[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 40.557001] audit: type=1800 audit(1546142567.636:25): pid=7946 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 40.592090] audit: type=1800 audit(1546142567.636:26): pid=7946 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 40.626706] audit: type=1800 audit(1546142567.636:27): pid=7946 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 44.286479] sshd (8083) used greatest stack depth: 15720 bytes left Warning: Permanently added '10.128.15.240' (ECDSA) to the list of known hosts. executing program [ 50.953994] ------------[ cut here ]------------ [ 50.958764] kernel BUG at net/core/skbuff.c:1459! [ 50.963980] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 50.969334] CPU: 0 PID: 8099 Comm: syz-executor805 Not tainted 4.20.0-rc7-next-20181224 #190 [ 50.977887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.987232] RIP: 0010:pskb_expand_head+0xc24/0x10d0 [ 50.992234] Code: 8b 85 20 fe ff ff 48 85 c0 0f 84 44 fe ff ff e8 a2 87 64 fb 4d 8d 74 24 ff e9 35 fe ff ff e8 93 87 64 fb 0f 0b e8 8c 87 64 fb <0f> 0b e8 85 87 64 fb 31 f6 31 ff e8 4c 88 64 fb e9 6a fd ff ff 4c [ 51.011119] RSP: 0018:ffff888090027190 EFLAGS: 00010293 [ 51.016461] RAX: ffff88808f9b2080 RBX: ffff88809776c7c0 RCX: ffffffff861d605a [ 51.023711] RDX: 0000000000000000 RSI: ffffffff861d6ad4 RDI: 0000000000000005 [ 51.030960] RBP: ffff888090027390 R08: ffff88808f9b2080 R09: ffffed1012eed912 [ 51.038209] R10: ffffed1012eed912 R11: ffff88809776c897 R12: ffff88809776c87c [ 51.045458] R13: 0000000000000002 R14: dffffc0000000000 R15: 0000000000000000 [ 51.052709] FS: 00007f3970b46700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 51.060917] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.066779] CR2: 0000000020000300 CR3: 00000000a0e0d000 CR4: 00000000001406f0 [ 51.074032] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 51.081281] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 51.088530] Call Trace: [ 51.091099] ? __switch_to_asm+0x34/0x70 [ 51.095139] ? __switch_to_asm+0x40/0x70 [ 51.099180] ? __switch_to_asm+0x34/0x70 [ 51.103237] ? __switch_to_asm+0x40/0x70 [ 51.107289] ? __schedule+0x9e6/0x1ed0 [ 51.111164] ? __pskb_copy_fclone+0xe80/0xe80 [ 51.115644] ? graph_lock+0x270/0x270 [ 51.119427] ? graph_lock+0x270/0x270 [ 51.123238] ? graph_lock+0x270/0x270 [ 51.127016] ? graph_lock+0x270/0x270 [ 51.130800] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 51.136318] ? find_held_lock+0x36/0x1c0 [ 51.140360] __pskb_pull_tail+0x156/0x18a0 [ 51.144581] ? __might_fault+0x12b/0x1e0 [ 51.148627] ? skb_realloc_headroom+0x120/0x120 [ 51.153279] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 51.158712] ? __might_fault+0x1a3/0x1e0 [ 51.162754] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 51.168276] ? _copy_to_iter+0x3b8/0x1440 [ 51.172409] ? proto_seq_start+0x50/0x50 [ 51.176456] ip6_datagram_recv_specific_ctl+0x1953/0x1bf0 [ 51.181973] ? iov_iter_copy_from_user_atomic+0x1030/0x1030 [ 51.187670] ? ip6_datagram_recv_common_ctl+0x5c0/0x5c0 [ 51.193021] ? simple_copy_to_iter+0x35/0x40 [ 51.197414] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 51.202931] ? __skb_datagram_iter+0x1a7/0x7e0 [ 51.207497] ? rcu_pm_notify+0xc0/0xc0 [ 51.211367] ? skb_kill_datagram+0x120/0x120 [ 51.215769] ? skb_copy_datagram_iter+0x10d/0x4a0 [ 51.220591] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 51.226142] ? ip6_datagram_recv_common_ctl+0x35a/0x5c0 [ 51.231488] ? ipv6_recv_rxpmtu+0x920/0x920 [ 51.235793] ? arch_local_save_flags+0x40/0x40 [ 51.240375] ? __might_fault+0x12b/0x1e0 [ 51.244426] ? lock_downgrade+0x900/0x900 [ 51.248558] ip6_datagram_recv_ctl+0x33/0x40 [ 51.252962] rawv6_recvmsg+0xc4b/0xea0 [ 51.256830] ? raw6_init_net+0x80/0x80 [ 