[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.13' (ECDSA) to the list of known hosts. executing program executing program syzkaller login: [ 36.568179] audit: type=1400 audit(1587894335.373:8): avc: denied { execmem } for pid=6333 comm="syz-executor816" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 36.635645] ================================================================== [ 36.643373] BUG: KASAN: null-ptr-deref in choke_reset+0x1fc/0x330 [ 36.649833] Write of size 8 at addr (null) by task syz-executor816/6337 [ 36.657718] [ 36.659502] CPU: 1 PID: 6337 Comm: syz-executor816 Not tainted 4.14.177-syzkaller #0 [ 36.667550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 36.677115] Call Trace: [ 36.679934] dump_stack+0x13e/0x194 [ 36.683564] ? choke_reset+0x1fc/0x330 [ 36.687803] kasan_report.cold+0x127/0x2ae [ 36.692087] memset+0x20/0x40 [ 36.695204] choke_reset+0x1fc/0x330 [ 36.698933] ? lock_acquire+0x170/0x3f0 [ 36.702921] ? choke_destroy+0x40/0x40 [ 36.706867] qdisc_reset+0x61/0x1e0 [ 36.710562] dev_deactivate_queue.constprop.0+0xc5/0x150 [ 36.716166] dev_deactivate_many+0xd6/0x960 [ 36.720799] dev_deactivate+0xe2/0x190 [ 36.724694] ? dev_deactivate_many+0x960/0x960 [ 36.729397] qdisc_graft+0x989/0xcd0 [ 36.733288] ? tc_dump_tclass+0x400/0x400 [ 36.737755] ? nla_parse+0x183/0x240 [ 36.741964] tc_modify_qdisc+0x99e/0x1181 [ 36.746132] ? qdisc_create+0xe30/0xe30 [ 36.750213] ? save_trace+0x290/0x290 [ 36.754220] ? rtnetlink_rcv_msg+0x2e8/0xb10 [ 36.758769] ? qdisc_create+0xe30/0xe30 [ 36.762873] rtnetlink_rcv_msg+0x3be/0xb10 [ 36.767372] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 36.772186] ? save_trace+0x290/0x290 [ 36.777653] ? save_trace+0x290/0x290 [ 36.781458] netlink_rcv_skb+0x127/0x370 [ 36.785639] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 36.790396] ? netlink_ack+0x980/0x980 [ 36.794435] netlink_unicast+0x437/0x620 [ 36.798577] ? netlink_attachskb+0x600/0x600 [ 36.803138] netlink_sendmsg+0x733/0xbe0 [ 36.807563] ? netlink_unicast+0x620/0x620 [ 36.811800] ? SYSC_sendto+0x2b0/0x2b0 [ 36.816252] ? security_socket_sendmsg+0x83/0xb0 [ 36.821484] ? netlink_unicast+0x620/0x620 [ 36.833078] sock_sendmsg+0xc5/0x100 [ 36.837160] ___sys_sendmsg+0x70a/0x840 [ 36.841561] ? trace_hardirqs_on+0x10/0x10 [ 36.845870] ? copy_msghdr_from_user+0x380/0x380 [ 36.850798] ? find_held_lock+0x2d/0x110 [ 36.855028] ? lock_downgrade+0x6e0/0x6e0 [ 36.859553] ? __fget+0x228/0x360 [ 36.863883] ? __fget_light+0x199/0x1f0 [ 36.867998] ? sockfd_lookup_light+0xb2/0x160 [ 36.872810] __sys_sendmsg+0xa3/0x120 [ 36.877089] ? SyS_shutdown+0x160/0x160 [ 36.881347] ? move_addr_to_kernel+0x60/0x60 [ 36.886367] SyS_sendmsg+0x27/0x40 [ 36.890014] ? __sys_sendmsg+0x120/0x120 [ 36.894070] do_syscall_64+0x1d5/0x640 [ 36.897958] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 36.903202] RIP: 0033:0x4469b9 [ 36.906383] RSP: 002b:00007f9335d33d98 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 36.914082] RAX: ffffffffffffffda RBX: 00000000006dbc48 RCX: 00000000004469b9 [ 36.921400] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000004 [ 36.928669] RBP: 00000000006dbc40 R08: 0000000000000003 R09: 0000000000000000 [ 36.935931] R10: 0000000000000008 R11: 0000000000000246 R12: 00000000006dbc4c [ 