[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 55.802927][ T26] audit: type=1800 audit(1570412918.863:25): pid=8568 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 55.838663][ T26] audit: type=1800 audit(1570412918.863:26): pid=8568 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 55.868887][ T26] audit: type=1800 audit(1570412918.863:27): pid=8568 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.110' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 64.637940][ T8720] netlink: 'syz-executor766': attribute type 2 has an invalid length. [ 64.646229][ T8720] kasan: CONFIG_KASAN_INLINE enabled [ 64.651601][ T8720] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 64.659848][ T8720] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 64.666781][ T8720] CPU: 1 PID: 8720 Comm: syz-executor766 Not tainted 5.4.0-rc1+ #0 [ 64.674642][ T8720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 64.684679][ T8720] RIP: 0010:dsmark_init+0x193/0x640 [ 64.689866][ T8720] Code: 85 db 58 0f 88 7d 03 00 00 e8 f9 07 ac fb 48 8b 9d 70 ff ff ff 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 04 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 ca [ 64.709445][ T8720] RSP: 0018:ffff8880a78e73b8 EFLAGS: 00010247 [ 64.715481][ T8720] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff85c70ad9 [ 64.723424][ T8720] RDX: 0000000000000000 RSI: ffffffff85c70ae7 RDI: 0000000000000004 [ 64.731371][ T8720] RBP: ffff8880a78e74b0 R08: ffff88808cc402c0 R09: ffffed1015d26159 [ 64.739313][ T8720] R10: ffffed1015d26158 R11: ffff8880ae930ac7 R12: ffff8880a4ffe4c0 [ 64.747265][ T8720] R13: dffffc0000000000 R14: ffff8880a78e78c0 R15: 0000000000000000 [ 64.755213][ T8720] FS: 0000000001417880(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 64.764115][ T8720] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.770670][ T8720] CR2: 0000000020000080 CR3: 000000009043c000 CR4: 00000000001406e0 [ 64.778616][ T8720] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 64.786558][ T8720] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 64.794501][ T8720] Call Trace: [ 64.797765][ T8720] ? dsmark_dump_class+0x680/0x680 [ 64.802853][ T8720] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 64.809067][ T8720] ? lockdep_rtnl_is_held+0x26/0x30 [ 64.814241][ T8720] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 64.820453][ T8720] ? dsmark_dump_class+0x680/0x680 [ 64.825536][ T8720] qdisc_create+0x4ee/0x1210 [ 64.830100][ T8720] ? tc_get_qdisc+0xc10/0xc10 [ 64.834750][ T8720] ? __nla_parse+0x43/0x60 [ 64.839141][ T8720] tc_modify_qdisc+0x524/0x1c50 [ 64.843965][ T8720] ? qdisc_create+0x1210/0x1210 [ 64.848803][ T8720] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 64.855100][ T8720] ? qdisc_create+0x1210/0x1210 [ 64.859924][ T8720] rtnetlink_rcv_msg+0x463/0xb00 [ 64.864858][ T8720] ? rtnl_bridge_getlink+0x910/0x910 [ 64.870117][ T8720] ? lock_downgrade+0x920/0x920 [ 64.874943][ T8720] ? netlink_deliver_tap+0x22d/0xbf0 [ 64.880201][ T8720] ? find_held_lock+0x35/0x130 [ 64.884938][ T8720] netlink_rcv_skb+0x177/0x450 [ 64.889673][ T8720] ? rtnl_bridge_getlink+0x910/0x910 [ 64.894933][ T8720] ? netlink_ack+0xb50/0xb50 [ 64.899497][ T8720] ? __kasan_check_read+0x11/0x20 [ 64.904493][ T8720] ? netlink_deliver_tap+0x254/0xbf0 [ 64.909753][ T8720] rtnetlink_rcv+0x1d/0x30 [ 64.914142][ T8720] netlink_unicast+0x531/0x710 [ 64.918880][ T8720] ? netlink_attachskb+0x7c0/0x7c0 [ 64.923964][ T8720] ? _copy_from_iter_full+0x25d/0x8c0 [ 64.929322][ T8720] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 