[ 82.171319][ T28] audit: type=1800 audit(1583904820.648:26): pid=9635 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 83.106277][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 83.106288][ T28] audit: type=1800 audit(1583904821.598:29): pid=9635 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 83.132752][ T28] audit: type=1800 audit(1583904821.608:30): pid=9635 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.160' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 91.801805][ T9788] IPVS: ftp: loaded support on port[0] = 21 [ 91.835343][ T9788] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 91.847111][ T9788] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 91.855507][ T9788] CPU: 0 PID: 9788 Comm: syz-executor336 Not tainted 5.6.0-rc3-syzkaller #0 [ 91.864152][ T9788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 91.874207][ T9788] RIP: 0010:tcf_action_destroy+0x6a/0x150 [ 91.879907][ T9788] Code: 49 fb 83 c5 01 bf 20 00 00 00 48 83 c3 08 89 ee e8 1b 03 49 fb 83 fd 20 0f 84 ae 00 00 00 e8 9d 01 49 fb 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 0f 85 ae 00 00 00 4c 8b 3b 4d 85 ff 0f 84 8b 00 00 [ 91.899515][ T9788] RSP: 0018:ffffc900021d7028 EFLAGS: 00010247 [ 91.905561][ T9788] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000000000 [ 91.913546][ T9788] RDX: 0000000000000000 RSI: ffffffff86291123 RDI: 0000000000000004 [ 91.921501][ T9788] RBP: 0000000000000000 R08: ffff888092eee200 R09: ffffed1015cc7074 [ 91.929454][ T9788] R10: ffffed1015cc7073 R11: ffff8880ae63839b R12: 0000000000000000 [ 91.937410][ T9788] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 91.945361][ T9788] FS: 0000000002518880(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 91.954292][ T9788] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 91.960856][ T9788] CR2: 0000000020000280 CR3: 000000009a0f2000 CR4: 00000000001406f0 [ 91.968812][ T9788] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 91.976773][ T9788] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 91.984726][ T9788] Call Trace: [ 91.988054][ T9788] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 91.994025][ T9788] tcf_exts_destroy+0x42/0xc0 [ 91.998686][ T9788] tcf_exts_change+0xf4/0x150 [ 92.003383][ T9788] ? tcf_exts_destroy+0xc0/0xc0 [ 92.008214][ T9788] tcindex_set_parms+0xed8/0x1a00 [ 92.013260][ T9788] ? tcindex_alloc_perfect_hash+0x320/0x320 [ 92.019135][ T9788] ? mark_held_locks+0xe0/0xe0 [ 92.023886][ T9788] ? nla_memcpy+0xa0/0xa0 [ 92.028207][ T9788] ? tcindex_change+0x203/0x2e0 [ 92.033033][ T9788] tcindex_change+0x203/0x2e0 [ 92.037743][ T9788] ? tcindex_set_parms+0x1a00/0x1a00 [ 92.043019][ T9788] tc_new_tfilter+0xa59/0x20b0 [ 92.047791][ T9788] ? tcindex_set_parms+0x1a00/0x1a00 [ 92.053062][ T9788] ? tc_del_tfilter+0x1430/0x1430 [ 92.058066][ T9788] ? __lock_acquire+0x80b/0x3ca0 [ 92.062986][ T9788] ? apparmor_capable+0x454/0x8a0 [ 92.067993][ T9788] ? rcu_read_lock_held+0x9c/0xb0 [ 92.073023][ T9788] ? tc_del_tfilter+0x1430/0x1430 [ 92.078034][ T9788] rtnetlink_rcv_msg+0x810/0xad0 [ 92.082962][ T9788] ? rtnl_bridge_getlink+0x880/0x880 [ 92.088230][ T9788] ? mark_held_locks+0xe0/0xe0 [ 92.092977][ T9788] ? netlink_deliver_tap+0x146/0xb50 [ 92.098250][ T9788] netlink_rcv_skb+0x15a/0x410 [ 92.102999][ T9788] ? rtnl_bridge_getlink+0x880/0x880 [ 92.108260][ T9788] ? netlink_ack+0xa80/0xa80 [ 92.112835][ T9788] netlink_unicast+0x537/0x740 [ 92.117577][ T9788] ? netlink_attachskb+0x810/0x810 [ 92.122705][ T9788] ? _copy_from_iter_full+0x25c/0x870 [ 92.128064][ T9788] ? __phys_addr_symbol+0x2c/0x70 [ 92.133067][ T9788] ? __check_object_size+0x171/0x437 [ 92.138334][ T9788] netlink_sendmsg+0x882/0xe10 [ 92.143095][ T9788] ? aa_af_perm+0x260/0x260 [ 92.147581][ T9788] ? netlink_unicast+0x740/0x740 [ 92.152513][ T9788] ? netlink_unicast+0x740/0x740 [ 92.157456][ T9788] sock_sendmsg+0xcf/0x120 [ 92.161869][ T9788] ____sys_sendmsg+0x6b9/0x7d0 [ 92.166645][ T9788] ? kernel_sendmsg+0x50/0x50 [ 92.171307][ T9788] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 92.176842][ T9788] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 92.182846][ T9788] ___sys_sendmsg+0x100/0x170 [ 92.187506][ T9788] ? sendmsg_copy_msghdr+0x70/0x70 [ 92.192599][ T9788] ? lock_downgrade+0x7f0/0x7f0 [ 92.197429][ T9788] ? lock_acquire+0x197/0x420 [ 92.202092][ T9788] ? __might_fault+0xef/0x1d0 [ 92.206761][ T9788] ? __might_fault+0x190/0x1d0 [ 92.211508][ T9788] ? _copy_to_user+0x107/0x150 [ 92.216288][ T9788] ? move_addr_to_user+0xb3/0x200 [ 92.221313][ T9788] ? __fget_light+0x1a5/0x270 [ 92.226007][ T9788] __sys_sendmsg+0xec/0x1b0 [ 92.230497][ T9788] ? __sys_sendmsg_sock+0xb0/0xb0 [ 92.235501][ T9788] ? mark_held_locks+0x9f/0xe0 [ 92.240249][ T9788] ? trace_hardirqs_off_caller+0x55/0x230 [ 92.245947][ T9788] ? do_syscall_64+0x21/0x790 [ 92.250604][ T9788] do_syscall_64+0xf6/0x790 [ 92.255089][ T9788] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 92.260961][ T9788] RIP: 0033:0x4416a9 [ 92.264848][ T9788] Code: 40 02 00 85 c0 b8 00 00 00 00 48 0f 44 c3 5b c3 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 0f fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 92.284434][ T9788] RSP: 002b:00007fff7f0b9e28 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.292833][ T9788] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004416a9 [ 92.300785][ T9788] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 92.308738][ T9788] RBP: 00007fff7f0b9e80 R08: 0000000000000000 R09: 0000000000000000 [ 92.316696][ T9788] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff7f0b9e50 [ 92.324643][ T9788] R13: 0000000000000003 R14: 0000000000000004 R15: 0000000000000000 [ 92.332611][ T9788] Modules linked in: [ 92.337326][ T9788] ---[ end trace 41ed1d198562e021 ]--- [ 92.342931][ T9788] RIP: 0010:tcf_action_destroy+0x6a/0x150 [ 92.348632][ T9788] Code: 49 fb 83 c5 01 bf 20 00 00 00 48 83 c3 08 89 ee e8 1b 03 49 fb 83 fd 20 0f 84 ae 00 00 00 e8 9d 01 49 fb 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 0f 85 ae 00 00 00 4c 8b 3b 4d 85 ff 0f 84 8b 00 00 [ 92.368274][ T9788] RSP: 0018:ffffc900021d7028 EFLAGS: 00010247 [ 92.374354][ T9788] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000000000 [ 92.382344][ T9788] RDX: 0000000000000000 RSI: ffffffff86291123 RDI: 0000000000000004 [ 92.390323][ T9788] RBP: 0000000000000000 R08: ffff888092eee200 R09: ffffed1015cc7074 [ 92.398287][ T9788] R10: ffffed1015cc7073 R11: ffff8880ae63839b R12: 0000000000000000 [ 92.406276][ T9788] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 92.414261][ T9788] FS: 0000000002518880(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 92.423225][ T9788] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 92.429822][ T9788] CR2: 0000000020000280 CR3: 000000009a0f2000 CR4: 00000000001406f0 [ 92.437780][ T9788] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 92.445792][ T9788] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 92.453794][ T9788] Kernel panic - not syncing: Fatal exception [ 92.460898][ T9788] Kernel Offset: disabled [ 92.465233][ T9788] Rebooting in 86400 seconds..