[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 44.971269][ T26] audit: type=1800 audit(1563574463.399:25): pid=8015 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 45.008979][ T26] audit: type=1800 audit(1563574463.399:26): pid=8015 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 45.041166][ T26] audit: type=1800 audit(1563574463.409:27): pid=8015 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.61' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 55.796287][ T8166] netlink: 4 bytes leftover after parsing attributes in process `syz-executor414'. [ 55.805841][ T8166] kasan: CONFIG_KASAN_INLINE enabled [ 55.811262][ T8166] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 55.819486][ T8166] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 55.826434][ T8166] CPU: 1 PID: 8166 Comm: syz-executor414 Not tainted 5.2.0+ #35 [ 55.834052][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.844124][ T8166] RIP: 0010:tcf_ife_init+0xff/0x1630 [ 55.849391][ T8166] Code: 00 74 08 4c 89 ef e8 d0 17 8e fb 48 8d 9c 24 a0 00 00 00 48 c7 84 24 50 01 00 00 00 00 00 00 4d 8d 6e 04 4c 89 f0 48 c1 e8 03 <42> 8a 04 38 84 c0 0f 85 ca 12 00 00 41 0f b7 0e 83 c1 fc 48 89 df [ 55.869070][ T8166] RSP: 0018:ffff888090ef6c00 EFLAGS: 00010246 [ 55.875139][ T8166] RAX: 0000000000000000 RBX: ffff888090ef6ca0 RCX: 0000000090ef6b03 [ 55.883113][ T8166] RDX: ffff888094d16cd8 RSI: ffffffff88cd6340 RDI: 0000000000000282 [ 55.891093][ T8166] RBP: ffff888090ef6dd8 R08: dffffc0000000000 R09: fffffbfff11fba3d [ 55.899065][ T8166] R10: fffffbfff11fba3d R11: 0000000000000000 R12: 1ffff110121dedaa [ 55.907021][ T8166] R13: 0000000000000004 R14: 0000000000000000 R15: dffffc0000000000 [ 55.914989][ T8166] FS: 00005555562a0880(0000) GS:ffff8880aeb00000(0000) knlGS:0000000000000000 [ 55.923919][ T8166] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.930486][ T8166] CR2: 0000000020000180 CR3: 000000008ae57000 CR4: 00000000001406e0 [ 55.938462][ T8166] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 55.946433][ T8166] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 55.954387][ T8166] Call Trace: [ 55.957683][ T8166] ? unwind_get_return_address_ptr+0xa0/0xa0 [ 55.963655][ T8166] ? tcf_ife_search+0x40/0x40 [ 55.968338][ T8166] ? tcf_action_init_1+0x2e4/0xd40 [ 55.973452][ T8166] ? __kasan_check_write+0x14/0x20 [ 55.978547][ T8166] ? do_raw_read_unlock+0x42/0xf0 [ 55.983587][ T8166] ? tcf_ife_search+0x40/0x40 [ 55.988249][ T8166] tcf_action_init_1+0x786/0xd40 [ 55.993193][ T8166] ? tcf_action_dump+0x290/0x290 [ 55.998155][ T8166] ? __nla_validate+0x50/0x50 [ 56.002822][ T8166] ? mark_lock+0x152/0x1850 [ 56.007310][ T8166] ? __nla_parse+0x41/0x50 [ 56.011713][ T8166] tcf_action_init+0x183/0x490 [ 56.016464][ T8166] ? tcf_action_init_1+0xd40/0xd40 [ 56.021562][ T8166] ? __nla_validate_parse+0x18f4/0x2010 [ 56.027100][ T8166] ? security_capable+0xa2/0xd0 [ 56.031937][ T8166] tc_ctl_action+0x3ad/0x920 [ 56.036514][ T8166] ? rtnetlink_rcv_msg+0xad2/0xe50 [ 56.041608][ T8166] ? tcf_free_cookie_rcu+0x50/0x50 [ 56.046699][ T8166] ? __mutex_lock_common+0x56e/0x2850 [ 56.052060][ T8166] ? rcu_lock_release+0x9/0x30 [ 56.056811][ T8166] ? tcf_free_cookie_rcu+0x50/0x50 [ 56.061905][ T8166] rtnetlink_rcv_msg+0xb19/0xe50 [ 56.066826][ T8166] ? rtnetlink_bind+0x80/0x80 [ 56.071504][ T8166] ? trace_lock_acquire+0x1d0/0x1d0 [ 56.076707][ T8166] netlink_rcv_skb+0x1f0/0x460 [ 56.081454][ T8166] ? rtnetlink_bind+0x80/0x80 [ 