36.943186] R13: 00000000004ae8ce R14: 54c6c2ff093a6d32 R15: 0000000000010000 [ 36.950544] ================================================================== [ 36.958048] Disabling lock debugging due to kernel taint [ 36.963610] Kernel panic - not syncing: panic_on_warn set ... [ 36.963610] [ 36.970983] CPU: 1 PID: 6337 Comm: syz-executor816 Tainted: G B 4.14.177-syzkaller #0 [ 36.980079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 36.990068] Call Trace: [ 36.992688] dump_stack+0x13e/0x194 [ 36.996311] panic+0x1f9/0x42d [ 36.999484] ? add_taint.cold+0x16/0x16 [ 37.003451] ? choke_reset+0x1fc/0x330 [ 37.007318] kasan_end_report+0x43/0x49 [ 37.011273] kasan_report.cold+0x12f/0x2ae [ 37.015514] memset+0x20/0x40 [ 37.018623] choke_reset+0x1fc/0x330 [ 37.022349] ? lock_acquire+0x170/0x3f0 [ 37.026310] ? choke_destroy+0x40/0x40 [ 37.030180] qdisc_reset+0x61/0x1e0 [ 37.033802] dev_deactivate_queue.constprop.0+0xc5/0x150 [ 37.039235] dev_deactivate_many+0xd6/0x960 [ 37.043587] dev_deactivate+0xe2/0x190 [ 37.047463] ? dev_deactivate_many+0x960/0x960 [ 37.052044] qdisc_graft+0x989/0xcd0 [ 37.055741] ? tc_dump_tclass+0x400/0x400 [ 37.059886] ? nla_parse+0x183/0x240 [ 37.063583] tc_modify_qdisc+0x99e/0x1181 [ 37.067736] ? qdisc_create+0xe30/0xe30 [ 37.071696] ? save_trace+0x290/0x290 [ 37.075483] ? rtnetlink_rcv_msg+0x2e8/0xb10 [ 37.080497] ? qdisc_create+0xe30/0xe30 [ 37.084505] rtnetlink_rcv_msg+0x3be/0xb10 [ 37.088754] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 37.093327] ? save_trace+0x290/0x290 [ 37.097110] ? save_trace+0x290/0x290 [ 37.100894] netlink_rcv_skb+0x127/0x370 [ 37.104957] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 37.109535] ? netlink_ack+0x980/0x980 [ 37.113420] netlink_unicast+0x437/0x620 [ 37.117484] ? netlink_attachskb+0x600/0x600 [ 37.121874] netlink_sendmsg+0x733/0xbe0 [ 37.125932] ? netlink_unicast+0x620/0x620 [ 37.130147] ? SYSC_sendto+0x2b0/0x2b0 [ 37.134026] ? security_socket_sendmsg+0x83/0xb0 [ 37.138766] ? netlink_unicast+0x620/0x620 [ 37.142982] sock_sendmsg+0xc5/0x100 [ 37.146677] ___sys_sendmsg+0x70a/0x840 [ 37.150634] ? trace_hardirqs_on+0x10/0x10 [ 37.154866] ? copy_msghdr_from_user+0x380/0x380 [ 37.159609] ? find_held_lock+0x2d/0x110 [ 37.163670] ? lock_downgrade+0x6e0/0x6e0 [ 37.167826] ? __fget+0x228/0x360 [ 37.171292] ? __fget_light+0x199/0x1f0 [ 37.175258] ? sockfd_lookup_light+0xb2/0x160 [ 37.179750] __sys_sendmsg+0xa3/0x120 [ 37.183533] ? SyS_shutdown+0x160/0x160 [ 37.187506] ? move_addr_to_kernel+0x60/0x60 [ 37.191894] SyS_sendmsg+0x27/0x40 [ 37.195429] ? __sys_sendmsg+0x120/0x120 [ 37.199473] do_syscall_64+0x1d5/0x640 [ 37.203357] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 37.208527] RIP: 0033:0x4469b9 [ 37.211695] RSP: 002b:00007f9335d33d98 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 37.219383] RAX: ffffffffffffffda RBX: 00000000006dbc48 RCX: 00000000004469b9 [ 37.226640] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000004 [ 37.233912] RBP: 00000000006dbc40 R08: 0000000000000003 R09: 0000000000000000 [ 37.241161] R10: 0000000000000008 R11: 0000000000000246 R12: 00000000006dbc4c [ 37.248427] R13: 00000000004ae8ce R14: 54c6c2ff093a6d32 R15: 0000000000010000 [ 37.256822] Kernel Offset: disabled [ 37.260444] Rebooting in 86400 seconds..