[ 92.531882][ T27] audit: type=1800 audit(1580310603.161:25): pid=9726 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 93.544425][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 93.544437][ T27] audit: type=1800 audit(1580310604.171:29): pid=9726 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 93.571928][ T27] audit: type=1800 audit(1580310604.171:30): pid=9726 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.201' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 103.019531][ T9880] general protection fault, probably for non-canonical address 0xdffffc00060e8d2f: 0000 [#1] PREEMPT SMP KASAN [ 103.031655][ T9880] KASAN: probably user-memory-access in range [0x0000000030746978-0x000000003074697f] [ 103.041310][ T9880] CPU: 0 PID: 9880 Comm: syz-executor814 Not tainted 5.5.0-syzkaller #0 [ 103.049897][ T9880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 103.060608][ T9880] RIP: 0010:nf_flow_table_offload_setup+0x4dc/0x6d0 [ 103.067394][ T9880] Code: bc 24 50 ff ff ff 48 ba 00 00 00 00 00 fc ff df 4d 8b ae 00 02 00 00 4d 8b a4 24 58 ff ff ff 49 8d 7f 08 48 89 f9 48 c1 e9 03 <80> 3c 11 00 0f 85 cd 01 00 00 4c 89 e2 49 89 47 08 48 b8 00 00 00 [ 103.087546][ T9880] RSP: 0018:ffffc90002097228 EFLAGS: 00010202 [ 103.093605][ T9880] RAX: ffff8880a914c250 RBX: 1ffff92000412e49 RCX: 00000000060e8d2f [ 103.101653][ T9880] RDX: dffffc0000000000 RSI: ffffffff867501ce RDI: 000000003074697b [ 103.109862][ T9880] RBP: ffffc90002097370 R08: ffff888098008100 R09: fffff52000412e55 [ 103.118964][ T9880] R10: fffff52000412e54 R11: ffffc900020972a6 R12: 0000000000000000 [ 103.127214][ T9880] R13: ffff8880a914c250 R14: ffff8880a914c050 R15: 0000000030746973 [ 103.135449][ T9880] FS: 0000000001caf880(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 103.144367][ T9880] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 103.151399][ T9880] CR2: 0000000020003e00 CR3: 000000009582e000 CR4: 00000000001406f0 [ 103.159541][ T9880] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 103.168480][ T9880] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 103.176837][ T9880] Call Trace: [ 103.180126][ T9880] ? flow_offload_queue_work+0x130/0x130 [ 103.186007][ T9880] ? nft_netdev_hook_alloc+0xfb/0x170 [ 103.191474][ T9880] ? nf_tables_init_net+0x1e0/0x1e0 [ 103.196869][ T9880] ? nla_memcpy+0xb0/0xb0 [ 103.201839][ T9880] ? wait_for_completion+0x440/0x440 [ 103.207403][ T9880] ? trace_hardirqs_on+0x67/0x240 [ 103.212444][ T9880] ? nf_tables_parse_netdev_hooks+0x70/0x660 [ 103.218426][ T9880] nf_tables_newflowtable+0x1352/0x1d90 [ 103.224079][ T9880] ? nf_tables_newrule+0x2400/0x2400 [ 103.230074][ T9880] ? __nla_parse+0x43/0x60 [ 103.234485][ T9880] nfnetlink_rcv_batch+0x8c8/0x1790 [ 103.239701][ T9880] ? nf_tables_newrule+0x2400/0x2400 [ 103.244990][ T9880] ? nfnetlink_subsys_register+0x2b0/0x2b0 [ 103.250803][ T9880] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 103.257357][ T9880] ? apparmor_capable+0x497/0x900 [ 103.262560][ T9880] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 103.268821][ T9880] ? __nla_validate_parse+0x2d0/0x1ee0 [ 103.274398][ T9880] ? cap_capable+0x205/0x270 [ 103.279017][ T9880] ? nla_memcpy+0xb0/0xb0 [ 103.283495][ T9880] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 103.289750][ T9880] ? ns_capable_common+0x93/0x100 [ 103.294785][ T9880] ? __nla_parse+0x43/0x60 [ 103.299933][ T9880] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 103.305647][ T9880] nfnetlink_rcv+0x3e7/0x460 [ 103.310242][ T9880] ? nfnetlink_rcv_batch+0x1790/0x1790 [ 103.315765][ T9880] ? netlink_deliver_tap+0x248/0xbf0 [ 103.321100][ T9880] ? __kasan_check_write+0x14/0x20 [ 103.326214][ T9880] netlink_unicast+0x59e/0x7e0 [ 103.330982][ T9880] ? netlink_attachskb+0x870/0x870 [ 103.336196][ T9880] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 