[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 91.618530][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 91.618542][ T27] audit: type=1800 audit(1579771774.496:29): pid=9518 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 91.645367][ T27] audit: type=1800 audit(1579771774.496:30): pid=9518 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.17' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 103.100950][ T9673] netlink: 96 bytes leftover after parsing attributes in process `syz-executor587'. executing program [ 103.393362][ T9676] netlink: 96 bytes leftover after parsing attributes in process `syz-executor587'. [ 103.403930][ T9676] ------------[ cut here ]------------ [ 103.409502][ T9676] WARNING: CPU: 0 PID: 9676 at net/sched/sch_cbq.c:1437 cbq_destroy_class+0x11a/0x150 [ 103.419123][ T9676] Kernel panic - not syncing: panic_on_warn set ... [ 103.425737][ T9676] CPU: 0 PID: 9676 Comm: syz-executor587 Not tainted 5.5.0-rc7-syzkaller #0 [ 103.434528][ T9676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 103.444592][ T9676] Call Trace: [ 103.447919][ T9676] dump_stack+0x197/0x210 [ 103.452263][ T9676] ? cbq_destroy_class+0x80/0x150 [ 103.457462][ T9676] panic+0x2e3/0x75c [ 103.461522][ T9676] ? add_taint.cold+0x16/0x16 [ 103.466429][ T9676] ? printk+0xba/0xed [ 103.470405][ T9676] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 103.476005][ T9676] ? __warn.cold+0x14/0x3e [ 103.480459][ T9676] ? __warn+0xd9/0x1cf [ 103.484523][ T9676] ? cbq_destroy_class+0x11a/0x150 [ 103.489631][ T9676] __warn.cold+0x2f/0x3e [ 103.493873][ T9676] ? report_bug.cold+0x63/0xb2 [ 103.498643][ T9676] ? cbq_destroy_class+0x11a/0x150 [ 103.503871][ T9676] report_bug+0x289/0x300 [ 103.508209][ T9676] do_error_trap+0x11b/0x200 [ 103.512790][ T9676] do_invalid_op+0x37/0x50 [ 103.517197][ T9676] ? cbq_destroy_class+0x11a/0x150 [ 103.522309][ T9676] invalid_op+0x23/0x30 [ 103.526455][ T9676] RIP: 0010:cbq_destroy_class+0x11a/0x150 [ 103.532274][ T9676] Code: 00 00 e8 d9 57 da ff 49 39 dc 74 0d e8 9f 98 30 fb 4c 89 e7 e8 67 09 6e fb e8 92 98 30 fb 5b 41 5c 41 5d 5d c3 e8 86 98 30 fb <0f> 0b e9 37 ff ff ff e8 9a 58 6e fb e9 12 ff ff ff e8 b0 58 6e fb [ 103.551994][ T9676] RSP: 0018:ffffc90001e370e0 EFLAGS: 00010293 [ 103.558066][ T9676] RAX: ffff8880a877c580 RBX: ffff888093e93000 RCX: ffffffff86445bcf [ 103.566039][ T9676] RDX: 0000000000000000 RSI: ffffffff86445c9a RDI: 0000000000000005 [ 103.574001][ T9676] RBP: ffffc90001e370f8 R08: ffff8880a877c580 R09: fffffbfff165e7a0 [ 103.581964][ T9676] R10: fffffbfff165e79f R11: ffffffff8b2f3cff R12: ffff888093e93320 [ 103.590033][ T9676] R13: 0000000000000001 R14: 0000000000000000 R15: ffff888093e93320 [ 103.598015][ T9676] ? cbq_destroy_class+0x4f/0x150 [ 103.603075][ T9676] ? cbq_destroy_class+0x11a/0x150 [ 103.608184][ T9676] cbq_destroy+0x208/0x2c0 [ 103.612599][ T9676] ? cbq_walk+0x320/0x320 [ 103.616938][ T9676] qdisc_destroy+0x11f/0x630 [ 103.621522][ T9676] qdisc_put+0xdb/0x100 [ 103.625731][ T9676] notify_and_destroy+0xa2/0xb0 [ 103.630710][ T9676] qdisc_graft+0xd42/0x1210 [ 103.635210][ T9676] ? tc_dump_tclass+0x4e0/0x4e0 [ 103.640044][ T9676] ? tc_get_qdisc+0xc10/0xc10 [ 103.644717][ T9676] tc_modify_qdisc+0xcbd/0x1cd0 [ 103.649562][ T9676] ? qdisc_create+0x1210/0x1210 [ 103.654432][ T9676] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 103.660773][ T9676] ? qdisc_create+0x1210/0x1210 [ 103.665613][ T9676] rtnetlink_rcv_msg+0x45e/0xaf0 [ 103.670568][ T9676] ? rtnl_bridge_getlink+0x910/0x910 [ 103.676003][ T9676] ? lock_downgrade+0x920/0x920 [ 