[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 58.120673][ T26] audit: type=1800 audit(1563575643.137:25): pid=8856 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 58.164738][ T26] audit: type=1800 audit(1563575643.147:26): pid=8856 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 58.205108][ T26] audit: type=1800 audit(1563575643.147:27): pid=8856 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.17' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 66.802712][ T9009] netlink: 4 bytes leftover after parsing attributes in process `syz-executor581'. [ 66.812213][ T9009] kasan: CONFIG_KASAN_INLINE enabled [ 66.817603][ T9009] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 66.825836][ T9009] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 66.832753][ T9009] CPU: 1 PID: 9009 Comm: syz-executor581 Not tainted 5.2.0+ #93 [ 66.840358][ T9009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 66.850423][ T9009] RIP: 0010:tcf_ife_init+0x25c/0x1850 [ 66.855799][ T9009] Code: 00 00 48 c7 c7 c0 aa da 88 e8 40 13 a9 fb 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c7 85 e8 fe ff ff 00 00 00 00 48 c1 ea 03 <0f> b6 14 02 48 89 d8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 e2 [ 66.875387][ T9009] RSP: 0018:ffff88808fc26eb8 EFLAGS: 00010246 [ 66.881431][ T9009] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 1ffff11010de7958 [ 66.889382][ T9009] RDX: 0000000000000000 RSI: 1ffff11010de795f RDI: 0000000000000286 [ 66.897333][ T9009] RBP: ffff88808fc27060 R08: 0000000000000002 R09: ffff888086f3cac8 [ 66.905290][ T9009] R10: fffffbfff1345337 R11: ffffffff89a299bf R12: 0000000000000001 [ 66.913251][ T9009] R13: ffff88821677a480 R14: ffff88808fc278c0 R15: 0000000000000000 [ 66.921206][ T9009] FS: 0000555555abe880(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 66.930110][ T9009] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 66.936668][ T9009] CR2: 0000000020000180 CR3: 000000008d1b2000 CR4: 00000000001406e0 [ 66.944629][ T9009] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 66.952591][ T9009] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 66.960547][ T9009] Call Trace: [ 66.963833][ T9009] ? tc_lookup_action_n+0xd2/0x100 [ 66.968923][ T9009] ? __add_metainfo+0x480/0x480 [ 66.973764][ T9009] ? tc_lookup_action_n+0xd2/0x100 [ 66.978867][ T9009] ? lock_downgrade+0x920/0x920 [ 66.983697][ T9009] ? __kasan_check_write+0x14/0x20 [ 66.988788][ T9009] ? do_raw_read_unlock+0x3f/0x70 [ 66.993792][ T9009] tcf_action_init_1+0x6f2/0xa80 [ 66.998710][ T9009] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 67.004926][ T9009] ? tcf_action_dump_old+0x80/0x80 [ 67.010016][ T9009] ? lock_downgrade+0x920/0x920 [ 67.014953][ T9009] ? __kasan_check_read+0x11/0x20 [ 67.020141][ T9009] ? mark_lock+0xc0/0x11e0 [ 67.024546][ T9009] tcf_action_init+0x241/0x360 [ 67.029306][ T9009] ? tcf_action_init_1+0xa80/0xa80 [ 67.034400][ T9009] ? mark_lock+0xc0/0x11e0 [ 67.038815][ T9009] ? mark_lock+0xc0/0x11e0 [ 67.043210][ T9009] ? __kasan_check_read+0x11/0x20 [ 67.048211][ T9009] tcf_action_add+0xe8/0x370 [ 67.052783][ T9009] ? tca_action_gd+0x1730/0x1730 [ 67.057698][ T9009] ? refcount_dec_not_one+0x1f0/0x1f0 [ 67.063064][ T9009] ? __nla_parse+0x43/0x60 [ 67.067457][ T9009] tc_ctl_action+0x3b5/0x4bc [ 67.072020][ T9009] ? tcf_action_add+0x370/0x370 [ 67.076855][ T9009] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 67.083068][ T9009] ? tcf_action_add+0x370/0x370 [ 67.087913][ T9009] rtnetlink_rcv_msg+0x463/0xb00 [ 67.092830][ T9009] ? rtnetlink_put_metrics+0x590/0x590 [ 67.098290][ T9009] ? lock_downgrade+0x920/0x920 [ 67.103143][ T9009] ? netlink_deliver_tap+0x22d/0xbf0 [ 67.108407][ T9009] ? find_held_lock+0x35/0x130 [ 67.113164][ T9009] netlink_rcv_skb+0x177/0x450 [ 67.117904][ T9009] ? rtnetlink_put_metrics+0x590/0x590 [ 67.123338][ T9009] ? netlink_ack+0xb50/0xb50 [ 67.127906][ T9009] ? __kasan_check_read+0x11/0x20 [ 67.132919][ T9009] ? netlink_deliver_tap+0x254/0xbf0 [ 67.138181][ T9009] rtnetlink_rcv+0x1d/0x30 [ 67.142575][ T9009] netlink_unicast+0x531/0x710 [ 67.147316][ T9009] ? netlink_attachskb+0x7c0/0x7c0 [ 67.152426][ T9009] ? _copy_from_iter_full+0x25d/0x8c0 [ 67.157791][ T9009] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 67.163489][ T9009] ? __check_object_size+0x3d/0x43c [ 67.168680][ T9009] netlink_sendmsg+0x8ae/0xd70 [ 67.173421][ T9009] ? netlink_unicast+0x710/0x710 [ 67.178335][ T9009] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 67.183869][ T9009] ? apparmor_socket_sendmsg+0x2a/0x30 [ 67.189322][ T9009] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 67.195539][ T9009] ? security_socket_sendmsg+0x8d/0xc0 [ 67.200971][ T9009] ? netlink_unicast+0x710/0x710 [ 67.205886][ T9009] sock_sendmsg+0xd7/0x130 [ 67.210296][ T9009] ___sys_sendmsg+0x803/0x920 [ 67.214953][ T9009] ? copy_msghdr_from_user+0x440/0x440 [ 67.220396][ T9009] ? prep_transhuge_page+0xa0/0xa0 [ 67.225486][ T9009] ? __lock_acquire+0x8a0/0x4690 [ 67.230401][ T9009] ? percpu_counter_add_batch+0x13c/0x190 [ 67.236097][ T9009] ? __do_page_fault+0x56a/0xdd0 [ 67.241009][ T9009] ? find_held_lock+0x35/0x130 [ 67.245766][ T9009] ? __do_page_fault+0x56a/0xdd0 [ 67.250692][ T9009] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 67.256908][ T9009] ? __fget_light+0x1a9/0x230 [ 67.261560][ T9009] ? __fdget+0x1b/0x20 [ 67.265623][ T9009] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 67.271843][ T9009] __sys_sendmsg+0x105/0x1d0 [ 67.276408][ T9009] ? __sys_sendmsg_sock+0xd0/0xd0 [ 67.281412][ T9009] ? down_read_non_owner+0x450/0x450 [ 67.286678][ T9009] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 67.292121][ T9009] ? do_syscall_64+0x26/0x6a0 [ 67.296777][ T9009] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 67.302817][ T9009] ? do_syscall_64+0x26/0x6a0 [ 67.307472][ T9009] __x64_sys_sendmsg+0x78/0xb0 [ 67.312218][ T9009] do_syscall_64+0xfd/0x6a0 [ 67.316700][ T9009] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 67.322566][ T9009] RIP: 0033:0x4401d9 [ 67.326437][ T9009] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 67.346035][ T9009] RSP: 002b:00007ffd91cad5b8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 67.354437][ T9009] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004401d9 [ 67.362387][ T9009] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 67.370335][ T9009] RBP: 00000000006ca018 R08: 0000000000000000 R09: 00000000004002c8 [ 67.378302][ T9009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000401a60 [ 67.386252][ T9009] R13: 0000000000401af0 R14: 0000000000000000 R15: 0000000000000000 [ 67.394231][ T9009] Modules linked in: [ 67.398225][ T9009] ---[ end trace 960e282ead97fdd9 ]--- [ 67.403689][ T9009] RIP: 0010:tcf_ife_init+0x25c/0x1850 [ 67.409223][ T9009] Code: 00 00 48 c7 c7 c0 aa da 88 e8 40 13 a9 fb 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c7 85 e8 fe ff ff 00 00 00 00 48 c1 ea 03 <0f> b6 14 02 48 89 d8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 e2 [ 67.428887][ T9009] RSP: 0018:ffff88808fc26eb8 EFLAGS: 00010246 [ 67.434989][ T9009] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 1ffff11010de7958 [ 67.442939][ T9009] RDX: 0000000000000000 RSI: 1ffff11010de795f RDI: 0000000000000286 [ 67.450962][ T9009] RBP: ffff88808fc27060 R08: 0000000000000002 R09: ffff888086f3cac8 [ 67.458964][ T9009] R10: fffffbfff1345337 R11: ffffffff89a299bf R12: 0000000000000001 [ 67.466960][ T9009] R13: ffff88821677a480 R14: ffff88808fc278c0 R15: 0000000000000000 [ 67.474958][ T9009] FS: 0000555555abe880(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 67.483870][ T9009] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 67.490644][ T9009] CR2: 0000000020000180 CR3: 000000008d1b2000 CR4: 00000000001406e0 [ 67.498671][ T9009] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 67.506816][ T9009] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 67.514805][ T9009] Kernel panic - not syncing: Fatal exception [ 67.521876][ T9009] Kernel Offset: disabled [ 67.526194][ T9009] Rebooting in 86400 seconds..