[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 63.217902][ T27] audit: type=1800 audit(1575907109.675:25): pid=9055 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 63.238224][ T27] audit: type=1800 audit(1575907109.675:26): pid=9055 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 63.262096][ T27] audit: type=1800 audit(1575907109.675:27): pid=9055 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.46' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 73.323981][ T9209] ================================================================== [ 73.332329][ T9209] BUG: KASAN: null-ptr-deref in llcp_sock_getname+0x358/0x460 [ 73.339775][ T9209] Read of size 43 at addr 0000000000000000 by task syz-executor191/9209 [ 73.348212][ T9209] [ 73.350556][ T9209] CPU: 0 PID: 9209 Comm: syz-executor191 Not tainted 5.5.0-rc1-syzkaller #0 [ 73.359279][ T9209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 73.369459][ T9209] Call Trace: [ 73.372872][ T9209] dump_stack+0x197/0x210 [ 73.377207][ T9209] ? llcp_sock_getname+0x358/0x460 [ 73.382303][ T9209] ? llcp_sock_getname+0x358/0x460 [ 73.387412][ T9209] __kasan_report.cold+0x5/0x41 [ 73.392261][ T9209] ? llcp_sock_getname+0x358/0x460 [ 73.397362][ T9209] kasan_report+0x12/0x20 [ 73.401685][ T9209] check_memory_region+0x134/0x1a0 [ 73.406790][ T9209] memcpy+0x24/0x50 [ 73.410580][ T9209] llcp_sock_getname+0x358/0x460 [ 73.415502][ T9209] __sys_getpeername+0x12b/0x290 [ 73.420421][ T9209] ? __ia32_sys_getsockname+0xb0/0xb0 [ 73.425813][ T9209] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 73.431261][ T9209] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 73.436870][ T9209] ? do_syscall_64+0x26/0x790 [ 73.441558][ T9209] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 73.447614][ T9209] ? do_syscall_64+0x26/0x790 [ 73.452769][ T9209] __x64_sys_getpeername+0x73/0xb0 [ 73.458012][ T9209] do_syscall_64+0xfa/0x790 [ 73.462503][ T9209] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 73.468499][ T9209] RIP: 0033:0x440349 [ 73.472384][ T9209] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 73.492094][ T9209] RSP: 002b:00007ffe5ee3bd38 EFLAGS: 00000246 ORIG_RAX: 0000000000000034 [ 73.500534][ T9209] RAX: ffffffffffffffda RBX: fe7f62c7329d9aaa RCX: 0000000000440349 [ 73.508505][ T9209] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 73.516590][ T9209] RBP: 65e500001d7ef6cc R08: 00007ffe5ee3bea8 R09: 00007ffe5ee3bea8 [ 73.524557][ T9209] R10: 00007ffe5ee3bea8 R11: 0000000000000246 R12: 211e267fffffffff [ 73.532533][ T9209] R13: ffff000000004d02 R14: aac8030fa4d62b9c R15: d303a55487e71188 [ 73.540732][ T9209] ================================================================== [ 73.548788][ T9209] Disabling lock debugging due to kernel taint [ 73.555552][ T9209] Kernel panic - not syncing: panic_on_warn set ... [ 73.562160][ T9209] CPU: 0 PID: 9209 Comm: syz-executor191 Tainted: G B 5.5.0-rc1-syzkaller #0 [ 73.572198][ T9209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 73.582588][ T9209] Call Trace: [ 73.585869][ T9209] dump_stack+0x197/0x210 [ 73.590203][ T9209] panic+0x2e3/0x75c [ 73.594089][ T9209] ? add_taint.cold+0x16/0x16 [ 73.598758][ T9209] ? llcp_sock_getname+0x358/0x460 [ 73.603852][ T9209] ? preempt_schedule+0x4b/0x60 [ 73.608709][ T9209] ? ___preempt_schedule+0x16/0x18 [ 73.613813][ T9209] ? trace_hardirqs_on+0x5e/0x240 [ 73.618844][ T9209] ? llcp_sock_getname+0x358/0x460 [ 73.623947][ T9209] end_report+0x47/0x4f [ 73.628190][ T9209] ? llcp_sock_getname+0x358/0x460 [ 73.633292][ T9209] __kasan_report.cold+0xe/0x41 [ 73.638472][ T9209] ? llcp_sock_getname+0x358/0x460 [ 73.643918][ T9209] kasan_report+0x12/0x20 [ 73.648259][ T9209] check_memory_region+0x134/0x1a0 [ 73.653380][ T9209] memcpy+0x24/0x50 [ 73.657181][ T9209] llcp_sock_getname+0x358/0x460 [ 73.662121][ T9209] __sys_getpeername+0x12b/0x290 [ 73.667163][ T9209] ? __ia32_sys_getsockname+0xb0/0xb0 [ 73.672821][ T9209] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 73.678548][ T9209] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 73.684259][ T9209] ? do_syscall_64+0x26/0x790 [ 73.688959][ T9209] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 73.695017][ T9209] ? do_syscall_64+0x26/0x790 [ 73.699716][ T9209] __x64_sys_getpeername+0x73/0xb0 [ 73.704850][ T9209] do_syscall_64+0xfa/0x790 [ 73.709366][ T9209] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 73.715273][ T9209] RIP: 0033:0x440349 [ 73.719151][ T9209] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 73.744516][ T9209] RSP: 002b:00007ffe5ee3bd38 EFLAGS: 00000246 ORIG_RAX: 0000000000000034 [ 73.752917][ T9209] RAX: ffffffffffffffda RBX: fe7f62c7329d9aaa RCX: 0000000000440349 [ 73.760889][ T9209] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 73.769115][ T9209] RBP: 65e500001d7ef6cc R08: 00007ffe5ee3bea8 R09: 00007ffe5ee3bea8 [ 73.777082][ T9209] R10: 00007ffe5ee3bea8 R11: 0000000000000246 R12: 211e267fffffffff [ 73.785061][ T9209] R13: ffff000000004d02 R14: aac8030fa4d62b9c R15: d303a55487e71188 [ 73.794452][ T9209] Kernel Offset: disabled [ 73.798903][ T9209] Rebooting in 86400 seconds..