64.935012][ T8720] ? __check_object_size+0x3d/0x437 [ 64.940184][ T8720] netlink_sendmsg+0x8a5/0xd60 [ 64.944921][ T8720] ? netlink_unicast+0x710/0x710 [ 64.949830][ T8720] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 64.955349][ T8720] ? apparmor_socket_sendmsg+0x2a/0x30 [ 64.960789][ T8720] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 64.967009][ T8720] ? security_socket_sendmsg+0x8d/0xc0 [ 64.972441][ T8720] ? netlink_unicast+0x710/0x710 [ 64.977354][ T8720] sock_sendmsg+0xd7/0x130 [ 64.981745][ T8720] ___sys_sendmsg+0x803/0x920 [ 64.986395][ T8720] ? copy_msghdr_from_user+0x440/0x440 [ 64.991826][ T8720] ? __might_fault+0x12b/0x1e0 [ 64.996562][ T8720] ? find_held_lock+0x35/0x130 [ 65.001320][ T8720] ? lock_downgrade+0x920/0x920 [ 65.006147][ T8720] ? __kasan_check_read+0x11/0x20 [ 65.011144][ T8720] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 65.017357][ T8720] ? __fget_light+0x1a9/0x230 [ 65.022006][ T8720] ? __fdget+0x1b/0x20 [ 65.026048][ T8720] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 65.032261][ T8720] __sys_sendmsg+0x105/0x1d0 [ 65.036822][ T8720] ? __sys_sendmsg_sock+0xd0/0xd0 [ 65.041824][ T8720] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 65.047255][ T8720] ? do_syscall_64+0x26/0x760 [ 65.051907][ T8720] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 65.057943][ T8720] ? do_syscall_64+0x26/0x760 [ 65.062594][ T8720] __x64_sys_sendmsg+0x78/0xb0 [ 65.067330][ T8720] do_syscall_64+0xfa/0x760 [ 65.071805][ T8720] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 65.077668][ T8720] RIP: 0033:0x440369 [ 65.081539][ T8720] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 65.101115][ T8720] RSP: 002b:00007fff11d68ea8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.109496][ T8720] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440369 [ 65.117441][ T8720] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 65.125384][ T8720] RBP: 00000000006ca018 R08: 0000000000000000 R09: 00000000004002c8 [ 65.133327][ T8720] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000401bf0 [ 65.141281][ T8720] R13: 0000000000401c80 R14: 0000000000000000 R15: 0000000000000000 [ 65.149240][ T8720] Modules linked in: [ 65.153723][ T8720] ---[ end trace 87552473a673c06e ]--- [ 65.159321][ T8720] RIP: 0010:dsmark_init+0x193/0x640 [ 65.164497][ T8720] Code: 85 db 58 0f 88 7d 03 00 00 e8 f9 07 ac fb 48 8b 9d 70 ff ff ff 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 04 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 ca [ 65.184179][ T8720] RSP: 0018:ffff8880a78e73b8 EFLAGS: 00010247 [ 65.190267][ T8720] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff85c70ad9 [ 65.198220][ T8720] RDX: 0000000000000000 RSI: ffffffff85c70ae7 RDI: 0000000000000004 [ 65.206217][ T8720] RBP: ffff8880a78e74b0 R08: ffff88808cc402c0 R09: ffffed1015d26159 [ 65.214211][ T8720] R10: ffffed1015d26158 R11: ffff8880ae930ac7 R12: ffff8880a4ffe4c0 [ 65.222206][ T8720] R13: dffffc0000000000 R14: ffff8880a78e78c0 R15: 0000000000000000 [ 65.230190][ T8720] FS: 0000000001417880(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 65.239128][ T8720] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 65.245699][ T8720] CR2: 0000000020000080 CR3: 000000009043c000 CR4: 00000000001406e0 [ 65.253740][ T8720] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 65.261726][ T8720] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 65.269718][ T8720] Kernel panic - not syncing: Fatal exception [ 65.277098][ T8720] Kernel Offset: disabled [ 65.281417][ T8720] Rebooting in 86400 seconds..