[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 64.991033][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 64.991042][ T26] audit: type=1800 audit(1568536188.045:29): pid=9742 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 65.026225][ T26] audit: type=1800 audit(1568536188.045:30): pid=9742 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.199' (ECDSA) to the list of known hosts. 2019/09/15 08:29:57 parsed 1 programs 2019/09/15 08:29:59 executed programs: 0 syzkaller login: [ 76.501919][ T9909] IPVS: ftp: loaded support on port[0] = 21 [ 76.551126][ T9909] chnl_net:caif_netlink_parms(): no params data found [ 76.573114][ T9909] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.580380][ T9909] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.588135][ T9909] device bridge_slave_0 entered promiscuous mode [ 76.595333][ T9909] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.602441][ T9909] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.609940][ T9909] device bridge_slave_1 entered promiscuous mode [ 76.623623][ T9909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.634084][ T9909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.650333][ T9909] team0: Port device team_slave_0 added [ 76.656718][ T9909] team0: Port device team_slave_1 added [ 76.729422][ T9909] device hsr_slave_0 entered promiscuous mode [ 76.768034][ T9909] device hsr_slave_1 entered promiscuous mode [ 76.823285][ T9909] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.830368][ T9909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.837671][ T9909] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.844775][ T9909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.869110][ T9909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.879318][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.887347][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.897428][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.905318][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 76.915485][ T9909] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.924945][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.933314][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.940377][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.959244][ T9913] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.967558][ T9913] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.974671][ T9913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.983012][ T9913] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.992843][ T9913] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.001191][ T9913] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.009255][ T9913] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.018726][ T9915] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.027114][ T9909] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.041528][ T9909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.098274][ T9922] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 77.109578][ T9922] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 77.135115][ T9926] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 77.147960][ T9926] ------------[ cut here ]------------ [ 77.153799][ T9926] WARNING: CPU: 1 PID: 9926 at net/xfrm/xfrm_policy.c:1543 xfrm_policy_insert_list.cold+0x11/0x90 [ 77.164606][ T9926] Kernel panic - not syncing: panic_on_warn set ... [ 77.171182][ T9926] CPU: 1 PID: 9926 Comm: syz-executor.0 Not tainted 5.3.0-rc8+ #0 [ 77.178960][ T9926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 77.188998][ T9926] Call Trace: [ 77.192290][ T9926] dump_stack+0x172/0x1f0 [ 77.196620][ T9926] ? __xfrm_sk_clone_policy+0xa10/0xae0 [ 77.202157][ T9926] panic+0x2dc/0x755 [ 77.206182][ T9926] ? add_taint.cold+0x16/0x16 [ 77.210852][ T9926] ? __kasan_check_write+0x14/0x20 [ 77.215951][ T9926] ? __warn.cold+0x5/0x4c [ 77.220279][ T9926] ? __warn+0xe7/0x1e0 [ 77.224338][ T9926] ? xfrm_policy_insert_list.cold+0x11/0x90 [ 77.230211][ T9926] __warn.cold+0x20/0x4c [ 77.234461][ T9926] ? wake_up_klogd+0x99/0xd0 [ 77.239031][ T9926] ? xfrm_policy_insert_list.cold+0x11/0x90 [ 77.244905][ T9926] report_bug+0x263/0x2b0 [ 77.249215][ T9926] do_error_trap+0x11b/0x200 [ 77.253790][ T9926] do_invalid_op+0x37/0x50 [ 77.258205][ T9926] ? xfrm_policy_insert_list.cold+0x11/0x90 [ 77.264077][ T9926] invalid_op+0x23/0x30 [ 77.268223][ T9926] RIP: 0010:xfrm_policy_insert_list.cold+0x11/0x90 [ 77.274723][ T9926] Code: 2d 7b fb e9 67 fa ff ff 88 55 c0 e8 69 2e 7b fb 0f b6 55 c0 e9 83 fa ff ff e8 2b 20 41 fb 48 c7 c7 60 f7 31 88 e8 a3 bf 2a fb <0f> 0b 48 8b 45 b8 42 0f b6 14 20 48 8b 45 d0 83 e0 07 83 c0 03 38 [ 77.294303][ T9926] RSP: 0018:ffff8880832a73a0 EFLAGS: 00010282 [ 77.300348][ T9926] RAX: 0000000000000024 RBX: ffff88809f712000 RCX: 0000000000000000 [ 77.308321][ T9926] RDX: 0000000000000000 RSI: ffffffff815c36d6 RDI: ffffed1010654e66 [ 77.316628][ T9926] RBP: ffff8880832a7420 R08: 0000000000000024 R09: ffffed1015d24101 [ 77.324609][ T9926] R10: ffffed1015d24100 R11: ffff8880ae920807 R12: dffffc0000000000 [ 77.332586][ T9926] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880913cbb00 [ 77.340561][ T9926] ? vprintk_func+0x86/0x189 [ 77.345154][ T9926] xfrm_policy_inexact_insert+0xec/0x1000 [ 77.350857][ T9926] ? lock_acquire+0x190/0x410 [ 77.355528][ T9926] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 77.361403][ T9926] ? __sanitizer_cov_trace_cmp1+0x17/0x20 [ 77.367111][ T9926] xfrm_policy_insert+0x530/0x750 [ 77.372294][ T9926] xfrm_add_policy+0x28f/0x530 [ 77.377046][ T9926] ? xfrm_policy_construct+0x680/0x680 [ 77.382495][ T9926] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 77.388720][ T9926] ? ns_capable_common+0x93/0x100 [ 77.393729][ T9926] ? __nla_parse+0x43/0x60 [ 77.398126][ T9926] ? xfrm_policy_construct+0x680/0x680 [ 77.403562][ T9926] xfrm_user_rcv_msg+0x459/0x770 [ 77.408494][ T9926] ? copy_to_user_state_extra+0xdf0/0xdf0 [ 77.414206][ T9926] ? consume_skb+0x108/0x3b0 [ 77.418779][ T9926] ? lock_downgrade+0x920/0x920 [ 77.423615][ T9926] ? __mutex_lock+0x45d/0x13c0 [ 77.428359][ T9926] ? xfrm_netlink_rcv+0x61/0x90 [ 77.433465][ T9926] netlink_rcv_skb+0x177/0x450 [ 77.438208][ T9926] ? copy_to_user_state_extra+0xdf0/0xdf0 [ 77.443931][ T9926] ? netlink_ack+0xb30/0xb30 [ 77.448506][ T9926] xfrm_netlink_rcv+0x70/0x90 [ 77.453168][ T9926] netlink_unicast+0x531/0x710 [ 77.457919][ T9926] ? netlink_attachskb+0x7c0/0x7c0 [ 77.463017][ T9926] ? _copy_from_iter_full+0x25d/0x8a0 [ 77.468454][ T9926] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 77.474167][ T9926] ? __check_object_size+0x3d/0x437 [ 77.479345][ T9926] netlink_sendmsg+0x8a5/0xd60 [ 77.484088][ T9926] ? netlink_unicast+0x710/0x710 [ 77.489006][ T9926] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 77.494553][ T9926] ? apparmor_socket_sendmsg+0x2a/0x30 [ 77.500010][ T9926] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 77.506241][ T9926] ? security_socket_sendmsg+0x8d/0xc0 [ 77.511689][ T9926] ? netlink_unicast+0x710/0x710 [ 77.516615][ T9926] sock_sendmsg+0xd7/0x130 [ 77.521015][ T9926] ___sys_sendmsg+0x803/0x920 [ 77.525672][ T9926] ? copy_msghdr_from_user+0x440/0x440 [ 77.531112][ T9926] ? __fget+0xa3/0x560 [ 77.535170][ T9926] ? __fget+0x384/0x560 [ 77.539305][ T9926] ? ksys_dup3+0x3e0/0x3e0 [ 77.543701][ T9926] ? __might_fault+0xfb/0x1e0 [ 77.548356][ T9926] ? __fget_light+0x1a9/0x230 [ 77.553008][ T9926] ? __fdget+0x1b/0x20 [ 77.557056][ T9926] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 77.563301][ T9926] __sys_sendmsg+0x105/0x1d0 [ 77.567882][ T9926] ? __sys_sendmsg_sock+0xd0/0xd0 [ 77.572891][ T9926] ? __x64_sys_clock_gettime+0x16d/0x240 [ 77.578501][ T9926] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 77.584557][ T9926] __x64_sys_sendmsg+0x78/0xb0 [ 77.589301][ T9926] do_syscall_64+0xfd/0x6a0 [ 77.593825][ T9926] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 77.599694][ T9926] RIP: 0033:0x4598e9 [ 77.603568][ T9926] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 77.623154][ T9926] RSP: 002b:00007f2565d72c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 77.631558][ T9926] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004598e9 [ 77.639518][ T9926] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 77.647469][ T9926] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 77.655422][ T9926] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2565d736d4 [ 77.664508][ T9926] R13: 00000000004c7812 R14: 00000000004dd0b0 R15: 00000000ffffffff [ 77.673724][ T9926] Kernel Offset: disabled [ 77.678047][ T9926] Rebooting in 86400 seconds..