[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 76.505937][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 76.505949][ T26] audit: type=1800 audit(1580446452.211:29): pid=9972 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 76.533155][ T26] audit: type=1800 audit(1580446452.211:30): pid=9972 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.194' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 85.997208][T10125] general protection fault, probably for non-canonical address 0xdffffc00060e8d2f: 0000 [#1] PREEMPT SMP KASAN [ 86.009152][T10125] KASAN: probably user-memory-access in range [0x0000000030746978-0x000000003074697f] [ 86.018677][T10125] CPU: 0 PID: 10125 Comm: syz-executor391 Not tainted 5.5.0-syzkaller #0 [ 86.027079][T10125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 86.037301][T10125] RIP: 0010:nf_flow_table_offload_setup+0x4dc/0x6d0 [ 86.043895][T10125] Code: bc 24 50 ff ff ff 48 ba 00 00 00 00 00 fc ff df 4d 8b ae 00 02 00 00 4d 8b a4 24 58 ff ff ff 49 8d 7f 08 48 89 f9 48 c1 e9 03 <80> 3c 11 00 0f 85 cd 01 00 00 4c 89 e2 49 89 47 08 48 b8 00 00 00 [ 86.063514][T10125] RSP: 0018:ffffc90002107228 EFLAGS: 00010202 [ 86.069581][T10125] RAX: ffff88808dbbea50 RBX: 1ffff92000420e49 RCX: 00000000060e8d2f [ 86.077548][T10125] RDX: dffffc0000000000 RSI: ffffffff868171ce RDI: 000000003074697b [ 86.085618][T10125] RBP: ffffc90002107370 R08: ffff8880a1b56000 R09: fffff52000420e55 [ 86.093585][T10125] R10: fffff52000420e54 R11: ffffc900021072a6 R12: 0000000000000000 [ 86.101554][T10125] R13: ffff88808dbbea50 R14: ffff88808dbbe850 R15: 0000000030746973 [ 86.109518][T10125] FS: 00000000007ac880(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 86.118432][T10125] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.125037][T10125] CR2: 0000000020000104 CR3: 00000000a452c000 CR4: 00000000001406f0 [ 86.132994][T10125] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 86.140975][T10125] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 86.148940][T10125] Call Trace: [ 86.152230][T10125] ? flow_offload_queue_work+0x130/0x130 [ 86.158159][T10125] ? nft_netdev_hook_alloc+0xfb/0x170 [ 86.163565][T10125] ? nf_tables_init_net+0x1e0/0x1e0 [ 86.168759][T10125] ? nla_memcpy+0xb0/0xb0 [ 86.173147][T10125] ? wait_for_completion+0x440/0x440 [ 86.178427][T10125] ? trace_hardirqs_on+0x67/0x240 [ 86.183553][T10125] ? nf_tables_parse_netdev_hooks+0x70/0x660 [ 86.189531][T10125] nf_tables_newflowtable+0x1352/0x1d90 [ 86.195076][T10125] ? nf_tables_newrule+0x2400/0x2400 [ 86.200500][T10125] ? __nla_parse+0x43/0x60 [ 86.204996][T10125] nfnetlink_rcv_batch+0x8c8/0x1790 [ 86.210179][T10125] ? nf_tables_newrule+0x2400/0x2400 [ 86.215467][T10125] ? nfnetlink_subsys_register+0x2b0/0x2b0 [ 86.221407][T10125] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 86.227637][T10125] ? apparmor_capable+0x497/0x900 [ 86.232811][T10125] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 86.239058][T10125] ? __nla_validate_parse+0x2d0/0x1ee0 [ 86.244560][T10125] ? cap_capable+0x205/0x270 [ 86.249149][T10125] ? nla_memcpy+0xb0/0xb0 [ 86.253489][T10125] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 86.259734][T10125] ? ns_capable_common+0x93/0x100 [ 86.264793][T10125] ? __nla_parse+0x43/0x60 [ 86.269203][T10125] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 86.274932][T10125] nfnetlink_rcv+0x3e7/0x460 [ 86.279520][T10125] ? nfnetlink_rcv_batch+0x1790/0x1790 [ 86.284972][T10125] ? netlink_deliver_tap+0x248/0xbf0 [ 86.290397][T10125] ? __kasan_check_write+0x14/0x20 [ 86.295626][T10125] netlink_unicast+0x59e/0x7e0 [ 86.300391][T10125] ? netlink_attachskb+0x870/0x870 [ 86.305499][T10125] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 86.311213][T10125] ? __check_object_size+0x3d/0x437 [ 86.316466][T10125] netlink_sendmsg+0x91c/0xea0 [ 86.321222][T10125] ? netlink_unicast+0x7e0/0x7e0 [ 86.326155][T10125] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 86.331702][T10125] ? apparmor_socket_sendmsg+0x2a/0x30 [ 86.337158][T10125] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 86.343390][T10125] ? security_socket_sendmsg+0x8d/0xc0 [ 86.348925][T10125] ? netlink_unicast+0x7e0/0x7e0 [ 86.353854][T10125] sock_sendmsg+0xd7/0x130 [ 86.358371][T10125] ____sys_sendmsg+0x753/0x880 [ 86.363132][T10125] ? kernel_sendmsg+0x50/0x50 [ 86.367809][T10125] ___sys_sendmsg+0x100/0x170 [ 86.372618][T10125] ? sendmsg_copy_msghdr+0x70/0x70 [ 86.377732][T10125] ? do_huge_pmd_anonymous_page+0xceb/0x1a50 [ 86.383740][T10125] ? prep_transhuge_page+0xa0/0xa0 [ 86.388913][T10125] ? do_page_fault+0x579/0x12e1 [ 86.394359][T10125] ? find_held_lock+0x35/0x130 [ 86.399121][T10125] ? do_page_fault+0x579/0x12e1 [ 86.403981][T10125] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 86.410333][T10125] ? __fget_light+0x1ad/0x270 [ 86.415006][T10125] ? __fdget+0x1b/0x20 [ 86.419070][T10125] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 86.425417][T10125] __sys_sendmsg+0x105/0x1d0 [ 86.430349][T10125] ? __sys_sendmsg_sock+0xc0/0xc0 [ 86.435376][T10125] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 86.440840][T10125] ? do_syscall_64+0x26/0x790 [ 86.445504][T10125] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 86.451690][T10125] ? do_syscall_64+0x26/0x790 [ 86.456367][T10125] __x64_sys_sendmsg+0x78/0xb0 [ 86.461254][T10125] do_syscall_64+0xfa/0x790 [ 86.465935][T10125] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 86.471963][T10125] RIP: 0033:0x440689 [ 86.475859][T10125] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 86.495586][T10125] RSP: 002b:00007ffdfb9eed78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 86.504032][T10125] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440689 [ 86.512373][T10125] RDX: 0000000000000000 RSI: 0000000020003e00 RDI: 0000000000000003 [ 86.520599][T10125] RBP: 00000000006ca018 R08: 0000000000000000 R09: 00000000004002c8 [ 86.528620][T10125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000401f10 [ 86.536582][T10125] R13: 0000000000401fa0 R14: 0000000000000000 R15: 0000000000000000 [ 86.544548][T10125] Modules linked in: [ 86.549284][T10125] ---[ end trace 3ba4a6144e2e3545 ]--- [ 86.554979][T10125] RIP: 0010:nf_flow_table_offload_setup+0x4dc/0x6d0 [ 86.561562][T10125] Code: bc 24 50 ff ff ff 48 ba 00 00 00 00 00 fc ff df 4d 8b ae 00 02 00 00 4d 8b a4 24 58 ff ff ff 49 8d 7f 08 48 89 f9 48 c1 e9 03 <80> 3c 11 00 0f 85 cd 01 00 00 4c 89 e2 49 89 47 08 48 b8 00 00 00 [ 86.581895][T10125] RSP: 0018:ffffc90002107228 EFLAGS: 00010202 [ 86.588638][T10125] RAX: ffff88808dbbea50 RBX: 1ffff92000420e49 RCX: 00000000060e8d2f [ 86.596713][T10125] RDX: dffffc0000000000 RSI: ffffffff868171ce RDI: 000000003074697b [ 86.604768][T10125] RBP: ffffc90002107370 R08: ffff8880a1b56000 R09: fffff52000420e55 [ 86.612752][T10125] R10: fffff52000420e54 R11: ffffc900021072a6 R12: 0000000000000000 [ 86.620994][T10125] R13: ffff88808dbbea50 R14: ffff88808dbbe850 R15: 0000000030746973 [ 86.629180][T10125] FS: 00000000007ac880(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 86.638199][T10125] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.644823][T10125] CR2: 0000000020000104 CR3: 00000000a452c000 CR4: 00000000001406f0 [ 86.652821][T10125] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 86.661040][T10125] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 86.669052][T10125] Kernel panic - not syncing: Fatal exception [ 86.676574][T10125] Kernel Offset: disabled [ 86.680957][T10125] Rebooting in 86400 seconds..