[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 79.563868][ T25] audit: type=1800 audit(1579151084.310:25): pid=9349 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 79.598733][ T25] audit: type=1800 audit(1579151084.310:26): pid=9349 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 79.641978][ T25] audit: type=1800 audit(1579151084.310:27): pid=9349 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.49' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 94.135029][ T9503] list_del corruption, ffff8880a26b2600->prev is LIST_POISON2 (dead000000000122) [ 94.144544][ T9503] ------------[ cut here ]------------ [ 94.149983][ T9503] kernel BUG at lib/list_debug.c:48! [ 94.155348][ T9503] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 94.161455][ T9503] CPU: 1 PID: 9503 Comm: syz-executor072 Not tainted 5.5.0-rc6-syzkaller #0 [ 94.170098][ T9503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 94.180140][ T9503] RIP: 0010:__list_del_entry_valid.cold+0x37/0x4f [ 94.186527][ T9503] Code: be fd 0f 0b 4c 89 ea 4c 89 f6 48 c7 c7 20 66 71 88 e8 c0 e7 be fd 0f 0b 4c 89 e2 4c 89 f6 48 c7 c7 80 66 71 88 e8 ac e7 be fd <0f> 0b 4c 89 f6 48 c7 c7 40 67 71 88 e8 9b e7 be fd 0f 0b cc cc cc [ 94.206110][ T9503] RSP: 0018:ffffc90001e47328 EFLAGS: 00010282 [ 94.212156][ T9503] RAX: 000000000000004e RBX: ffff8880a26b2600 RCX: 0000000000000000 [ 94.220276][ T9503] RDX: 0000000000000000 RSI: ffffffff815e5396 RDI: fffff520003c8e57 [ 94.228230][ T9503] RBP: ffffc90001e47340 R08: 000000000000004e R09: ffffed1015d26621 [ 94.236179][ T9503] R10: ffffed1015d26620 R11: ffff8880ae933107 R12: dead000000000122 [ 94.244129][ T9503] R13: ffff88809a5ae170 R14: ffff8880a26b2600 R15: ffff8880a26b2608 [ 94.252117][ T9503] FS: 0000000000000000(0000) GS:ffff8880ae900000(0063) knlGS:0000000008308840 [ 94.261019][ T9503] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 94.267575][ T9503] CR2: 0000000020000280 CR3: 00000000980bf000 CR4: 00000000001406e0 [ 94.275525][ T9503] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 94.283473][ T9503] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 94.291472][ T9503] Call Trace: [ 94.294741][ T9503] nft_obj_del+0xcb/0x1f0 [ 94.299053][ T9503] ? nft_unregister_flowtable_type+0x130/0x130 [ 94.305183][ T9503] ? nf_tables_getflowtable+0x4c0/0x4c0 [ 94.310706][ T9503] ? nft_objname_hash+0x610/0x610 [ 94.315703][ T9503] ? nft_chain_hash_cmp+0x80/0x80 [ 94.320706][ T9503] nf_tables_commit+0x1339/0x3b30 [ 94.325702][ T9503] ? nla_memcpy+0xb0/0xb0 [ 94.330017][ T9503] ? nf_tables_setelem_notify.constprop.0+0x1f0/0x1f0 [ 94.336756][ T9503] ? __nla_parse+0x43/0x60 [ 94.341154][ T9503] nfnetlink_rcv_batch+0xc78/0x17a0 [ 94.346338][ T9503] ? nf_tables_dump_chains+0x6c1/0x8e0 [ 94.351780][ T9503] ? nfnetlink_subsys_register+0x2b0/0x2b0 [ 94.357573][ T9503] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 94.363789][ T9503] ? apparmor_capable+0x497/0x900 [ 94.368838][ T9503] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 94.375048][ T9503] ? __nla_validate_parse+0x2d0/0x1ee0 [ 94.380482][ T9503] ? cap_capable+0x205/0x270 [ 94.385049][ T9503] ? nla_memcpy+0xb0/0xb0 [ 94.389356][ T9503] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 94.395587][ T9503] ? ns_capable_common+0x93/0x100 [ 94.400590][ T9503] ? __nla_parse+0x43/0x60 [ 94.404983][ T9503] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 94.410680][ T9503] nfnetlink_rcv+0x3e7/0x460 [ 94.415247][ T9503] ? nfnetlink_rcv_batch+0x17a0/0x17a0 [ 94.420677][ T9503] ? netlink_deliver_tap+0x24a/0xbe0 [ 94.425938][ T9503] ? __kasan_check_write+0x14/0x20 [ 94.431025][ T9503] netlink_unicast+0x58c/0x7d0 [ 94.435764][ T9503] ? netlink_attachskb+0x870/0x870 [ 94.440879][ T9503] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 94.446576][ T9503] ? __check_object_size+0x3d/0x437 [ 94.451751][ T9503] netlink_sendmsg+0x91c/0xea0 [ 94.456491][ T9503] ? netlink_unicast+0x7d0/0x7d0 [ 94.461405][ T9503] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 94.466926][ T9503] ? apparmor_socket_sendmsg+0x2a/0x30 [ 94.472360][ T9503] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 94.478600][ T9503] ? security_socket_sendmsg+0x8d/0xc0 [ 94.484036][ T9503] ? netlink_unicast+0x7d0/0x7d0 [ 94.488949][ T9503] sock_sendmsg+0xd7/0x130 [ 94.493341][ T9503] ____sys_sendmsg+0x753/0x880 [ 94.498128][ T9503] ? kernel_sendmsg+0x50/0x50 [ 94.502784][ T9503] ? lockdep_init_map+0x1be/0x6d0 [ 94.507790][ T9503] ___sys_sendmsg+0x100/0x170 [ 94.512475][ T9503] ? sendmsg_copy_msghdr+0x70/0x70 [ 94.517634][ T9503] ? __kasan_check_read+0x11/0x20 [ 94.522677][ T9503] ? __lock_acquire+0x8a0/0x4a00 [ 94.527637][ T9503] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 94.533858][ T9503] ? __this_cpu_preempt_check+0x35/0x190 [ 94.539468][ T9503] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 94.545680][ T9503] ? percpu_counter_add_batch+0x13c/0x190 [ 94.551374][ T9503] ? __fd_install+0x1bc/0x640 [ 94.556028][ T9503] ? find_held_lock+0x35/0x130 [ 94.560765][ T9503] ? __fd_install+0x1bc/0x640 [ 94.565553][ T9503] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 94.571775][ T9503] ? __fget_light+0x1a9/0x230 [ 94.576426][ T9503] ? __fdget+0x1b/0x20 [ 94.580478][ T9503] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 94.586699][ T9503] __sys_sendmsg+0x105/0x1d0 [ 94.591274][ T9503] ? __sys_sendmsg_sock+0xc0/0xc0 [ 94.596313][ T9503] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 94.601766][ T9503] ? do_fast_syscall_32+0xd1/0xe16 [ 94.606850][ T9503] ? entry_SYSENTER_compat+0x70/0x7f [ 94.612116][ T9503] ? do_fast_syscall_32+0xd1/0xe16 [ 94.617246][ T9503] __ia32_compat_sys_sendmsg+0x7a/0xb0 [ 94.622754][ T9503] do_fast_syscall_32+0x27b/0xe16 [ 94.627767][ T9503] entry_SYSENTER_compat+0x70/0x7f [ 94.632872][ T9503] RIP: 0023:0xf7f4ba39 [ 94.636923][ T9503] Code: 00 00 00 89 d3 5b 5e 5f 5d c3 b8 80 96 98 00 eb c4 8b 04 24 c3 8b 1c 24 c3 8b 34 24 c3 8b 3c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 94.656505][ T9503] RSP: 002b:00000000ffe8f3ac EFLAGS: 00000202 ORIG_RAX: 0000000000000172 [ 94.664892][ T9503] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000140 [ 94.672844][ T9503] RDX: 0000000000042000 RSI: 00000000080ea00c RDI: 0000000000000000 [ 94.680841][ T9503] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 94.688795][ T9503] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 94.696778][ T9503] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 94.704800][ T9503] Modules linked in: [ 94.709446][ T9503] ---[ end trace e9cec5c85776dec6 ]--- [ 94.714924][ T9503] RIP: 0010:__list_del_entry_valid.cold+0x37/0x4f [ 94.721457][ T9503] Code: be fd 0f 0b 4c 89 ea 4c 89 f6 48 c7 c7 20 66 71 88 e8 c0 e7 be fd 0f 0b 4c 89 e2 4c 89 f6 48 c7 c7 80 66 71 88 e8 ac e7 be fd <0f> 0b 4c 89 f6 48 c7 c7 40 67 71 88 e8 9b e7 be fd 0f 0b cc cc cc [ 94.741231][ T9503] RSP: 0018:ffffc90001e47328 EFLAGS: 00010282 [ 94.747287][ T9503] RAX: 000000000000004e RBX: ffff8880a26b2600 RCX: 0000000000000000 [ 94.755294][ T9503] RDX: 0000000000000000 RSI: ffffffff815e5396 RDI: fffff520003c8e57 [ 94.763289][ T9503] RBP: ffffc90001e47340 R08: 000000000000004e R09: ffffed1015d26621 [ 94.771288][ T9503] R10: ffffed1015d26620 R11: ffff8880ae933107 R12: dead000000000122 [ 94.779293][ T9503] R13: ffff88809a5ae170 R14: ffff8880a26b2600 R15: ffff8880a26b2608 [ 94.787255][ T9503] FS: 0000000000000000(0000) GS:ffff8880ae900000(0063) knlGS:0000000008308840 [ 94.796250][ T9503] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 94.802851][ T9503] CR2: 0000000020000280 CR3: 00000000980bf000 CR4: 00000000001406e0 [ 94.810874][ T9503] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 94.818888][ T9503] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 94.826846][ T9503] Kernel panic - not syncing: Fatal exception [ 94.833969][ T9503] Kernel Offset: disabled [ 94.838321][ T9503] Rebooting in 86400 seconds..