[info] Using makefile-style concurrent boot in runlevel 2. [ 24.918654] audit: type=1800 audit(1541008677.453:21): pid=5513 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2419 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.24' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 44.754841] netlink: 'syz-executor536': attribute type 3 has an invalid length. [ 44.762414] netlink: 'syz-executor536': attribute type 2 has an invalid length. [ 44.769950] kasan: CONFIG_KASAN_INLINE enabled [ 44.774608] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 44.782011] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 44.788293] CPU: 0 PID: 5668 Comm: syz-executor536 Not tainted 4.19.0+ #312 [ 44.795376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 44.804721] RIP: 0010:icmp_timeout_obj_to_nlattr+0x77/0x170 [ 44.810417] Code: b5 41 c7 00 f1 f1 f1 f1 c7 40 04 04 f2 f2 f2 65 48 8b 04 25 28 00 00 00 48 89 45 d0 31 c0 e8 c0 06 26 fb 4c 89 e8 48 c1 e8 03 <42> 0f b6 14 38 4c 89 e8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 [ 44.829388] RSP: 0018:ffff8801cb647220 EFLAGS: 00010246 [ 44.834735] RAX: 0000000000000000 RBX: 1ffff100396c8e45 RCX: ffffffff865c6854 [ 44.841989] RDX: 0000000000000000 RSI: ffffffff865970c0 RDI: ffff8801d7084a80 [ 44.849244] RBP: ffff8801cb6472b0 R08: ffff8801d8e50080 R09: ffff8801d70729a8 [ 44.856492] R10: ffffed003ae0e534 R11: ffff8801d70729a0 R12: ffff8801d7084a80 [ 44.863744] R13: 0000000000000000 R14: ffff8801cb647288 R15: dffffc0000000000 [ 44.870997] FS: 0000000002516880(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 44.879200] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.885059] CR2: 00000000208a7000 CR3: 00000001d8779000 CR4: 00000000001406f0 [ 44.892311] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 44.899563] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 44.906815] Call Trace: [ 44.909384] ? memcpy+0x45/0x50 [ 44.912718] ? icmp_timeout_nlattr_to_obj+0x180/0x180 [ 44.917897] ? __nla_put+0x37/0x40 [ 44.921417] ? nla_put+0x117/0x150 [ 44.924948] cttimeout_default_get+0x644/0x9e0 [ 44.929517] ? cttimeout_new_timeout+0x8c0/0x8c0 [ 44.934259] ? __lock_is_held+0xb5/0x140 [ 44.938306] ? cttimeout_new_timeout+0x8c0/0x8c0 [ 44.943043] nfnetlink_rcv_msg+0xdd3/0x10c0 [ 44.947351] ? nfnetlink_bind+0x3b0/0x3b0 [ 44.951481] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 44.957002] ? refcount_sub_and_test_checked+0x203/0x310 [ 44.962442] ? refcount_inc_not_zero_checked+0x2f0/0x2f0 [ 44.967888] ? netlink_deliver_tap+0x32e/0xf80 [ 44.972457] ? lock_downgrade+0x900/0x900 [ 44.976604] ? check_preemption_disabled+0x48/0x280 [ 44.981619] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 44.987145] ? apparmor_capable+0x355/0x6c0 [ 44.991454] ? rcu_softirq_qs+0x20/0x20 [ 44.995413] ? apparmor_cred_prepare+0x5a0/0x5a0 [ 45.000156] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 45.005679] netlink_rcv_skb+0x172/0x440 [ 45.009727] ? nfnetlink_bind+0x3b0/0x3b0 [ 45.013856] ? netlink_ack+0xb80/0xb80 [ 45.017729] ? __netlink_ns_capable+0x100/0x130 [ 45.022384] nfnetlink_rcv+0x1c0/0x4d0 [ 45.026253] ? nfnetlink_rcv_batch+0x19b0/0x19b0 [ 45.031004] ? kasan_check_write+0x14/0x20 [ 45.035224] netlink_unicast+0x5a5/0x760 [ 45.039273] ? netlink_attachskb+0x9a0/0x9a0 [ 45.043668] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 45.049190] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 45.054189] netlink_sendmsg+0xa18/0xfc0 [ 45.058236] ? netlink_unicast+0x760/0x760 [ 45.062456] ? aa_sock_msg_perm.isra.12+0xba/0x160 [ 45.067371] ? apparmor_socket_sendmsg+0x29/0x30 [ 