56.086110][ T8166] ? netlink_ack+0xae0/0xae0 [ 56.090780][ T8166] ? check_preemption_disabled+0x47/0x2a0 [ 56.096483][ T8166] rtnetlink_rcv+0x1c/0x20 [ 56.100890][ T8166] netlink_unicast+0x809/0x9a0 [ 56.105651][ T8166] ? netlink_detachskb+0x50/0x50 [ 56.110605][ T8166] ? __check_object_size+0x313/0x400 [ 56.115872][ T8166] ? security_netlink_send+0x94/0xb0 [ 56.121141][ T8166] netlink_sendmsg+0xa70/0xd30 [ 56.125905][ T8166] ? netlink_getsockopt+0x9f0/0x9f0 [ 56.131117][ T8166] ? tomoyo_socket_sendmsg+0x25/0x30 [ 56.136381][ T8166] ? security_socket_sendmsg+0xa0/0xd0 [ 56.141821][ T8166] ? netlink_getsockopt+0x9f0/0x9f0 [ 56.147002][ T8166] ___sys_sendmsg+0x66b/0x9a0 [ 56.151662][ T8166] ? __sys_sendmsg_sock+0x100/0x100 [ 56.156853][ T8166] ? handle_mm_fault+0x10d0/0x6070 [ 56.161980][ T8166] ? __kasan_check_write+0x14/0x20 [ 56.167085][ T8166] ? __up_read+0x225/0x5b0 [ 56.171484][ T8166] ? __down_read+0x3d0/0x3d0 [ 56.176083][ T8166] ? __kasan_check_read+0x11/0x20 [ 56.181123][ T8166] ? __fdget+0x156/0x200 [ 56.185375][ T8166] __x64_sys_sendmsg+0x1cf/0x290 [ 56.190300][ T8166] ? __sys_sendmsg+0x250/0x250 [ 56.195046][ T8166] ? do_user_addr_fault+0x655/0xaf0 [ 56.200231][ T8166] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 56.206022][ T8166] ? do_syscall_64+0x1d/0x140 [ 56.210688][ T8166] do_syscall_64+0xfe/0x140 [ 56.215197][ T8166] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 56.221077][ T8166] RIP: 0033:0x4401d9 [ 56.225042][ T8166] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 56.244647][ T8166] RSP: 002b:00007fffef07b858 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 56.253044][ T8166] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004401d9 [ 56.261179][ T8166] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 56.269157][ T8166] RBP: 00000000006ca018 R08: 0000000000000000 R09: 00000000004002c8 [ 56.277134][ T8166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000401a60 [ 56.285092][ T8166] R13: 0000000000401af0 R14: 0000000000000000 R15: 0000000000000000 [ 56.293051][ T8166] Modules linked in: [ 56.298406][ T8166] ---[ end trace 6967eefc1954921d ]--- [ 56.303952][ T8166] RIP: 0010:tcf_ife_init+0xff/0x1630 [ 56.309372][ T8166] Code: 00 74 08 4c 89 ef e8 d0 17 8e fb 48 8d 9c 24 a0 00 00 00 48 c7 84 24 50 01 00 00 00 00 00 00 4d 8d 6e 04 4c 89 f0 48 c1 e8 03 <42> 8a 04 38 84 c0 0f 85 ca 12 00 00 41 0f b7 0e 83 c1 fc 48 89 df [ 56.329063][ T8166] RSP: 0018:ffff888090ef6c00 EFLAGS: 00010246 [ 56.335128][ T8166] RAX: 0000000000000000 RBX: ffff888090ef6ca0 RCX: 0000000090ef6b03 [ 56.343164][ T8166] RDX: ffff888094d16cd8 RSI: ffffffff88cd6340 RDI: 0000000000000282 [ 56.351284][ T8166] RBP: ffff888090ef6dd8 R08: dffffc0000000000 R09: fffffbfff11fba3d [ 56.359372][ T8166] R10: fffffbfff11fba3d R11: 0000000000000000 R12: 1ffff110121dedaa [ 56.367381][ T8166] R13: 0000000000000004 R14: 0000000000000000 R15: dffffc0000000000 [ 56.375422][ T8166] FS: 00005555562a0880(0000) GS:ffff8880aeb00000(0000) knlGS:0000000000000000 [ 56.384404][ T8166] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.391057][ T8166] CR2: ffffffffff600400 CR3: 000000008ae57000 CR4: 00000000001406e0 [ 56.399077][ T8166] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 56.407053][ T8166] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 56.415082][ T8166] Kernel panic - not syncing: Fatal exception [ 56.422274][ T8166] Kernel Offset: disabled [ 56.426625][ T8166] Rebooting in 86400 seconds..