[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 54.336741][ T26] audit: type=1800 audit(1563574891.996:25): pid=8613 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 54.381322][ T26] audit: type=1800 audit(1563574891.996:26): pid=8613 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 54.422348][ T26] audit: type=1800 audit(1563574892.006:27): pid=8613 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.39' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 63.442248][ T8766] netlink: 4 bytes leftover after parsing attributes in process `syz-executor146'. [ 63.452403][ T8766] kasan: CONFIG_KASAN_INLINE enabled [ 63.458117][ T8766] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 63.466863][ T8766] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 63.474086][ T8766] CPU: 1 PID: 8766 Comm: syz-executor146 Not tainted 5.2.0+ #67 [ 63.481917][ T8766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 63.492159][ T8766] RIP: 0010:tcf_ife_init+0x25c/0x1850 [ 63.497653][ T8766] Code: 00 00 48 c7 c7 80 bf da 88 e8 c0 6d a2 fb 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c7 85 e8 fe ff ff 00 00 00 00 48 c1 ea 03 <0f> b6 14 02 48 89 d8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 e2 [ 63.517564][ T8766] RSP: 0018:ffff888094bbeeb8 EFLAGS: 00010246 [ 63.523785][ T8766] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 1ffff110113f4d60 [ 63.532260][ T8766] RDX: 0000000000000000 RSI: 1ffff110113f4d67 RDI: 0000000000000286 [ 63.540258][ T8766] RBP: ffff888094bbf060 R08: 0000000000000002 R09: ffff888089fa6b08 [ 63.548220][ T8766] R10: fffffbfff1349ef7 R11: ffffffff89a4f7bf R12: 0000000000000001 [ 63.556579][ T8766] R13: ffff88809b8b9240 R14: ffff888094bbf8c0 R15: 0000000000000000 [ 63.565156][ T8766] FS: 0000555555b9a880(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 63.574303][ T8766] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.580875][ T8766] CR2: 0000000020000180 CR3: 000000009a422000 CR4: 00000000001406e0 [ 63.588837][ T8766] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 63.596800][ T8766] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 63.604888][ T8766] Call Trace: [ 63.608455][ T8766] ? tc_lookup_action_n+0xd2/0x100 [ 63.613637][ T8766] ? __add_metainfo+0x480/0x480 [ 63.618563][ T8766] ? tc_lookup_action_n+0xd2/0x100 [ 63.623752][ T8766] ? __kasan_check_read+0x11/0x20 [ 63.628816][ T8766] ? lock_downgrade+0x920/0x920 [ 63.633684][ T8766] ? __kasan_check_write+0x14/0x20 [ 63.638868][ T8766] ? do_raw_read_unlock+0x3f/0x70 [ 63.644121][ T8766] tcf_action_init_1+0x6f2/0xa80 [ 63.649248][ T8766] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 63.655484][ T8766] ? tcf_action_dump_old+0x80/0x80 [ 63.660686][ T8766] ? lock_downgrade+0x920/0x920 [ 63.665601][ T8766] ? __kasan_check_read+0x11/0x20 [ 63.670615][ T8766] ? mark_lock+0xc0/0x11e0 [ 63.675032][ T8766] tcf_action_init+0x241/0x360 [ 63.679788][ T8766] ? tcf_action_init_1+0xa80/0xa80 [ 63.685149][ T8766] ? mark_lock+0xc0/0x11e0 [ 63.689620][ T8766] ? mark_lock+0xc0/0x11e0 [ 63.694440][ T8766] ? __kasan_check_read+0x11/0x20 [ 63.699456][ T8766] tcf_action_add+0xe8/0x370 [ 63.704570][ T8766] ? tca_action_gd+0x1710/0x1710 [ 63.709652][ T8766] ? refcount_dec_not_one+0x1f0/0x1f0 [ 63.715523][ T8766] ? __nla_parse+0x43/0x60 [ 63.720111][ T8766] tc_ctl_action+0x3b5/0x4bc [ 63.724969][ T8766] ? tcf_action_add+0x370/0x370 [ 63.731210][ T8766] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 63.737986][ T8766] ? tcf_action_add+0x370/0x370 [ 63.742920][ T8766] rtnetlink_rcv_msg+0x463/0xb00 [ 63.747860][ T8766] ? rtnetlink_put_metrics+0x580/0x580 [ 63.753455][ T8766] ? lock_downgrade+0x920/0x920 [ 63.758304][ T8766] ? netlink_deliver_tap+0x22d/0xbf0 [ 63.763641][ T8766] ? find_held_lock+0x35/0x130 [ 63.768444][ T8766] netlink_rcv_skb+0x177/0x450 [ 63.773334][ T8766] ? rtnetlink_put_metrics+0x580/0x580 [ 63.778981][ T8766] ? netlink_ack+0xb30/0xb30 [ 63.783562][ T8766] ? __kasan_check_read+0x11/0x20 [ 63.788576][ T8766] ? netlink_deliver_tap+0x254/0xbf0 [ 63.793853][ T8766] rtnetlink_rcv+0x1d/0x30 [ 63.798264][ T8766] netlink_unicast+0x531/0x710 [ 63.803017][ T8766] ? netlink_attachskb+0x7c0/0x7c0 [ 63.808115][ T8766] ? _copy_from_iter_full+0x25d/0x8a0 [ 63.813537][ T8766] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 63.819296][ T8766] ? __check_object_size+0x3d/0x43c [ 63.824708][ T8766] netlink_sendmsg+0x8a5/0xd60 [ 63.829556][ T8766] ? netlink_unicast+0x710/0x710 [ 63.834629][ T8766] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 63.840164][ T8766] ? apparmor_socket_sendmsg+0x2a/0x30 [ 63.845657][ T8766] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 63.851895][ T8766] ? security_socket_sendmsg+0x8d/0xc0 [ 63.857604][ T8766] ? netlink_unicast+0x710/0x710 [ 63.862705][ T8766] sock_sendmsg+0xd7/0x130 [ 63.867109][ T8766] ___sys_sendmsg+0x803/0x920 [ 63.871842][ T8766] ? copy_msghdr_from_user+0x440/0x440 [ 63.877293][ T8766] ? prep_transhuge_page+0xa0/0xa0 [ 63.882484][ T8766] ? percpu_counter_add_batch+0x13c/0x190 [ 63.888193][ T8766] ? __do_page_fault+0x56a/0xdd0 [ 63.893122][ T8766] ? find_held_lock+0x35/0x130 [ 63.897923][ T8766] ? __do_page_fault+0x56a/0xdd0 [ 63.903017][ T8766] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 63.909314][ T8766] ? __fget_light+0x1a9/0x230 [ 63.914022][ T8766] ? __fdget+0x1b/0x20 [ 63.918254][ T8766] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 63.924487][ T8766] __sys_sendmsg+0x105/0x1d0 [ 63.929287][ T8766] ? __sys_sendmsg_sock+0xd0/0xd0 [ 63.934462][ T8766] ? down_read_non_owner+0x450/0x450 [ 63.939741][ T8766] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 63.945220][ T8766] ? do_syscall_64+0x26/0x6a0 [ 63.949955][ T8766] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 63.956187][ T8766] ? do_syscall_64+0x26/0x6a0 [ 63.960856][ T8766] __x64_sys_sendmsg+0x78/0xb0 [ 63.965950][ T8766] do_syscall_64+0xfd/0x6a0 [ 63.970443][ T8766] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 63.976498][ T8766] RIP: 0033:0x4401d9 [ 63.980612][ T8766] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 64.000813][ T8766] RSP: 002b:00007fff00061278 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.009346][ T8766] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004401d9 [ 64.017354][ T8766] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 64.025449][ T8766] RBP: 00000000006ca018 R08: 0000000000000000 R09: 00000000004002c8 [ 64.033410][ T8766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000401a60 [ 64.041436][ T8766] R13: 0000000000401af0 R14: 0000000000000000 R15: 0000000000000000 [ 64.049614][ T8766] Modules linked in: [ 64.053684][ T8766] ---[ end trace 554be0ed722dc3f9 ]--- [ 64.059157][ T8766] RIP: 0010:tcf_ife_init+0x25c/0x1850 [ 64.065807][ T8766] Code: 00 00 48 c7 c7 80 bf da 88 e8 c0 6d a2 fb 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c7 85 e8 fe ff ff 00 00 00 00 48 c1 ea 03 <0f> b6 14 02 48 89 d8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 e2 [ 64.085953][ T8766] RSP: 0018:ffff888094bbeeb8 EFLAGS: 00010246 [ 64.092129][ T8766] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 1ffff110113f4d60 [ 64.100626][ T8766] RDX: 0000000000000000 RSI: 1ffff110113f4d67 RDI: 0000000000000286 [ 64.108775][ T8766] RBP: ffff888094bbf060 R08: 0000000000000002 R09: ffff888089fa6b08 [ 64.116794][ T8766] R10: fffffbfff1349ef7 R11: ffffffff89a4f7bf R12: 0000000000000001 [ 64.125219][ T8766] R13: ffff88809b8b9240 R14: ffff888094bbf8c0 R15: 0000000000000000 [ 64.133416][ T8766] FS: 0000555555b9a880(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 64.143347][ T8766] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.150080][ T8766] CR2: 0000000020000180 CR3: 000000009a422000 CR4: 00000000001406e0 [ 64.158125][ T8766] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 64.166351][ T8766] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 64.174417][ T8766] Kernel panic - not syncing: Fatal exception [ 64.182660][ T8766] Kernel Offset: disabled [ 64.197148][ T8766] Rebooting in 86400 seconds..