[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 60.858994][ T27] audit: type=1800 audit(1579673025.455:25): pid=8668 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 60.878114][ T27] audit: type=1800 audit(1579673025.455:26): pid=8668 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 60.898691][ T27] audit: type=1800 audit(1579673025.455:27): pid=8668 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.173' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 68.846961][ T8825] netlink: 96 bytes leftover after parsing attributes in process `syz-executor899'. executing program [ 69.133556][ T8828] netlink: 96 bytes leftover after parsing attributes in process `syz-executor899'. [ 69.143889][ T8828] ------------[ cut here ]------------ [ 69.149354][ T8828] WARNING: CPU: 1 PID: 8828 at net/sched/sch_cbq.c:1437 cbq_destroy+0x324/0x400 [ 69.158355][ T8828] Kernel panic - not syncing: panic_on_warn set ... [ 69.164927][ T8828] CPU: 1 PID: 8828 Comm: syz-executor899 Not tainted 5.5.0-rc7-syzkaller #0 [ 69.173579][ T8828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.183678][ T8828] Call Trace: [ 69.187250][ T8828] dump_stack+0x1fb/0x318 [ 69.191585][ T8828] panic+0x264/0x7a9 [ 69.195472][ T8828] ? __warn+0x105/0x210 [ 69.199902][ T8828] ? cbq_destroy+0x324/0x400 [ 69.204546][ T8828] __warn+0x209/0x210 [ 69.208529][ T8828] ? cbq_destroy+0x324/0x400 [ 69.213124][ T8828] report_bug+0x1b6/0x2f0 [ 69.217443][ T8828] ? cbq_destroy+0x324/0x400 [ 69.222035][ T8828] do_error_trap+0xda/0x440 [ 69.226528][ T8828] do_invalid_op+0x36/0x40 [ 69.231150][ T8828] ? cbq_destroy+0x324/0x400 [ 69.236256][ T8828] invalid_op+0x23/0x30 [ 69.240532][ T8828] RIP: 0010:cbq_destroy+0x324/0x400 [ 69.245722][ T8828] Code: 32 3d fb eb 06 90 e8 db 85 01 fb 49 8d 5f f8 4d 85 ff 49 0f 44 df 48 85 db 74 4b e8 c6 85 01 fb e9 01 ff ff ff e8 bc 85 01 fb <0f> 0b e9 47 ff ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 1a ff [ 69.265754][ T8828] RSP: 0018:ffffc900078472b0 EFLAGS: 00010293 [ 69.271881][ T8828] RAX: ffffffff8674f7c4 RBX: ffff8880a7ef2320 RCX: ffff8880a25a2580 [ 69.279840][ T8828] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 69.287805][ T8828] RBP: ffffc90007847308 R08: ffffffff8674f704 R09: fffffbfff13cd120 [ 69.295770][ T8828] R10: fffffbfff13cd120 R11: 0000000000000000 R12: ffff8880a7ef22c0 [ 69.303737][ T8828] R13: 0000000000000001 R14: dffffc0000000000 R15: 0000000000000000 [ 69.311738][ T8828] ? cbq_destroy+0x264/0x400 [ 69.316317][ T8828] ? cbq_destroy+0x324/0x400 [ 69.321341][ T8828] ? cbq_reset+0x440/0x440 [ 69.325745][ T8828] qdisc_destroy+0x147/0x4c0 [ 69.330325][ T8828] qdisc_put+0x83/0xf0 [ 69.334385][ T8828] qdisc_graft+0xcc8/0x11f0 [ 69.338888][ T8828] tc_modify_qdisc+0xddd/0x1d90 [ 69.343903][ T8828] ? rcu_lock_release+0x30/0x30 [ 69.348741][ T8828] rtnetlink_rcv_msg+0x889/0xd40 [ 69.353762][ T8828] ? sock_no_sendpage+0x100/0x140 [ 69.358804][ T8828] ? rcu_lock_release+0x9/0x30 [ 69.363575][ T8828] netlink_rcv_skb+0x19e/0x3e0 [ 69.368329][ T8828] ? rtnetlink_bind+0x80/0x80 [ 69.372996][ T8828] rtnetlink_rcv+0x1c/0x20 [ 69.377522][ T8828] netlink_unicast+0x767/0x920 [ 69.382339][ T8828] netlink_sendmsg+0xa2c/0xd50 [ 69.387101][ T8828] ? netlink_getsockopt+0x9f0/0x9f0 [ 69.392283][ T8828] kernel_sendmsg+0x109/0x140 [ 69.396949][ T8828] sock_no_sendpage+0x100/0x140 [ 69.401791][ T8828] ? sock_no_mmap+0x10/0x10 [ 69.406387][ T8828] sock_sendpage+0xd3/0x120 [ 69.410884][ T8828] pipe_to_sendpage+0x238/0x320 [ 69.415734][ T8828] ? sock_fasync+0x100/0x100 [ 69.420413][ T8828] __splice_from_pipe+0x33d/0x870 [ 69.425456][ T8828] ? generic_splice_sendpage+0x180/0x180 [ 69.431091][ T8828] generic_splice_sendpage+0x114/0x180 [ 69.436726][ T8828] ? iter_file_splice_write+0xe40/0xe40 [ 69.442303][ T8828] __se_sys_splice+0x719/0x1ac0 [ 69.447283][ T8828] ? check_preemption_disabled+0xb4/0x260 [ 69.453153][ T8828] ? debug_smp_processor_id+0x9/0x20 [ 69.458432][ T8828] ? debug_smp_processor_id+0x1c/0x20 [ 69.463792][ T8828] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 69.469912][ T8828] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 69.475798][ T8828] __x64_sys_splice+0xe5/0x100 [ 69.480554][ T8828] do_syscall_64+0xf7/0x1c0 [ 69.485071][ T8828] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 69.490976][ T8828] RIP: 0033:0x446e79 [ 69.494854][ T8828] Code: e8 5c b3 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 0b 08 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 69.514550][ T8828] RSP: 002b:00007fa4f9aa3d88 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 69.522982][ T8828] RAX: ffffffffffffffda RBX: 00000000006dcc98 RCX: 0000000000446e79 [ 69.530998][ T8828] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000007 [ 69.538987][ T8828] RBP: 00000000006dcc90 R08: 000000000004ffe0 R09: 0000000000000000 [ 69.546945][ T8828] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dcc9c [ 69.554986][ T8828] R13: 00000000004aed8e R14: 54c6c2ff093a6d32 R15: 0000000000010000 [ 69.564534][ T8828] Kernel Offset: disabled [ 69.569003][ T8828] Rebooting in 86400 seconds..