51.260703] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 51.266225] sock_common_recvmsg+0x13a/0x2a0 [ 51.270616] ? compat_sock_common_getsockopt+0x150/0x150 [ 51.276051] ? apparmor_socket_recvmsg+0x29/0x30 [ 51.280789] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 51.286308] ? security_socket_recvmsg+0x9c/0xc0 [ 51.291047] ? compat_sock_common_getsockopt+0x150/0x150 [ 51.296481] sock_recvmsg+0xd0/0x110 [ 51.300177] ? __sock_recv_ts_and_drops+0x420/0x420 [ 51.305173] ___sys_recvmsg+0x2b6/0x680 [ 51.309148] ? ___sys_sendmsg+0x930/0x930 [ 51.313287] ? release_sock+0x1ec/0x2c0 [ 51.317243] ? __local_bh_enable_ip+0x160/0x260 [ 51.321891] ? __fget_light+0x2e9/0x430 [ 51.325851] ? fget_raw+0x20/0x20 [ 51.329316] ? __local_bh_enable_ip+0x160/0x260 [ 51.333971] ? ip6_datagram_connect+0x3a/0x50 [ 51.338448] ? ip6_datagram_connect_v6_only+0x71/0x90 [ 51.343620] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 51.349165] ? sockfd_lookup_light+0xc5/0x160 [ 51.353641] __sys_recvmsg+0x11a/0x280 [ 51.357522] ? __ia32_sys_sendmmsg+0x100/0x100 [ 51.362105] ? __x64_sys_futex+0x476/0x690 [ 51.366324] ? do_syscall_64+0x9a/0x820 [ 51.370277] ? do_syscall_64+0x9a/0x820 [ 51.374238] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 51.379668] ? trace_hardirqs_off+0xb8/0x310 [ 51.384059] __x64_sys_recvmsg+0x78/0xb0 [ 51.388101] do_syscall_64+0x1b9/0x820 [ 51.391968] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 51.397360] ? syscall_return_slowpath+0x5e0/0x5e0 [ 51.402277] ? trace_hardirqs_on_caller+0x310/0x310 [ 51.407272] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 51.412267] ? recalc_sigpending_tsk+0x180/0x180 [ 51.417015] ? __switch_to_asm+0x40/0x70 [ 51.421052] ? __switch_to_asm+0x34/0x70 [ 51.425095] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 51.429933] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 51.435100] RIP: 0033:0x4457e9 [ 51.438272] Code: e8 6c b6 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b 12 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 51.457154] RSP: 002b:00007f3970b45da8 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 51.464841] RAX: ffffffffffffffda RBX: 00000000006dac38 RCX: 00000000004457e9 [ 51.472091] RDX: 0000000000000002 RSI: 0000000020000140 RDI: 0000000000000004 [ 51.479341] RBP: 00000000006dac30 R08: 0000000000000000 R09: 0000000000000000 [ 51.486601] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dac3c [ 51.493853] R13: 0100000000000000 R14: 00007f3970b469c0 R15: 00000000006dad2c [ 51.501114] Modules linked in: [ 51.505315] ---[ end trace 06f0b8b11d5c661f ]--- [ 51.510129] RIP: 0010:pskb_expand_head+0xc24/0x10d0 [ 51.515667] Code: 8b 85 20 fe ff ff 48 85 c0 0f 84 44 fe ff ff e8 a2 87 64 fb 4d 8d 74 24 ff e9 35 fe ff ff e8 93 87 64 fb 0f 0b e8 8c 87 64 fb <0f> 0b e8 85 87 64 fb 31 f6 31 ff e8 4c 88 64 fb e9 6a fd ff ff 4c [ 51.534616] RSP: 0018:ffff888090027190 EFLAGS: 00010293 [ 51.539976] RAX: ffff88808f9b2080 RBX: ffff88809776c7c0 RCX: ffffffff861d605a [ 51.547279] RDX: 0000000000000000 RSI: ffffffff861d6ad4 RDI: 0000000000000005 [ 51.554568] RBP: ffff888090027390 R08: ffff88808f9b2080 R09: ffffed1012eed912 [ 51.561819] R10: ffffed1012eed912 R11: ffff88809776c897 R12: ffff88809776c87c [ 51.569109] R13: 0000000000000002 R14: dffffc0000000000 R15: 0000000000000000 [ 51.576421] FS: 00007f3970b46700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 51.584669] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.590547] CR2: 000000000071b000 CR3: 00000000a0e0d000 CR4: 00000000001406e0 [ 51.597859] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 51.605176] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 51.612466] Kernel panic - not syncing: Fatal exception [ 51.618747] Kernel Offset: disabled [ 51.622366] Rebooting in 86400 seconds..