103.341925][ T9880] ? __check_object_size+0x3d/0x437 [ 103.348174][ T9880] netlink_sendmsg+0x91c/0xea0 [ 103.353052][ T9880] ? netlink_unicast+0x7e0/0x7e0 [ 103.358041][ T9880] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 103.363940][ T9880] ? apparmor_socket_sendmsg+0x2a/0x30 [ 103.369397][ T9880] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 103.376500][ T9880] ? security_socket_sendmsg+0x8d/0xc0 [ 103.381956][ T9880] ? netlink_unicast+0x7e0/0x7e0 [ 103.386888][ T9880] sock_sendmsg+0xd7/0x130 [ 103.391317][ T9880] ____sys_sendmsg+0x753/0x880 [ 103.396084][ T9880] ? kernel_sendmsg+0x50/0x50 [ 103.400775][ T9880] ___sys_sendmsg+0x100/0x170 [ 103.405563][ T9880] ? sendmsg_copy_msghdr+0x70/0x70 [ 103.410684][ T9880] ? do_huge_pmd_anonymous_page+0xceb/0x1a50 [ 103.416933][ T9880] ? prep_transhuge_page+0xa0/0xa0 [ 103.422203][ T9880] ? do_page_fault+0x579/0x12e1 [ 103.427063][ T9880] ? find_held_lock+0x35/0x130 [ 103.431915][ T9880] ? do_page_fault+0x579/0x12e1 [ 103.436778][ T9880] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 103.443021][ T9880] ? __fget_light+0x1a9/0x230 [ 103.447850][ T9880] ? __fdget+0x1b/0x20 [ 103.451918][ T9880] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 103.458540][ T9880] __sys_sendmsg+0x105/0x1d0 [ 103.463762][ T9880] ? __sys_sendmsg_sock+0xc0/0xc0 [ 103.469366][ T9880] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 103.474859][ T9880] ? do_syscall_64+0x26/0x790 [ 103.479552][ T9880] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 103.486355][ T9880] ? do_syscall_64+0x26/0x790 [ 103.491243][ T9880] __x64_sys_sendmsg+0x78/0xb0 [ 103.496107][ T9880] do_syscall_64+0xfa/0x790 [ 103.500630][ T9880] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 103.506696][ T9880] RIP: 0033:0x4401b9 [ 103.510599][ T9880] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 103.531534][ T9880] RSP: 002b:00007ffe68e73768 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.540061][ T9880] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004401b9 [ 103.548509][ T9880] RDX: 0000000000000000 RSI: 0000000020003e00 RDI: 0000000000000003 [ 103.558361][ T9880] RBP: 00000000006ca018 R08: 0000000000000000 R09: 00000000004002c8 [ 103.566352][ T9880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000401a40 [ 103.574518][ T9880] R13: 0000000000401ad0 R14: 0000000000000000 R15: 0000000000000000 [ 103.582678][ T9880] Modules linked in: [ 103.586943][ T9880] ---[ end trace bbda079f7551a236 ]--- [ 103.592478][ T9880] RIP: 0010:nf_flow_table_offload_setup+0x4dc/0x6d0 [ 103.599078][ T9880] Code: bc 24 50 ff ff ff 48 ba 00 00 00 00 00 fc ff df 4d 8b ae 00 02 00 00 4d 8b a4 24 58 ff ff ff 49 8d 7f 08 48 89 f9 48 c1 e9 03 <80> 3c 11 00 0f 85 cd 01 00 00 4c 89 e2 49 89 47 08 48 b8 00 00 00 [ 103.620209][ T9880] RSP: 0018:ffffc90002097228 EFLAGS: 00010202 [ 103.626536][ T9880] RAX: ffff8880a914c250 RBX: 1ffff92000412e49 RCX: 00000000060e8d2f [ 103.634808][ T9880] RDX: dffffc0000000000 RSI: ffffffff867501ce RDI: 000000003074697b [ 103.642983][ T9880] RBP: ffffc90002097370 R08: ffff888098008100 R09: fffff52000412e55 [ 103.651551][ T9880] R10: fffff52000412e54 R11: ffffc900020972a6 R12: 0000000000000000 [ 103.659541][ T9880] R13: ffff8880a914c250 R14: ffff8880a914c050 R15: 0000000030746973 [ 103.667897][ T9880] FS: 0000000001caf880(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 103.677327][ T9880] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 103.684334][ T9880] CR2: 0000000020003e00 CR3: 000000009582e000 CR4: 00000000001406f0 [ 103.693296][ T9880] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 103.701624][ T9880] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 103.710053][ T9880] Kernel panic - not syncing: Fatal exception [ 103.718375][ T9880] Kernel Offset: disabled [ 103.722916][ T9880] Rebooting in 86400 seconds..