103.680859][ T9676] ? netlink_deliver_tap+0x228/0xbe0 [ 103.686303][ T9676] ? find_held_lock+0x35/0x130 [ 103.691073][ T9676] netlink_rcv_skb+0x177/0x450 [ 103.695847][ T9676] ? rtnl_bridge_getlink+0x910/0x910 [ 103.701214][ T9676] ? netlink_ack+0xb50/0xb50 [ 103.705951][ T9676] ? __kasan_check_read+0x11/0x20 [ 103.710979][ T9676] ? netlink_deliver_tap+0x24a/0xbe0 [ 103.716397][ T9676] rtnetlink_rcv+0x1d/0x30 [ 103.720949][ T9676] netlink_unicast+0x58c/0x7d0 [ 103.725824][ T9676] ? netlink_attachskb+0x870/0x870 [ 103.730933][ T9676] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 103.736754][ T9676] ? __check_object_size+0x3d/0x437 [ 103.742061][ T9676] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 103.747808][ T9676] netlink_sendmsg+0x91c/0xea0 [ 103.752597][ T9676] ? netlink_unicast+0x7d0/0x7d0 [ 103.757544][ T9676] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 103.763220][ T9676] ? apparmor_socket_sendmsg+0x2a/0x30 [ 103.768791][ T9676] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 103.775545][ T9676] ? security_socket_sendmsg+0x8d/0xc0 [ 103.781064][ T9676] ? netlink_unicast+0x7d0/0x7d0 [ 103.786026][ T9676] sock_sendmsg+0xd7/0x130 [ 103.790447][ T9676] kernel_sendmsg+0x44/0x50 [ 103.794947][ T9676] sock_no_sendpage+0x116/0x150 [ 103.799802][ T9676] ? sock_kzfree_s+0x70/0x70 [ 103.804405][ T9676] ? lock_acquire+0x190/0x410 [ 103.809306][ T9676] ? pipe_lock+0x65/0x80 [ 103.813578][ T9676] kernel_sendpage+0x92/0xf0 [ 103.818163][ T9676] ? sock_kzfree_s+0x70/0x70 [ 103.822823][ T9676] sock_sendpage+0x8b/0xc0 [ 103.827379][ T9676] pipe_to_sendpage+0x2da/0x3c0 [ 103.832367][ T9676] ? kernel_sendpage+0xf0/0xf0 [ 103.837208][ T9676] ? direct_splice_actor+0x190/0x190 [ 103.842488][ T9676] ? splice_from_pipe_next.part.0+0x2a2/0x350 [ 103.848777][ T9676] __splice_from_pipe+0x3ee/0x7c0 [ 103.853909][ T9676] ? direct_splice_actor+0x190/0x190 [ 103.859191][ T9676] ? direct_splice_actor+0x190/0x190 [ 103.864523][ T9676] splice_from_pipe+0x108/0x170 [ 103.869484][ T9676] ? splice_shrink_spd+0xd0/0xd0 [ 103.874429][ T9676] ? apparmor_file_permission+0x27/0x30 [ 103.879970][ T9676] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 103.886380][ T9676] ? security_file_permission+0x8f/0x380 [ 103.892050][ T9676] ? rcu_read_lock_held+0x9c/0xb0 [ 103.897298][ T9676] generic_splice_sendpage+0x3c/0x50 [ 103.902580][ T9676] ? splice_from_pipe+0x170/0x170 [ 103.907619][ T9676] do_splice+0xba4/0x1680 [ 103.912021][ T9676] ? ksys_dup3+0x3e0/0x3e0 [ 103.916443][ T9676] ? opipe_prep.part.0+0x300/0x300 [ 103.921855][ T9676] ? __fget_light+0x1a9/0x230 [ 103.926655][ T9676] __x64_sys_splice+0x2c6/0x330 [ 103.931604][ T9676] do_syscall_64+0xfa/0x790 [ 103.936122][ T9676] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 103.942013][ T9676] RIP: 0033:0x446e79 [ 103.945903][ T9676] Code: e8 5c b3 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 0b 08 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 103.965721][ T9676] RSP: 002b:00007fa0d439dd88 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 103.974263][ T9676] RAX: ffffffffffffffda RBX: 00000000006dcc98 RCX: 0000000000446e79 [ 103.982295][ T9676] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000007 [ 103.990315][ T9676] RBP: 00000000006dcc90 R08: 000000000004ffe0 R09: 0000000000000000 [ 103.998425][ T9676] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dcc9c [ 104.006696][ T9676] R13: 00000000004aed8e R14: 54c6c2ff093a6d32 R15: 0000000000010000 [ 104.016348][ T9676] Kernel Offset: disabled [ 104.020764][ T9676] Rebooting in 86400 seconds..