? hctx_unlock+0x83/0x140 [ 36.899100] ? check_flush_dependency+0x400/0x400 [ 36.903931] nbd_disconnect_and_put+0x100/0x190 [ 36.908585] nbd_genl_disconnect+0x34f/0x4f0 [ 36.912976] ? nbd_release+0x170/0x170 [ 36.916848] ? nla_parse+0x1b2/0x290 [ 36.920668] genl_family_rcv_msg+0x642/0xc40 [ 36.925057] ? genl_rcv+0x40/0x40 [ 36.928493] ? genl_rcv_msg+0x12f/0x160 [ 36.932449] ? __mutex_add_waiter+0x160/0x160 [ 36.936930] ? __radix_tree_lookup+0x216/0x370 [ 36.941504] genl_rcv_msg+0xbf/0x160 [ 36.945211] netlink_rcv_skb+0x160/0x440 [ 36.949279] ? genl_family_rcv_msg+0xc40/0xc40 [ 36.953845] ? netlink_ack+0xae0/0xae0 [ 36.957720] ? genl_rcv+0x15/0x40 [ 36.961159] genl_rcv+0x24/0x40 [ 36.964452] netlink_unicast+0x4d5/0x690 [ 36.968520] ? netlink_sendskb+0x110/0x110 [ 36.972741] ? _copy_from_iter_full+0x229/0x7c0 [ 36.977398] ? __phys_addr_symbol+0x2c/0x70 [ 36.981789] ? __check_object_size+0x17b/0x3e0 [ 36.986355] netlink_sendmsg+0x6bb/0xc40 [ 36.990403] ? aa_af_perm+0x230/0x230 [ 36.994188] ? nlmsg_notify+0x1a0/0x1a0 [ 36.998146] ? kernel_recvmsg+0x220/0x220 [ 37.003929] ? nlmsg_notify+0x1a0/0x1a0 [ 37.007898] sock_sendmsg+0xc3/0x120 [ 37.011598] ___sys_sendmsg+0x7bb/0x8e0 [ 37.015560] ? copy_msghdr_from_user+0x440/0x440 [ 37.020301] ? netlink_dump+0xc10/0xc10 [ 37.024258] ? nlmsg_notify+0x1a0/0x1a0 [ 37.028223] ? security_socket_recvmsg+0x8f/0xc0 [ 37.033397] ? __sys_recvfrom+0x2cd/0x3a0 [ 37.037530] ? __ia32_sys_send+0x100/0x100 [ 37.041752] ? __fdget+0x1a0/0x230 [ 37.045282] __x64_sys_sendmsg+0x132/0x220 [ 37.049503] ? __sys_sendmsg+0x1b0/0x1b0 [ 37.053558] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 37.058915] ? trace_hardirqs_off_caller+0x6e/0x210 [ 37.063941] ? do_syscall_64+0x21/0x620 [ 37.067922] do_syscall_64+0xf9/0x620 [ 37.071709] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 37.076990] RIP: 0033:0x444019 [ 37.080294] Code: 28 c3 e8 5a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 37.101175] RSP: 002b:00007ffd9f780e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 37.108954] RAX: ffffffffffffffda RBX: 00000000004004b8 RCX: 0000000000444019 [ 37.116208] RDX: 0000000000000000 RSI: 0000000020000540 RDI: 0000000000000004 [ 37.123635] RBP: 0000000000403640 R08: 0000000000000000 R09: 00000000004004b8 [ 37.130893] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000004036d0 [ 37.138147] R13: 0000000000000000 R14: 00000000004b1018 R15: 00000000004004b8 [ 37.145594] Modules linked in: [ 37.148983] ---[ end trace f0acb04a551d6613 ]--- [ 37.153877] RIP: 0010:__lock_acquire+0x1eb/0x3ff0 [ 37.158715] Code: 2b 29 00 00 48 81 c4 98 01 00 00 44 89 f8 5b 5d 41 5c 41 5d 41 5e 41 5f c3 48 b8 00 00 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 <80> 3c 02 00 0f 85 b3 2a 00 00 49 81 3e 20 d2 66 8c 0f 84 65 ff ff [ 37.177741] RSP: 0018:ffff88809ee7f270 EFLAGS: 00010006 [ 37.183089] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 37.190369] RDX: 0000000000000022 RSI: 0000000000000000 RDI: 0000000000000001 [ 37.197623] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 37.204912] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 37.212322] R13: ffff8880b0c0c200 R14: 0000000000000110 R15: 0000000000000001 [ 37.219584] FS: 0000000000c4b300(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000 [ 37.227796] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.233664] CR2: 00007faf9528b6c0 CR3: 00000000a5faa000 CR4: 00000000001406f0 [ 37.240979] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 37.248233] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 37.255507] Kernel panic - not syncing: Fatal exception [ 37.261780] Kernel Offset: disabled [ 37.265423] Rebooting in 86400 seconds..