[ 80.613622][ T27] audit: type=1800 audit(1579324567.309:25): pid=9672 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 81.696231][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 81.696243][ T27] audit: type=1800 audit(1579324568.389:29): pid=9672 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 81.723040][ T27] audit: type=1800 audit(1579324568.389:30): pid=9672 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.133' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 90.929460][ T9824] list_del corruption, ffff8880a67e4100->prev is LIST_POISON2 (dead000000000122) [ 90.939787][ T9824] ------------[ cut here ]------------ [ 90.945478][ T9824] kernel BUG at lib/list_debug.c:48! [ 90.951086][ T9824] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 90.957895][ T9824] CPU: 0 PID: 9824 Comm: syz-executor114 Not tainted 5.5.0-rc6-next-20200116-syzkaller #0 [ 90.967875][ T9824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 90.977942][ T9824] RIP: 0010:__list_del_entry_valid.cold+0x37/0x4f [ 90.984343][ T9824] Code: ba fd 0f 0b 4c 89 ea 4c 89 f6 48 c7 c7 e0 c7 91 88 e8 30 62 ba fd 0f 0b 4c 89 e2 4c 89 f6 48 c7 c7 40 c8 91 88 e8 1c 62 ba fd <0f> 0b 4c 89 f6 48 c7 c7 00 c9 91 88 e8 0b 62 ba fd 0f 0b cc cc cc [ 91.003948][ T9824] RSP: 0018:ffffc9000215f338 EFLAGS: 00010286 [ 91.010005][ T9824] RAX: 000000000000004e RBX: ffff8880a67e4100 RCX: 0000000000000000 [ 91.018080][ T9824] RDX: 0000000000000000 RSI: ffffffff815eb7c6 RDI: fffff5200042be59 [ 91.026159][ T9824] RBP: ffffc9000215f350 R08: 000000000000004e R09: ffffed1015d06659 [ 91.034242][ T9824] R10: ffffed1015d06658 R11: ffff8880ae8332c7 R12: dead000000000122 [ 91.042196][ T9824] R13: ffff8880a9753570 R14: ffff8880a67e4100 R15: ffff8880a67e4108 [ 91.050179][ T9824] FS: 00000000019ae880(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 91.059287][ T9824] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 91.065853][ T9824] CR2: 0000000020000280 CR3: 0000000095176000 CR4: 00000000001406f0 [ 91.073831][ T9824] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 91.081849][ T9824] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 91.089961][ T9824] Call Trace: [ 91.093246][ T9824] nft_obj_del+0xcb/0x1f0 [ 91.097575][ T9824] ? nft_unregister_set+0x150/0x150 [ 91.102802][ T9824] ? nf_tables_getflowtable+0x4c0/0x4c0 [ 91.108407][ T9824] ? nft_objname_hash+0x610/0x610 [ 91.113420][ T9824] ? nft_chain_hash_cmp+0x80/0x80 [ 91.118500][ T9824] nf_tables_commit+0x1339/0x3c90 [ 91.123821][ T9824] ? nla_memcpy+0xb0/0xb0 [ 91.128143][ T9824] ? nf_tables_setelem_notify.constprop.0+0x1f0/0x1f0 [ 91.134996][ T9824] ? __nla_parse+0x43/0x60 [ 91.139414][ T9824] nfnetlink_rcv_batch+0xdb5/0x1780 [ 91.144804][ T9824] ? nf_tables_dump_obj+0x141/0xb20 [ 91.150360][ T9824] ? nfnetlink_subsys_register+0x2b0/0x2b0 [ 91.156161][ T9824] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 91.162419][ T9824] ? apparmor_capable+0x4df/0x910 [ 91.167462][ T9824] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 91.173690][ T9824] ? __nla_validate_parse+0x2d0/0x1ee0 [ 91.179151][ T9824] ? cap_capable+0x205/0x270 [ 91.183734][ T9824] ? nla_memcpy+0xb0/0xb0 [ 91.188057][ T9824] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 91.194282][ T9824] ? ns_capable_common+0x93/0x100 [ 91.199287][ T9824] ? __nla_parse+0x43/0x60 [ 91.203786][ T9824] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 91.209500][ T9824] nfnetlink_rcv+0x3e7/0x460 [ 91.214074][ T9824] ? nfnetlink_rcv_batch+0x1780/0x1780 [ 91.219532][ T9824] ? netlink_deliver_tap+0x248/0xbf0 [ 91.224809][ T9824] ? __kasan_check_write+0x14/0x20 [ 91.229905][ T9824] netlink_unicast+0x59e/0x7e0 [ 91.234674][ T9824] ? netlink_attachskb+0x870/0x870 [ 91.239914][ T9824] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 91.245626][ T9824] ? __check_object_size+0x3d/0x437 [ 91.250855][ T9824] netlink_sendmsg+0x91c/0xea0 [ 91.255615][ T9824] ? netlink_unicast+0x7e0/0x7e0 [ 91.260552][ T9824] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 91.266092][ T9824] ? apparmor_socket_sendmsg+0x2a/0x30 [ 91.271717][ T9824] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 91.277949][ T9824] ? security_socket_sendmsg+0x8d/0xc0 [ 91.283393][ T9824] ? netlink_unicast+0x7e0/0x7e0 [ 91.288326][ T9824] sock_sendmsg+0xd7/0x130 [ 91.292728][ T9824] ____sys_sendmsg+0x753/0x880 [ 91.297485][ T9824] ? kernel_sendmsg+0x50/0x50 [ 91.302167][ T9824] ? lockdep_init_map+0x1be/0x6d0 [ 91.307338][ T9824] ___sys_sendmsg+0x100/0x170 [ 91.312896][ T9824] ? sendmsg_copy_msghdr+0x70/0x70 [ 91.318015][ T9824] ? __kasan_check_read+0x11/0x20 [ 91.323058][ T9824] ? __lock_acquire+0x8a0/0x4a00 [ 91.328031][ T9824] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 91.334398][ T9824] ? __this_cpu_preempt_check+0x35/0x190 [ 91.340022][ T9824] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 91.346258][ T9824] ? percpu_counter_add_batch+0x13c/0x190 [ 91.352241][ T9824] ? __fd_install+0x1bc/0x640 [ 91.357310][ T9824] ? find_held_lock+0x35/0x130 [ 91.362186][ T9824] ? __fd_install+0x1bc/0x640 [ 91.366860][ T9824] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 91.373142][ T9824] ? __fget_light+0x1ad/0x270 [ 91.377802][ T9824] ? __fdget+0x1b/0x20 [ 91.381986][ T9824] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 91.388431][ T9824] __sys_sendmsg+0x105/0x1d0 [ 91.393011][ T9824] ? __sys_sendmsg_sock+0xc0/0xc0 [ 91.398084][ T9824] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 91.403615][ T9824] ? do_syscall_64+0x26/0x790 [ 91.408441][ T9824] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 91.414555][ T9824] ? do_syscall_64+0x26/0x790 [ 91.419227][ T9824] __x64_sys_sendmsg+0x78/0xb0 [ 91.423997][ T9824] do_syscall_64+0xfa/0x790 [ 91.428499][ T9824] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 91.434375][ T9824] RIP: 0033:0x4406a9 [ 91.438389][ T9824] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 91.458110][ T9824] RSP: 002b:00007ffe67d0c4f8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.466505][ T9824] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004406a9 [ 91.474465][ T9824] RDX: 0000000000042000 RSI: 0000000020000140 RDI: 0000000000000004 [ 91.482614][ T9824] RBP: 00000000006ca018 R08: 0000000000000001 R09: 00000000004002c8 [ 91.490588][ T9824] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000401f30 [ 91.498547][ T9824] R13: 0000000000401fc0 R14: 0000000000000000 R15: 0000000000000000 [ 91.506510][ T9824] Modules linked in: [ 91.510921][ T9824] ---[ end trace a2d301dc10f74586 ]--- [ 91.517464][ T9824] RIP: 0010:__list_del_entry_valid.cold+0x37/0x4f [ 91.523987][ T9824] Code: ba fd 0f 0b 4c 89 ea 4c 89 f6 48 c7 c7 e0 c7 91 88 e8 30 62 ba fd 0f 0b 4c 89 e2 4c 89 f6 48 c7 c7 40 c8 91 88 e8 1c 62 ba fd <0f> 0b 4c 89 f6 48 c7 c7 00 c9 91 88 e8 0b 62 ba fd 0f 0b cc cc cc [ 91.543730][ T9824] RSP: 0018:ffffc9000215f338 EFLAGS: 00010286 [ 91.549867][ T9824] RAX: 000000000000004e RBX: ffff8880a67e4100 RCX: 0000000000000000 [ 91.558028][ T9824] RDX: 0000000000000000 RSI: ffffffff815eb7c6 RDI: fffff5200042be59 [ 91.566341][ T9824] RBP: ffffc9000215f350 R08: 000000000000004e R09: ffffed1015d06659 [ 91.574347][ T9824] R10: ffffed1015d06658 R11: ffff8880ae8332c7 R12: dead000000000122 [ 91.582366][ T9824] R13: ffff8880a9753570 R14: ffff8880a67e4100 R15: ffff8880a67e4108 [ 91.590333][ T9824] FS: 00000000019ae880(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 91.599388][ T9824] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 91.606078][ T9824] CR2: 0000000020000280 CR3: 0000000095176000 CR4: 00000000001406f0 [ 91.614293][ T9824] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 91.622487][ T9824] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 91.630463][ T9824] Kernel panic - not syncing: Fatal exception [ 91.638470][ T9824] Kernel Offset: disabled [ 91.642883][ T9824] Rebooting in 86400 seconds..