[ OK ] Started Getty on tty2. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.10.31' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 67.045728][ T28] audit: type=1400 audit(1592973405.549:8): avc: denied { execmem } for pid=6780 comm="syz-executor827" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 67.051176][ T6780] general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] PREEMPT SMP KASAN [ 67.078409][ T6780] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 67.086815][ T6780] CPU: 0 PID: 6780 Comm: syz-executor827 Not tainted 5.7.0-syzkaller #0 [ 67.095132][ T6780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.105190][ T6780] RIP: 0010:qrtr_endpoint_post+0x92/0xfa0 [ 67.110922][ T6780] Code: 44 89 e6 e8 80 27 4e fe 48 85 c0 48 89 c5 0f 84 57 0e 00 00 e8 4f 7a 9e f9 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 48 89 da 83 e2 07 38 d0 7f 08 84 c0 0f 85 f7 0c 00 00 [ 67.131637][ T6780] RSP: 0018:ffffc900016a7c48 EFLAGS: 00010202 [ 67.137680][ T6780] RAX: dffffc0000000000 RBX: 0000000000000010 RCX: ffffffff86237e4b [ 67.145734][ T6780] RDX: 0000000000000002 RSI: ffffffff87d55471 RDI: ffff888090444150 [ 67.153833][ T6780] RBP: ffff888090444140 R08: ffff8880954ca340 R09: ffffed1011e43c5d [ 67.161977][ T6780] R10: ffff88808f21e2e3 R11: ffffed1011e43c5c R12: 0000000000000000 [ 67.170110][ T6780] R13: ffff88809a089100 R14: ffffc900016a7eb0 R15: 0000000000000000 [ 67.178162][ T6780] FS: 0000000000a65880(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 67.187613][ T6780] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 67.194171][ T6780] CR2: 0000000020000000 CR3: 0000000099699000 CR4: 00000000001406f0 [ 67.202465][ T6780] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 67.211279][ T6780] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 67.219222][ T6780] Call Trace: [ 67.222492][ T6780] ? find_held_lock+0x2d/0x110 [ 67.227859][ T6780] qrtr_tun_write_iter+0xf5/0x180 [ 67.232873][ T6780] new_sync_write+0x426/0x650 [ 67.237529][ T6780] ? new_sync_read+0x6d0/0x6d0 [ 67.242276][ T6780] ? __inode_security_revalidate+0xf0/0x140 [ 67.248145][ T6780] ? security_file_permission+0x8c/0x470 [ 67.253771][ T6780] ? file_open_root+0x400/0x400 [ 67.258630][ T6780] __vfs_write+0xc9/0x100 [ 67.262967][ T6780] vfs_write+0x268/0x5d0 [ 67.267188][ T6780] ksys_write+0x12d/0x250 [ 67.271490][ T6780] ? __ia32_sys_read+0xb0/0xb0 [ 67.276237][ T6780] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 67.282729][ T6780] ? do_syscall_64+0x21/0x7d0 [ 67.287491][ T6780] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 67.294593][ T6780] do_syscall_64+0xf6/0x7d0 [ 67.299113][ T6780] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 67.304988][ T6780] RIP: 0033:0x4401b9 [ 67.308871][ T6780] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 67.328894][ T6780] RSP: 002b:00007fff99653dd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 67.337744][ T6780] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004401b9 [ 67.345784][ T6780] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 67.354423][ T6780] RBP: 00000000006ca018 R08: 0000000000000000 R09: 00000000004002c8 [ 67.362386][ T6780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000401a40 [ 67.370777][ T6780] R13: 0000000000401ad0 R14: 0000000000000000 R15: 0000000000000000 [ 67.380224][ T6780] Modules linked in: [ 67.384694][ T6780] ---[ end trace 5199d7949b247ba3 ]--- [ 67.390217][ T6780] RIP: 0010:qrtr_endpoint_post+0x92/0xfa0 [ 67.396030][ T6780] Code: 44 89 e6 e8 80 27 4e fe 48 85 c0 48 89 c5 0f 84 57 0e 00 00 e8 4f 7a 9e f9 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 48 89 da 83 e2 07 38 d0 7f 08 84 c0 0f 85 f7 0c 00 00 [ 67.415863][ T6780] RSP: 0018:ffffc900016a7c48 EFLAGS: 00010202 [ 67.421976][ T6780] RAX: dffffc0000000000 RBX: 0000000000000010 RCX: ffffffff86237e4b [ 67.430000][ T6780] RDX: 0000000000000002 RSI: ffffffff87d55471 RDI: ffff888090444150 [ 67.438019][ T6780] RBP: ffff888090444140 R08: ffff8880954ca340 R09: ffffed1011e43c5d [ 67.446320][ T6780] R10: ffff88808f21e2e3 R11: ffffed1011e43c5c R12: 0000000000000000 [ 67.455149][ T6780] R13: ffff88809a089100 R14: ffffc900016a7eb0 R15: 0000000000000000 [ 67.463250][ T6780] FS: 0000000000a65880(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 67.472280][ T6780] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 67.479768][ T6780] CR2: 0000000020000000 CR3: 0000000099699000 CR4: 00000000001406f0 [ 67.487828][ T6780] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 67.496038][ T6780] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 67.504063][ T6780] Kernel panic - not syncing: Fatal exception [ 67.511690][ T6780] Kernel Offset: disabled [ 67.516113][ T6780] Rebooting in 86400 seconds..