[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 88.573963][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 88.573977][ T27] audit: type=1800 audit(1580318710.441:29): pid=10081 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 88.600727][ T27] audit: type=1800 audit(1580318710.441:30): pid=10081 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.246' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 98.667281][T10232] general protection fault, probably for non-canonical address 0xdffffc00060e8d2f: 0000 [#1] PREEMPT SMP KASAN [ 98.679509][T10232] KASAN: probably user-memory-access in range [0x0000000030746978-0x000000003074697f] [ 98.689300][T10232] CPU: 1 PID: 10232 Comm: syz-executor657 Not tainted 5.5.0-syzkaller #0 [ 98.697811][T10232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 98.707875][T10232] RIP: 0010:nf_flow_table_offload_setup+0x4dc/0x6d0 [ 98.714455][T10232] Code: bc 24 50 ff ff ff 48 ba 00 00 00 00 00 fc ff df 4d 8b ae 00 02 00 00 4d 8b a4 24 58 ff ff ff 49 8d 7f 08 48 89 f9 48 c1 e9 03 <80> 3c 11 00 0f 85 cd 01 00 00 4c 89 e2 49 89 47 08 48 b8 00 00 00 [ 98.734188][T10232] RSP: 0018:ffffc900020d7228 EFLAGS: 00010202 [ 98.740280][T10232] RAX: ffff8880a4587a50 RBX: 1ffff9200041ae49 RCX: 00000000060e8d2f [ 98.748255][T10232] RDX: dffffc0000000000 RSI: ffffffff867501ce RDI: 000000003074697b [ 98.756294][T10232] RBP: ffffc900020d7370 R08: ffff888098fc6200 R09: fffff5200041ae55 [ 98.764559][T10232] R10: fffff5200041ae54 R11: ffffc900020d72a6 R12: 0000000000000000 [ 98.772616][T10232] R13: ffff8880a4587a50 R14: ffff8880a4587850 R15: 0000000030746973 [ 98.780726][T10232] FS: 00000000008fa880(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 98.789715][T10232] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 98.796302][T10232] CR2: 0000000020000104 CR3: 0000000093469000 CR4: 00000000001406e0 [ 98.804291][T10232] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 98.812433][T10232] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 98.820522][T10232] Call Trace: [ 98.823843][T10232] ? flow_offload_queue_work+0x130/0x130 [ 98.829501][T10232] ? nft_netdev_hook_alloc+0xfb/0x170 [ 98.834877][T10232] ? nf_tables_init_net+0x1e0/0x1e0 [ 98.840075][T10232] ? nla_memcpy+0xb0/0xb0 [ 98.844592][T10232] ? wait_for_completion+0x440/0x440 [ 98.849890][T10232] ? trace_hardirqs_on+0x67/0x240 [ 98.855010][T10232] ? nf_tables_parse_netdev_hooks+0x70/0x660 [ 98.861598][T10232] nf_tables_newflowtable+0x1352/0x1d90 [ 98.867247][T10232] ? nf_tables_newrule+0x2400/0x2400 [ 98.872633][T10232] ? __nla_parse+0x43/0x60 [ 98.877037][T10232] nfnetlink_rcv_batch+0x8c8/0x1790 [ 98.882340][T10232] ? nf_tables_newrule+0x2400/0x2400 [ 98.887738][T10232] ? nfnetlink_subsys_register+0x2b0/0x2b0 [ 98.894082][T10232] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 98.900454][T10232] ? apparmor_capable+0x497/0x900 [ 98.906268][T10232] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 98.912940][T10232] ? __nla_validate_parse+0x2d0/0x1ee0 [ 98.918611][T10232] ? cap_capable+0x205/0x270 [ 98.923198][T10232] ? nla_memcpy+0xb0/0xb0 [ 98.927577][T10232] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 98.933953][T10232] ? ns_capable_common+0x93/0x100 [ 98.939087][T10232] ? __nla_parse+0x43/0x60 [ 98.943501][T10232] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 98.949314][T10232] nfnetlink_rcv+0x3e7/0x460 [ 98.953907][T10232] ? nfnetlink_rcv_batch+0x1790/0x1790 [ 98.959470][T10232] ? netlink_deliver_tap+0x248/0xbf0 [ 98.965020][T10232] ? __kasan_check_write+0x14/0x20 [ 98.970119][T10232] netlink_unicast+0x59e/0x7e0 [ 98.974927][T10232] ? netlink_attachskb+0x870/0x870 [ 98.980041][T10232] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 98.985818][T10232] ? __check_object_size+0x3d/0x437 [ 98.991004][T10232] netlink_sendmsg+0x91c/0xea0 [ 98.995772][T10232] ? netlink_unicast+0x7e0/0x7e0 [ 99.000709][T10232] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 99.006436][T10232] ? apparmor_socket_sendmsg+0x2a/0x30 [ 99.012199][T10232] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 99.018500][T10232] ? security_socket_sendmsg+0x8d/0xc0 [ 99.024099][T10232] ? netlink_unicast+0x7e0/0x7e0 [ 99.029148][T10232] sock_sendmsg+0xd7/0x130 [ 99.033559][T10232] ____sys_sendmsg+0x753/0x880 [ 99.038309][T10232] ? kernel_sendmsg+0x50/0x50 [ 99.043137][T10232] ___sys_sendmsg+0x100/0x170 [ 99.047835][T10232] ? sendmsg_copy_msghdr+0x70/0x70 [ 99.052929][T10232] ? do_huge_pmd_anonymous_page+0xceb/0x1a50 [ 99.058894][T10232] ? prep_transhuge_page+0xa0/0xa0 [ 99.064194][T10232] ? do_page_fault+0x579/0x12e1 [ 99.069186][T10232] ? find_held_lock+0x35/0x130 [ 99.073942][T10232] ? do_page_fault+0x579/0x12e1 [ 99.079007][T10232] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 99.089762][T10232] ? __fget_light+0x1a9/0x230 [ 99.094519][T10232] ? __fdget+0x1b/0x20 [ 99.098600][T10232] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 99.104840][T10232] __sys_sendmsg+0x105/0x1d0 [ 99.109416][T10232] ? __sys_sendmsg_sock+0xc0/0xc0 [ 99.114436][T10232] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 99.119871][T10232] ? do_syscall_64+0x26/0x790 [ 99.124528][T10232] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 99.130573][T10232] ? do_syscall_64+0x26/0x790 [ 99.135245][T10232] __x64_sys_sendmsg+0x78/0xb0 [ 99.139986][T10232] do_syscall_64+0xfa/0x790 [ 99.144471][T10232] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 99.150336][T10232] RIP: 0033:0x440689 [ 99.154209][T10232] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 99.173876][T10232] RSP: 002b:00007fff9992fe08 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.182267][T10232] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440689 [ 99.190233][T10232] RDX: 0000000000000000 RSI: 0000000020003e00 RDI: 0000000000000003 [ 99.198188][T10232] RBP: 00000000006ca018 R08: 0000000000000000 R09: 00000000004002c8 [ 99.206143][T10232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000401f10 [ 99.214094][T10232] R13: 0000000000401fa0 R14: 0000000000000000 R15: 0000000000000000 [ 99.222144][T10232] Modules linked in: [ 99.226654][T10232] ---[ end trace a6576981b58c2d73 ]--- [ 99.232227][T10232] RIP: 0010:nf_flow_table_offload_setup+0x4dc/0x6d0 [ 99.239171][T10232] Code: bc 24 50 ff ff ff 48 ba 00 00 00 00 00 fc ff df 4d 8b ae 00 02 00 00 4d 8b a4 24 58 ff ff ff 49 8d 7f 08 48 89 f9 48 c1 e9 03 <80> 3c 11 00 0f 85 cd 01 00 00 4c 89 e2 49 89 47 08 48 b8 00 00 00 [ 99.259742][T10232] RSP: 0018:ffffc900020d7228 EFLAGS: 00010202 [ 99.266007][T10232] RAX: ffff8880a4587a50 RBX: 1ffff9200041ae49 RCX: 00000000060e8d2f [ 99.274256][T10232] RDX: dffffc0000000000 RSI: ffffffff867501ce RDI: 000000003074697b [ 99.282539][T10232] RBP: ffffc900020d7370 R08: ffff888098fc6200 R09: fffff5200041ae55 [ 99.290510][T10232] R10: fffff5200041ae54 R11: ffffc900020d72a6 R12: 0000000000000000 [ 99.298712][T10232] R13: ffff8880a4587a50 R14: ffff8880a4587850 R15: 0000000030746973 [ 99.306724][T10232] FS: 00000000008fa880(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 99.315686][T10232] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 99.322290][T10232] CR2: 0000000020000104 CR3: 0000000093469000 CR4: 00000000001406e0 [ 99.331492][T10232] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 99.339534][T10232] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 99.347547][T10232] Kernel panic - not syncing: Fatal exception [ 99.355389][T10232] Kernel Offset: disabled [ 99.360081][T10232] Rebooting in 86400 seconds..