[ 88.304669][ T23] audit: type=1800 audit(1579631004.880:25): pid=9159 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 88.350708][ T23] audit: type=1800 audit(1579631004.880:26): pid=9159 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 88.382872][ T23] audit: type=1800 audit(1579631004.890:27): pid=9159 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [ 88.886509][ T9224] sshd (9224) used greatest stack depth: 22936 bytes left [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.62' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 99.548822][ T9315] netlink: 96 bytes leftover after parsing attributes in process `syz-executor603'. executing program [ 99.844248][ T9318] netlink: 96 bytes leftover after parsing attributes in process `syz-executor603'. [ 99.854560][ T9318] ------------[ cut here ]------------ [ 99.860022][ T9318] WARNING: CPU: 1 PID: 9318 at net/sched/sch_cbq.c:1437 cbq_destroy_class+0x11a/0x150 [ 99.869538][ T9318] Kernel panic - not syncing: panic_on_warn set ... [ 99.876108][ T9318] CPU: 1 PID: 9318 Comm: syz-executor603 Not tainted 5.5.0-rc6-syzkaller #0 [ 99.884749][ T9318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 99.894782][ T9318] Call Trace: [ 99.898054][ T9318] dump_stack+0x197/0x210 [ 99.902365][ T9318] ? cbq_destroy_class+0x20/0x150 [ 99.907385][ T9318] panic+0x2e3/0x75c [ 99.911273][ T9318] ? add_taint.cold+0x16/0x16 [ 99.915929][ T9318] ? printk+0xba/0xed [ 99.919887][ T9318] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 99.925322][ T9318] ? __warn.cold+0x14/0x3e [ 99.929713][ T9318] ? __warn+0xd9/0x1cf [ 99.933760][ T9318] ? cbq_destroy_class+0x11a/0x150 [ 99.938859][ T9318] __warn.cold+0x2f/0x3e [ 99.943084][ T9318] ? report_bug.cold+0x63/0xb2 [ 99.947825][ T9318] ? cbq_destroy_class+0x11a/0x150 [ 99.952918][ T9318] report_bug+0x289/0x300 [ 99.957237][ T9318] do_error_trap+0x11b/0x200 [ 99.961826][ T9318] do_invalid_op+0x37/0x50 [ 99.966241][ T9318] ? cbq_destroy_class+0x11a/0x150 [ 99.971344][ T9318] invalid_op+0x23/0x30 [ 99.975479][ T9318] RIP: 0010:cbq_destroy_class+0x11a/0x150 [ 99.981173][ T9318] Code: 00 00 e8 c9 33 db ff 49 39 dc 74 0d e8 ef 49 2e fb 4c 89 e7 e8 d7 b7 6b fb e8 e2 49 2e fb 5b 41 5c 41 5d 5d c3 e8 d6 49 2e fb <0f> 0b e9 37 ff ff ff e8 0a 07 6c fb e9 12 ff ff ff e8 20 07 6c fb [ 100.000762][ T9318] RSP: 0018:ffffc900020170e0 EFLAGS: 00010293 [ 100.006826][ T9318] RAX: ffff888094a480c0 RBX: ffff8880a45bb000 RCX: ffffffff8646b52f [ 100.014783][ T9318] RDX: 0000000000000000 RSI: ffffffff8646b5fa RDI: 0000000000000005 [ 100.022754][ T9318] RBP: ffffc900020170f8 R08: ffff888094a480c0 R09: fffffbfff16611a0 [ 100.030704][ T9318] R10: fffffbfff166119f R11: ffffffff8b308cff R12: ffff8880a45bb320 [ 100.038656][ T9318] R13: 0000000000000001 R14: 0000000000000000 R15: ffff8880a45bb320 [ 100.046619][ T9318] ? cbq_destroy_class+0x4f/0x150 [ 100.051629][ T9318] ? cbq_destroy_class+0x11a/0x150 [ 100.056724][ T9318] cbq_destroy+0x208/0x2c0 [ 100.061120][ T9318] ? cbq_walk+0x320/0x320 [ 100.065436][ T9318] qdisc_destroy+0x11f/0x630 [ 100.070004][ T9318] qdisc_put+0xdb/0x100 [ 100.074138][ T9318] notify_and_destroy+0xa2/0xb0 [ 100.078969][ T9318] qdisc_graft+0xd42/0x1210 [ 100.083475][ T9318] ? tc_dump_tclass+0x4e0/0x4e0 [ 100.088316][ T9318] ? tc_get_qdisc+0xc10/0xc10 [ 100.092975][ T9318] tc_modify_qdisc+0xcbd/0x1cd0 [ 100.097808][ T9318] ? qdisc_create+0x1210/0x1210 [ 100.102646][ T9318] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 100.108862][ T9318] ? qdisc_create+0x1210/0x1210 [ 100.113694][ T9318] rtnetlink_rcv_msg+0x45e/0xaf0 [ 100.118610][ T9318] ? rtnl_bridge_getlink+0x910/0x910 [ 100.123872][ T9318] ? lock_downgrade+0x920/0x920 [ 100.128741][ T9318] ? netlink_deliver_tap+0x228/0xbf0 [ 100.134001][ T9318] ? find_held_lock+0x35/0x130 [ 100.138745][ T9318] netlink_rcv_skb+0x177/0x450 [ 100.143490][ T9318] ? rtnl_bridge_getlink+0x910/0x910 [ 100.148759][ T9318] ? netlink_ack+0xb50/0xb50 [ 100.153354][ T9318] ? __kasan_check_read+0x11/0x20 [ 100.158355][ T9318] ? netlink_deliver_tap+0x24a/0xbf0 [ 100.163651][ T9318] rtnetlink_rcv+0x1d/0x30 [ 100.168044][ T9318] netlink_unicast+0x59e/0x7e0 [ 100.172789][ T9318] ? netlink_attachskb+0x870/0x870 [ 100.177878][ T9318] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 100.183574][ T9318] ? __check_object_size+0x3d/0x437 [ 100.188754][ T9318] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 100.194464][ T9318] netlink_sendmsg+0x91c/0xea0 [ 100.199212][ T9318] ? netlink_unicast+0x7e0/0x7e0 [ 100.204126][ T9318] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 100.209688][ T9318] ? apparmor_socket_sendmsg+0x2a/0x30 [ 100.215138][ T9318] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 100.221364][ T9318] ? security_socket_sendmsg+0x8d/0xc0 [ 100.226802][ T9318] ? netlink_unicast+0x7e0/0x7e0 [ 100.231754][ T9318] sock_sendmsg+0xd7/0x130 [ 100.236150][ T9318] kernel_sendmsg+0x44/0x50 [ 100.240633][ T9318] sock_no_sendpage+0x116/0x150 [ 100.245460][ T9318] ? sock_kzfree_s+0x70/0x70 [ 100.250035][ T9318] ? lock_acquire+0x190/0x410 [ 100.254698][ T9318] ? pipe_lock+0x65/0x80 [ 100.258943][ T9318] kernel_sendpage+0x92/0xf0 [ 100.263507][ T9318] ? sock_kzfree_s+0x70/0x70 [ 100.268074][ T9318] sock_sendpage+0x8b/0xc0 [ 100.272474][ T9318] pipe_to_sendpage+0x2da/0x3c0 [ 100.277301][ T9318] ? kernel_sendpage+0xf0/0xf0 [ 100.282053][ T9318] ? direct_splice_actor+0x190/0x190 [ 100.287321][ T9318] ? splice_from_pipe_next.part.0+0x2a2/0x350 [ 100.293368][ T9318] __splice_from_pipe+0x3ee/0x7c0 [ 100.298370][ T9318] ? direct_splice_actor+0x190/0x190 [ 100.303632][ T9318] ? direct_splice_actor+0x190/0x190 [ 100.308930][ T9318] splice_from_pipe+0x108/0x170 [ 100.313761][ T9318] ? splice_shrink_spd+0xd0/0xd0 [ 100.318677][ T9318] ? apparmor_file_permission+0x27/0x30 [ 100.324241][ T9318] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 100.330458][ T9318] ? security_file_permission+0x8f/0x380 [ 100.336065][ T9318] ? rcu_read_lock_held+0x9c/0xb0 [ 100.341070][ T9318] generic_splice_sendpage+0x3c/0x50 [ 100.346331][ T9318] ? splice_from_pipe+0x170/0x170 [ 100.351331][ T9318] do_splice+0xba4/0x1680 [ 100.355674][ T9318] ? ksys_dup3+0x3e0/0x3e0 [ 100.360073][ T9318] ? opipe_prep.part.0+0x300/0x300 [ 100.365163][ T9318] ? __fget_light+0x1a9/0x230 [ 100.369818][ T9318] __x64_sys_splice+0x2c6/0x330 [ 100.374663][ T9318] do_syscall_64+0xfa/0x790 [ 100.379147][ T9318] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 100.385040][ T9318] RIP: 0033:0x446e79 [ 100.388913][ T9318] Code: e8 5c b3 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 0b 08 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 100.408515][ T9318] RSP: 002b:00007f5f9e764d88 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 100.416928][ T9318] RAX: ffffffffffffffda RBX: 00000000006dcc98 RCX: 0000000000446e79 [ 100.424881][ T9318] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000007 [ 100.432839][ T9318] RBP: 00000000006dcc90 R08: 000000000004ffe0 R09: 0000000000000000 [ 100.440899][ T9318] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dcc9c [ 100.448850][ T9318] R13: 00000000004aed8e R14: 54c6c2ff093a6d32 R15: 0000000000010000 [ 100.458035][ T9318] Kernel Offset: disabled [ 100.462423][ T9318] Rebooting in 86400 seconds..