[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 51.824647][ T26] audit: type=1800 audit(1566112646.035:25): pid=8388 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 51.846032][ T26] audit: type=1800 audit(1566112646.035:26): pid=8388 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 51.881536][ T26] audit: type=1800 audit(1566112646.035:27): pid=8388 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.225' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program executing program executing program syzkaller login: [ 62.994047][ T8541] IPVS: ftp: loaded support on port[0] = 21 [ 63.053535][ T8549] ------------[ cut here ]------------ [ 63.059066][ T8549] kernel BUG at include/linux/skbuff.h:2225! [ 63.065066][ T8549] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 63.071128][ T8549] CPU: 0 PID: 8549 Comm: syz-executor031 Not tainted 5.3.0-rc3+ #137 [ 63.079162][ T8549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 63.089208][ T8549] RIP: 0010:skb_pull+0xea/0x110 [ 63.094037][ T8549] Code: 9d c8 00 00 00 49 89 dc 49 89 9d c8 00 00 00 e8 9c d5 dd fb 4c 89 e0 5b 41 5c 41 5d 41 5e 5d c3 45 31 e4 eb ea e8 86 d5 dd fb <0f> 0b e8 df 03 18 fc e9 44 ff ff ff e8 d5 03 18 fc eb 8a e8 ee 03 [ 63.113733][ T8549] RSP: 0018:ffff888089dbee10 EFLAGS: 00010293 [ 63.119771][ T8549] RAX: ffff8880934ce580 RBX: 0000000000000004 RCX: ffffffff8594b3a6 [ 63.127715][ T8549] RDX: 0000000000000000 RSI: ffffffff8594b3fa RDI: 0000000000000004 [ 63.135664][ T8549] RBP: ffff888089dbee30 R08: ffff8880934ce580 R09: fffffbfff14a914f [ 63.143607][ T8549] R10: fffffbfff14a914e R11: ffffffff8a548a77 R12: 00000000a81e02cc [ 63.151558][ T8549] R13: ffff888089dbf478 R14: 00000000ffff8880 R15: ffff888089dbf478 [ 63.159506][ T8549] FS: 0000555556c55880(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 63.168405][ T8549] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.174959][ T8549] CR2: 0000000020000100 CR3: 0000000096758000 CR4: 00000000001406f0 [ 63.182904][ T8549] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 63.190845][ T8549] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 63.198807][ T8549] Call Trace: [ 63.202163][ T8549] sctp_inq_pop+0x2f1/0xd80 [ 63.206641][ T8549] sctp_endpoint_bh_rcv+0x184/0x8d0 [ 63.211848][ T8549] ? sctp_endpoint_lookup_assoc+0x290/0x290 [ 63.217809][ T8549] ? rwlock_bug.part.0+0x90/0x90 [ 63.222721][ T8549] ? lock_acquire+0x190/0x410 [ 63.227370][ T8549] sctp_inq_push+0x1e4/0x280 [ 63.231931][ T8549] sctp_rcv+0x2807/0x3590 [ 63.236234][ T8549] ? sctp_addrs_lookup_transport+0x7a0/0x7a0 [ 63.242183][ T8549] ? __kasan_check_read+0x11/0x20 [ 63.247179][ T8549] ? mark_lock+0xc0/0x11e0 [ 63.251573][ T8549] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 63.257782][ T8549] ? raw6_local_deliver+0x5f9/0xae0 [ 63.263180][ T8549] sctp6_rcv+0x17/0x30 [ 63.267221][ T8549] ip6_protocol_deliver_rcu+0x2fe/0x1660 [ 63.272831][ T8549] ip6_input_finish+0x84/0x170 [ 63.277564][ T8549] ip6_input+0xe4/0x3f0 [ 63.281693][ T8549] ? ip6_input_finish+0x170/0x170 [ 63.286700][ T8549] ? ip6_protocol_deliver_rcu+0x1660/0x1660 [ 63.292565][ T8549] ip6_sublist_rcv_finish+0x98/0x1e0 [ 63.297822][ T8549] ip6_sublist_rcv+0x80c/0xcf0 [ 63.302558][ T8549] ? ip6_rcv_finish+0x2f0/0x2f0 [ 63.307385][ T8549] ? ip6_rcv_finish_core.isra.0+0x560/0x560 [ 63.313249][ T8549] ? ip6_rcv_core.isra.0+0x1011/0x1bb0 [ 63.318794][ T8549] ipv6_list_rcv+0x373/0x4b0 [ 63.323356][ T8549] ? ipv6_rcv+0x420/0x420 [ 63.327660][ T8549] ? ipv6_rcv+0x420/0x420 [ 63.331962][ T8549] __netif_receive_skb_list_core+0x5fc/0x9d0 [ 63.337914][ T8549] ? ktime_get_with_offset+0x13a/0x350 [ 63.343340][ T8549] ? ktime_get_with_offset+0x13a/0x350 [ 63.348780][ T8549] ? process_backlog+0x750/0x750 [ 63.353693][ T8549] ? lock_acquire+0x190/0x410 [ 63.358340][ T8549] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 63.364551][ T8549] ? __kasan_check_read+0x11/0x20 [ 63.369551][ T8549] netif_receive_skb_list_internal+0x7eb/0xe60 [ 63.375693][ T8549] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 63.381910][ T8549] ? __netif_receive_skb_list_core+0x9d0/0x9d0 [ 63.388036][ T8549] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 63.394248][ T8549] ? eth_gro_receive+0x890/0x890 [ 63.399157][ T8549] gro_normal_list.part.0+0x1e/0xb0 [ 63.404329][ T8549] napi_gro_frags+0xa6a/0xea0 [ 63.409065][ T8549] tun_get_user+0x2e98/0x3fa0 [ 63.413715][ T8549] ? __kasan_check_read+0x11/0x20 [ 63.418718][ T8549] ? tun_build_skb.isra.0+0x1390/0x1390 [ 63.424326][ T8549] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 63.430541][ T8549] ? __kasan_check_read+0x11/0x20 [ 63.435541][ T8549] tun_chr_write_iter+0xbd/0x156 [ 63.440452][ T8549] do_iter_readv_writev+0x5f8/0x8f0 [ 63.445629][ T8549] ? no_seek_end_llseek_size+0x70/0x70 [ 63.451064][ T8549] ? apparmor_file_permission+0x25/0x30 [ 63.456582][ T8549] ? rw_verify_area+0x126/0x360 [ 63.461406][ T8549] do_iter_write+0x184/0x610 [ 63.465973][ T8549] ? dup_iter+0x250/0x250 [ 63.470376][ T8549] vfs_writev+0x1b3/0x2f0 [ 63.474696][ T8549] ? vfs_iter_write+0xb0/0xb0 [ 63.479344][ T8549] ? find_held_lock+0x35/0x130 [ 63.484080][ T8549] ? __do_page_fault+0x56a/0xdd0 [ 63.488995][ T8549] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 63.495205][ T8549] ? __fget_light+0x1a9/0x230 [ 63.499857][ T8549] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 63.506065][ T8549] do_writev+0x15b/0x330 [ 63.510278][ T8549] ? vfs_writev+0x2f0/0x2f0 [ 63.514753][ T8549] ? do_syscall_64+0x26/0x6a0 [ 63.519407][ T8549] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 63.525443][ T8549] ? do_syscall_64+0x26/0x6a0 [ 63.530105][ T8549] __x64_sys_writev+0x75/0xb0 [ 63.534756][ T8549] do_syscall_64+0xfd/0x6a0 [ 63.539231][ T8549] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 63.545108][ T8549] RIP: 0033:0x441b10 [ 63.548981][ T8549] Code: 05 48 3d 01 f0 ff ff 0f 83 5d 09 fc ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 83 3d 01 95 29 00 00 75 14 b8 14 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 34 09 fc ff c3 48 83 ec 08 e8 ba 2b 00 00 [ 63.568643][ T8549] RSP: 002b:00007ffd716292b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 63.577023][ T8549] RAX: ffffffffffffffda RBX: 00007ffd716292d0 RCX: 0000000000441b10 [ 63.584967][ T8549] RDX: 0000000000000001 RSI: 00007ffd71629300 RDI: 00000000000000f0 [ 63.592912][ T8549] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000004 [ 63.600855][ T8549] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000f629 [ 63.608795][ T8549] R13: 0000000000402960 R14: 0000000000000000 R15: 0000000000000000 [ 63.616739][ T8549] Modules linked in: [ 63.620648][ T8549] ---[ end trace ba4049db0cac06f7 ]--- [ 63.626105][ T8549] RIP: 0010:skb_pull+0xea/0x110 [ 63.630942][ T8549] Code: 9d c8 00 00 00 49 89 dc 49 89 9d c8 00 00 00 e8 9c d5 dd fb 4c 89 e0 5b 41 5c 41 5d 41 5e 5d c3 45 31 e4 eb ea e8 86 d5 dd fb <0f> 0b e8 df 03 18 fc e9 44 ff ff ff e8 d5 03 18 fc eb 8a e8 ee 03 [ 63.650548][ T8549] RSP: 0018:ffff888089dbee10 EFLAGS: 00010293 [ 63.656700][ T8549] RAX: ffff8880934ce580 RBX: 0000000000000004 RCX: ffffffff8594b3a6 [ 63.664770][ T8549] RDX: 0000000000000000 RSI: ffffffff8594b3fa RDI: 0000000000000004 [ 63.672746][ T8549] RBP: ffff888089dbee30 R08: ffff8880934ce580 R09: fffffbfff14a914f [ 63.680690][ T8549] R10: fffffbfff14a914e R11: ffffffff8a548a77 R12: 00000000a81e02cc [ 63.688662][ T8549] R13: ffff888089dbf478 R14: 00000000ffff8880 R15: ffff888089dbf478 [ 63.696637][ T8549] FS: 0000555556c55880(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 63.705560][ T8549] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.712152][ T8549] CR2: 0000000020000100 CR3: 0000000096758000 CR4: 00000000001406f0 [ 63.720113][ T8549] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 63.728082][ T8549] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 63.736050][ T8549] Kernel panic - not syncing: Fatal exception in interrupt [ 63.744372][ T8549] Kernel Offset: disabled [ 63.748873][ T8549] Rebooting in 86400 seconds..