[ 39.246602][ T26] audit: type=1800 audit(1571779575.487:27): pid=7616 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 39.273703][ T26] audit: type=1800 audit(1571779575.487:28): pid=7616 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 40.055885][ T26] audit: type=1800 audit(1571779576.357:29): pid=7616 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 40.075423][ T26] audit: type=1800 audit(1571779576.357:30): pid=7616 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.166' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program syzkaller login: [ 47.982687][ T7774] ================================================================== [ 47.991057][ T7774] BUG: KASAN: null-ptr-deref in llcp_sock_getname+0x24b/0x3c0 [ 47.998517][ T7774] Read of size 43 at addr 0000000000000000 by task syz-executor542/7774 [ 48.006846][ T7774] [ 48.009183][ T7774] CPU: 1 PID: 7774 Comm: syz-executor542 Not tainted 5.4.0-rc4+ #0 [ 48.017068][ T7774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 48.027210][ T7774] Call Trace: executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 48.030641][ T7774] dump_stack+0x1d8/0x2f8 [ 48.034987][ T7774] __kasan_report+0x169/0x1c0 [ 48.039674][ T7774] ? llcp_sock_getname+0x24b/0x3c0 [ 48.044789][ T7774] ? __local_bh_enable_ip+0x13a/0x240 [ 48.050165][ T7774] ? llcp_sock_getname+0x24b/0x3c0 [ 48.055280][ T7774] kasan_report+0x26/0x50 [ 48.059616][ T7774] ? __local_bh_enable_ip+0x13a/0x240 [ 48.064996][ T7774] check_memory_region+0x2cf/0x2e0 [ 48.070110][ T7774] ? llcp_sock_getname+0x24b/0x3c0 [ 48.075234][ T7774] memcpy+0x28/0x60 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 48.079049][ T7774] llcp_sock_getname+0x24b/0x3c0 [ 48.083994][ T7774] __sys_getpeername+0x1b4/0x280 [ 48.088948][ T7774] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 48.094675][ T7774] __x64_sys_getpeername+0x7b/0x90 [ 48.099796][ T7774] do_syscall_64+0xf7/0x1c0 [ 48.104302][ T7774] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 48.110195][ T7774] RIP: 0033:0x4412c9 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 48.114185][ T7774] Code: e8 ac e8 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb 08 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 48.133791][ T7774] RSP: 002b:00007ffcc86310b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000034 [ 48.142205][ T7774] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004412c9 [ 48.150180][ T7774] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 48.158151][ T7774] RBP: 00000000006cb018 R08: 00000000004002c8 R09: 00000000004002c8 [ 48.166152][ T7774] R10: 00000000004002c8 R11: 0000000000000246 R12: 0000000000402040 executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 48.177183][ T7774] R13: 00000000004020d0 R14: 0000000000000000 R15: 0000000000000000 [ 48.185786][ T7774] ================================================================== [ 48.194110][ T7774] Disabling lock debugging due to kernel taint [ 48.203793][ T7841] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 48.206337][ T7774] Kernel panic - not syncing: panic_on_warn set ... [ 48.211625][ T7841] #PF: supervisor read access in kernel mode [ 48.224240][ T7841] #PF: error_code(0x0000) - not-present page [ 48.230197][ T7841] PGD a3bd7067 P4D a3bd7067 PUD 98c7a067 PMD 0 [ 48.236421][ T7841] Oops: 0000 [#1] PREEMPT SMP KASAN [ 48.241594][ T7841] CPU: 0 PID: 7841 Comm: syz-executor542 Tainted: G B 5.4.0-rc4+ #0 [ 48.250857][ T7841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 48.260998][ T7841] RIP: 0010:memcpy_erms+0x6/0x10 [ 48.265914][ T7841] Code: 90 90 90 90 eb 1e 0f 1f 00 48 89 f8 48 89 d1 48 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 c3 66 0f 1f 44 00 00 48 89 f8 48 89 d1 a4 c3 0f 1f 80 00 00 00 00 48 89 f8 48 83 fa 20 72 7e 40 38 fe [ 48.285838][ T7841] RSP: 0018:ffff8880a387fdb0 EFLAGS: 00010256 [ 48.291889][ T7841] RAX: ffff8880a387fe42 RBX: 000000000000002b RCX: 000000000000002b [ 48.299854][ T7841] RDX: 000000000000002b RSI: 0000000000000000 RDI: ffff8880a387fe42 [ 48.307811][ T7841] RBP: ffff8880a387fdd8 R08: dffffc0000000000 R09: ffffed101470ffce [ 48.315756][ T7841] R10: ffffed101470ffce R11: 0000000000000000 R12: ffffffff87615a0b [ 48.323703][ T7841] R13: 00000000000000ff R14: 0000000000000000 R15: ffff8880a387fe42 [ 48.331665][ T7841] FS: 0000000000d1f880(0000) GS:ffff8880aea00000(0000) knlGS:0000000000000000 [ 48.340570][ T7841] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 48.347129][ T7841] CR2: 0000000000000000 CR3: 00000000a3db6000 CR4: 00000000001406f0 [ 48.355078][ T7841] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 48.363025][ T7841] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 48.370973][ T7841] Call Trace: [ 48.374246][ T7841] ? memcpy+0x49/0x60 [ 48.378219][ T7841] llcp_sock_getname+0x24b/0x3c0 [ 48.383138][ T7841] __sys_getpeername+0x1b4/0x280 [ 48.388055][ T7841] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 48.393755][ T7841] ? trace_hardirqs_off_caller+0x58/0x80 [ 48.399380][ T7841] __x64_sys_getpeername+0x7b/0x90 [ 48.404476][ T7841] do_syscall_64+0xf7/0x1c0 [ 48.408962][ T7841] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 48.414829][ T7841] RIP: 0033:0x4412c9 [ 48.418700][ T7841] Code: e8 ac e8 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb 08 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 48.438279][ T7841] RSP: 002b:00007ffcc86310b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000034 [ 48.446663][ T7841] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004412c9 [ 48.454616][ T7841] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 48.463182][ T7841] RBP: 000000000000bc1b R08: 00000000004002c8 R09: 00000000004002c8 [ 48.471752][ T7841] R10: 00000000004002c8 R11: 0000000000000246 R12: 0000000000402040 [ 48.479699][ T7841] R13: 00000000004020d0 R14: 0000000000000000 R15: 0000000000000000 [ 48.487736][ T7841] Modules linked in: [ 48.491606][ T7841] CR2: 0000000000000000 [ 48.497037][ T7774] Kernel Offset: disabled [ 48.501359][ T7774] Rebooting in 86400 seconds..