45.072112] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 45.077633] ? security_socket_sendmsg+0x94/0xc0 [ 45.082373] ? netlink_unicast+0x760/0x760 [ 45.086708] sock_sendmsg+0xd5/0x120 [ 45.090405] ___sys_sendmsg+0x7fd/0x930 [ 45.094370] ? find_held_lock+0x36/0x1c0 [ 45.098419] ? copy_msghdr_from_user+0x580/0x580 [ 45.103262] ? zap_class+0x640/0x640 [ 45.106963] ? zap_class+0x640/0x640 [ 45.110656] ? zap_class+0x640/0x640 [ 45.114516] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 45.120042] ? __fget_light+0x2e9/0x430 [ 45.123997] ? fget_raw+0x20/0x20 [ 45.127439] ? __do_page_fault+0x620/0xe60 [ 45.131658] ? lock_downgrade+0x900/0x900 [ 45.135786] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 45.140699] ? kasan_check_read+0x11/0x20 [ 45.144831] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 45.150352] ? sockfd_lookup_light+0xc5/0x160 [ 45.154827] __sys_sendmsg+0x11d/0x280 [ 45.158697] ? __ia32_sys_shutdown+0x80/0x80 [ 45.163089] ? up_read_non_owner+0x100/0x100 [ 45.167605] ? do_syscall_64+0x9a/0x820 [ 45.171564] ? do_syscall_64+0x9a/0x820 [ 45.175527] ? trace_hardirqs_off_caller+0x310/0x310 [ 45.180618] __x64_sys_sendmsg+0x78/0xb0 [ 45.184664] do_syscall_64+0x1b9/0x820 [ 45.188537] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 45.193890] ? syscall_return_slowpath+0x5e0/0x5e0 [ 45.198848] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 45.203684] ? trace_hardirqs_on_caller+0x310/0x310 [ 45.208687] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 45.213686] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 45.219222] ? prepare_exit_to_usermode+0x291/0x3b0 [ 45.224222] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 45.229054] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 45.234223] RIP: 0033:0x4400d9 [ 45.237403] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 45.256290] RSP: 002b:00007ffc26f835b8 EFLAGS: 00000213 ORIG_RAX: 000000000000002e [ 45.263980] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004400d9 [ 45.271232] RDX: 0000000000000000 RSI: 0000000020dddfc8 RDI: 0000000000000003 [ 45.278481] RBP: 00000000006ca018 R08: 0000000000000000 R09: 00000000004002c8 [ 45.285733] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000000401960 [ 45.292981] R13: 00000000004019f0 R14: 0000000000000000 R15: 0000000000000000 [ 45.300238] Modules linked in: [ 45.303542] ---[ end trace fd5c5c70f13f64b4 ]--- [ 45.308381] RIP: 0010:icmp_timeout_obj_to_nlattr+0x77/0x170 [ 45.314079] Code: b5 41 c7 00 f1 f1 f1 f1 c7 40 04 04 f2 f2 f2 65 48 8b 04 25 28 00 00 00 48 89 45 d0 31 c0 e8 c0 06 26 fb 4c 89 e8 48 c1 e8 03 <42> 0f b6 14 38 4c 89 e8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 [ 45.333037] RSP: 0018:ffff8801cb647220 EFLAGS: 00010246 [ 45.338423] RAX: 0000000000000000 RBX: 1ffff100396c8e45 RCX: ffffffff865c6854 [ 45.345681] RDX: 0000000000000000 RSI: ffffffff865970c0 RDI: ffff8801d7084a80 [ 45.352997] RBP: ffff8801cb6472b0 R08: ffff8801d8e50080 R09: ffff8801d70729a8 [ 45.360293] R10: ffffed003ae0e534 R11: ffff8801d70729a0 R12: ffff8801d7084a80 [ 45.367590] R13: 0000000000000000 R14: ffff8801cb647288 R15: dffffc0000000000 [ 45.374860] FS: 0000000002516880(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 45.383118] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.389018] CR2: 00000000208a7000 CR3: 00000001d8779000 CR4: 00000000001406f0 [ 45.396274] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 45.403573] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 45.410882] Kernel panic - not syncing: Fatal exception [ 45.417136] Kernel Offset: disabled [ 45.420756] Rebooting in 86400 seconds..