[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.161' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 40.350565] audit: type=1400 audit(1594669936.700:8): avc: denied { execmem } for pid=6459 comm="syz-executor345" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 40.355508] netlink: 24 bytes leftover after parsing attributes in process `syz-executor345'. [ 40.436420] kasan: CONFIG_KASAN_INLINE enabled [ 40.441113] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 40.461652] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 40.467944] CPU: 1 PID: 6474 Comm: syz-executor345 Not tainted 4.19.132-syzkaller #0 [ 40.476357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 40.485699] RIP: 0010:__vxlan_dev_create+0x6cb/0xad0 [ 40.490780] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 6a 03 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 75 08 4c 89 f2 48 c1 ea 03 <80> 3c 02 00 0f 85 3e 03 00 00 49 89 2e 4d 8d 7d 10 48 85 ed 0f 84 [ 40.509675] RSP: 0018:ffff888089ff6db8 EFLAGS: 00010a02 [ 40.515034] RAX: dffffc0000000000 RBX: 1ffff110113fedb9 RCX: ffffffff8464b02f [ 40.522298] RDX: 1bd5a00000000040 RSI: ffffffff8464b219 RDI: ffff88808aec2188 [ 40.529561] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 40.536809] R10: 0000000000000005 R11: 0000000000000000 R12: 00000000fffffff0 [ 40.544057] R13: ffff88808aec2180 R14: dead000000000200 R15: ffff8880a74716c0 [ 40.551308] FS: 00007f4041d76700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 40.559525] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.565384] CR2: 0000559a3b8d0920 CR3: 0000000090215000 CR4: 00000000001406e0 [ 40.572633] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 40.579882] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 40.587144] Call Trace: [ 40.589739] ? vxlan_fdb_add+0x340/0x340 [ 40.593798] ? vxlan_setup+0x400/0x400 [ 40.597679] ? __kmalloc_node+0x38/0x70 [ 40.601651] vxlan_newlink+0xc0/0x120 [ 40.605439] ? __vxlan_dev_create+0xad0/0xad0 [ 40.609909] ? memset+0x20/0x40 [ 40.613171] ? rtnl_create_link+0x145/0xa40 [ 40.617471] ? __vxlan_dev_create+0xad0/0xad0 [ 40.621947] rtnl_newlink+0x1027/0x15a0 [ 40.625905] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 40.631763] ? rtnl_getlink+0x620/0x620 [ 40.635739] ? __save_stack_trace+0x72/0x190 [ 40.640125] ? deref_stack_reg+0x134/0x1d0 [ 40.644338] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 40.650211] ? deref_stack_reg+0x1d0/0x1d0 [ 40.654428] ? lock_downgrade+0x720/0x720 [ 40.658550] ? unwind_next_frame+0x10a9/0x1c60 [ 40.663126] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 40.668469] ? bpf_prog_kallsyms_find.part.0+0x1ad/0x270 [ 40.673900] ? is_bpf_text_address+0xfc/0x1b0 [ 40.678373] ? kernel_text_address+0xbd/0xf0 [ 40.682757] ? __kernel_text_address+0x9/0x30 [ 40.687246] ? unwind_get_return_address+0x51/0x90 [ 40.692174] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 40.697531] ? __save_stack_trace+0xaf/0x190 [ 40.701925] ? mark_held_locks+0xf0/0xf0 [ 40.705967] ? lock_acquire+0x170/0x3c0 [ 40.709937] ? avc_has_perm_noaudit+0x9c/0x390 [ 40.714497] ? check_preemption_disabled+0x41/0x280 [ 40.719501] ? __mutex_add_waiter+0x160/0x160 [ 40.723992] ? rtnetlink_rcv_msg+0x3c3/0xb80 [ 40.728379] ? rtnl_getlink+0x620/0x620 [ 40.732343] rtnetlink_rcv_msg+0x453/0xb80 [ 40.736572] ? rtnl_calcit.isra.0+0x430/0x430 [ 40.741045] ? __netlink_lookup+0x3fc/0x730 [ 40.745349] ? lock_downgrade+0x720/0x720 [ 40.749476] ? check_preemption_disabled+0x41/0x280 [ 40.754472] netlink_rcv_skb+0x160/0x440 [ 40.758517] ? rtnl_calcit.isra.0+0x430/0x430 [ 40.762990] ? netlink_ack+0xae0/0xae0 [ 40.766859] netlink_unicast+0x4d5/0x690 [ 40.770900] ? netlink_sendskb+0x110/0x110 [ 40.775114] netlink_sendmsg+0x6bb/0xc40 [ 40.779154] ? nlmsg_notify+0x1a0/0x1a0 [ 40.783123] ? nlmsg_notify+0x1a0/0x1a0 [ 40.787078] sock_sendmsg+0xc3/0x120 [ 40.790772] sock_no_sendpage+0xf5/0x140 [ 40.794826] ? __sk_mem_schedule+0xd0/0xd0 [ 40.799043] ? pipe_lock+0x63/0x80 [ 40.802574] ? __sk_mem_schedule+0xd0/0xd0 [ 40.806788] sock_sendpage+0xdf/0x140 [ 40.810581] pipe_to_sendpage+0x268/0x330 [ 40.814706] ? sockfs_setattr+0x160/0x160 [ 40.818836] ? direct_splice_actor+0x160/0x160 [ 40.823412] ? splice_from_pipe_next.part.0+0x2ad/0x360 [ 40.828754] __splice_from_pipe+0x389/0x800 [ 40.833053] ? direct_splice_actor+0x160/0x160 [ 40.837616] generic_splice_sendpage+0xd4/0x140 [ 40.842311] ? __splice_from_pipe+0x800/0x800 [ 40.846827] ? security_file_permission+0x1c0/0x220 [ 40.851823] ? __splice_from_pipe+0x800/0x800 [ 40.856316] __se_sys_splice+0xfe7/0x16d0 [ 40.860445] ? lock_acquire+0x170/0x3c0 [ 40.864411] ? ret_from_fork+0x8/0x30 [ 40.868188] ? __se_sys_tee+0xb90/0xb90 [ 40.872151] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 40.876892] ? trace_hardirqs_off_caller+0x69/0x210 [ 40.881898] ? do_syscall_64+0x21/0x620 [ 40.885851] do_syscall_64+0xf9/0x620 [ 40.889642] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 40.894808] RIP: 0033:0x445b59 [ 40.897991] Code: e8 bc b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 ab 11 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 40.916874] RSP: 002b:00007f4041d75d88 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 40.924562] RAX: ffffffffffffffda RBX: 00000000006dac58 RCX: 0000000000445b59 [ 40.931810] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000004 [ 40.939066] RBP: 00000000006dac50 R08: 000000000004ffe2 R09: 0000000000000000 [ 40.946328] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dac5c [ 40.953578] R13: 000000000000525a R14: 0000000000000000 R15: 0705001000000048 [ 40.960825] Modules linked in: [ 40.964942] ---[ end trace bf97bbdc364257ee ]--- [ 40.969719] RIP: 0010:__vxlan_dev_create+0x6cb/0xad0 [ 40.975555] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 6a 03 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 75 08 4c 89 f2 48 c1 ea 03 <80> 3c 02 00 0f 85 3e 03 00 00 49 89 2e 4d 8d 7d 10 48 85 ed 0f 84 [ 40.994846] RSP: 0018:ffff888089ff6db8 EFLAGS: 00010a02 [ 41.003172] RAX: dffffc0000000000 RBX: 1ffff110113fedb9 RCX: ffffffff8464b02f [ 41.010629] RDX: 1bd5a00000000040 RSI: ffffffff8464b219 RDI: ffff88808aec2188 [ 41.017936] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 41.025246] R10: 0000000000000005 R11: 0000000000000000 R12: 00000000fffffff0 [ 41.032535] R13: ffff88808aec2180 R14: dead000000000200 R15: ffff8880a74716c0 [ 41.039859] FS: 00007f4041d76700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 41.048312] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.054232] CR2: 00007f088b775740 CR3: 0000000090215000 CR4: 00000000001406f0 [ 41.061517] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 41.069266] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 41.076583] Kernel panic - not syncing: Fatal exception [ 41.083079] Kernel Offset: disabled [ 41.086693] Rebooting in 86400 seconds..