[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 69.371683][ T27] audit: type=1800 audit(1581558734.503:25): pid=9592 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 69.391781][ T27] audit: type=1800 audit(1581558734.503:26): pid=9592 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 69.435377][ T27] audit: type=1800 audit(1581558734.503:27): pid=9592 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.41' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 82.160052][ T9747] general protection fault, probably for non-canonical address 0xdffffc00000000a3: 0000 [#1] PREEMPT SMP KASAN [ 82.171797][ T9747] KASAN: null-ptr-deref in range [0x0000000000000518-0x000000000000051f] [ 82.180244][ T9747] CPU: 0 PID: 9747 Comm: syz-executor268 Not tainted 5.6.0-rc1-next-20200212-syzkaller #0 [ 82.190151][ T9747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 82.200213][ T9747] RIP: 0010:strlen+0x1f/0xa0 [ 82.204785][ T9747] Code: 00 66 2e 0f 1f 84 00 00 00 00 00 48 b8 00 00 00 00 00 fc ff df 55 48 89 fa 48 89 e5 48 c1 ea 03 41 54 49 89 fc 53 48 83 ec 08 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 04 84 c0 75 4d 41 80 3c 24 [ 82.224521][ T9747] RSP: 0018:ffffc90002026e90 EFLAGS: 00010286 [ 82.230566][ T9747] RAX: dffffc0000000000 RBX: ffff8880932cb018 RCX: 1ffffffff154c3fa [ 82.238515][ T9747] RDX: 00000000000000a3 RSI: ffffffff868dbe21 RDI: 0000000000000518 [ 82.246507][ T9747] RBP: ffffc90002026ea8 R08: ffff888093946100 R09: ffffed1012659603 [ 82.254469][ T9747] R10: ffffed1012659602 R11: ffff8880932cb017 R12: 0000000000000518 [ 82.262431][ T9747] R13: 0000000000000508 R14: ffff8880a8595d00 R15: ffff8880932cb000 [ 82.270381][ T9747] FS: 0000000001bff880(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 82.279300][ T9747] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 82.285868][ T9747] CR2: 0000000020001080 CR3: 000000009654b000 CR4: 00000000001406f0 [ 82.293870][ T9747] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 82.301865][ T9747] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 82.309851][ T9747] Call Trace: [ 82.313128][ T9747] ip_set_comment_free+0x69/0xe0 [ 82.318090][ T9747] hash_net4_add+0x1b9a/0x2200 [ 82.322857][ T9747] hash_net4_uadt+0x596/0x940 [ 82.327515][ T9747] ? hash_net4_head+0x730/0x730 [ 82.332344][ T9747] ? hash_net6_uadt+0x880/0x880 [ 82.337195][ T9747] call_ad+0x1a0/0x5a0 [ 82.341247][ T9747] ? start_msg+0x220/0x220 [ 82.345654][ T9747] ? nla_memcpy+0xb0/0xb0 [ 82.349977][ T9747] ? __nla_parse+0x43/0x60 [ 82.354382][ T9747] ip_set_ad.isra.0+0x572/0xb20 [ 82.359230][ T9747] ? ip_set_dump_start+0x6f0/0x6f0 [ 82.364343][ T9747] ? nla_memcpy+0xb0/0xb0 [ 82.368652][ T9747] ? lock_downgrade+0x920/0x920 [ 82.373484][ T9747] ip_set_uadd+0x37/0x50 [ 82.377703][ T9747] ? ip_set_udel+0x50/0x50 [ 82.382111][ T9747] nfnetlink_rcv_msg+0xcf2/0xfb0 [ 82.387031][ T9747] ? nfnetlink_bind+0x2c0/0x2c0 [ 82.391859][ T9747] ? __kasan_check_read+0x11/0x20 [ 82.396860][ T9747] ? mark_lock+0xc2/0x1220 [ 82.401260][ T9747] ? netlink_sendmsg+0xa1b/0xea0 [ 82.406194][ T9747] ? __kasan_check_read+0x11/0x20 [ 82.411229][ T9747] ? mark_lock+0xc2/0x1220 [ 82.415701][ T9747] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 82.421928][ T9747] ? apparmor_capable+0x4df/0x910 [ 82.426934][ T9747] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 82.433168][ T9747] ? apparmor_cred_prepare+0x7b0/0x7b0 [ 82.438615][ T9747] netlink_rcv_skb+0x177/0x450 [ 82.443414][ T9747] ? nfnetlink_bind+0x2c0/0x2c0 [ 82.448247][ T9747] ? netlink_ack+0xb50/0xb50 [ 82.452875][ T9747] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 82.459105][ T9747] ? ns_capable_common+0x93/0x100 [ 82.464109][ T9747] ? ns_capable+0x20/0x30 [ 82.468464][ T9747] ? __netlink_ns_capable+0x104/0x140 [ 82.473830][ T9747] nfnetlink_rcv+0x1ba/0x460 [ 82.478460][ T9747] ? nfnetlink_rcv_batch+0x1790/0x1790 [ 82.483902][ T9747] ? netlink_deliver_tap+0x248/0xbf0 [ 82.489227][ T9747] ? __kasan_check_write+0x14/0x20 [ 82.494336][ T9747] netlink_unicast+0x59e/0x7e0 [ 82.499093][ T9747] ? netlink_attachskb+0x870/0x870 [ 82.504199][ T9747] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 82.509896][ T9747] ? __check_object_size+0x3d/0x437 [ 82.515073][ T9747] netlink_sendmsg+0x91c/0xea0 [ 82.519859][ T9747] ? netlink_unicast+0x7e0/0x7e0 [ 82.524859][ T9747] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 82.530437][ T9747] ? apparmor_socket_sendmsg+0x2a/0x30 [ 82.535884][ T9747] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 82.542116][ T9747] ? security_socket_sendmsg+0x8d/0xc0 [ 82.547605][ T9747] ? netlink_unicast+0x7e0/0x7e0 [ 82.552527][ T9747] sock_sendmsg+0xd7/0x130 [ 82.556939][ T9747] ____sys_sendmsg+0x753/0x880 [ 82.561698][ T9747] ? kernel_sendmsg+0x50/0x50 [ 82.566400][ T9747] ? lockdep_init_map+0x1be/0x6d0 [ 82.571453][ T9747] ___sys_sendmsg+0x100/0x170 [ 82.576115][ T9747] ? sendmsg_copy_msghdr+0x70/0x70 [ 82.581220][ T9747] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 82.587452][ T9747] ? __this_cpu_preempt_check+0x35/0x190 [ 82.593064][ T9747] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 82.599347][ T9747] ? percpu_counter_add_batch+0x13c/0x190 [ 82.605066][ T9747] ? __fd_install+0x1bc/0x640 [ 82.609740][ T9747] ? find_held_lock+0x35/0x130 [ 82.614500][ T9747] ? __fd_install+0x1bc/0x640 [ 82.619183][ T9747] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 82.625405][ T9747] ? __fget_light+0x1ad/0x270 [ 82.630079][ T9747] ? __fdget+0x1b/0x20 [ 82.634197][ T9747] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 82.640491][ T9747] __sys_sendmsg+0x105/0x1d0 [ 82.645073][ T9747] ? __sys_sendmsg_sock+0xc0/0xc0 [ 82.650202][ T9747] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 82.655683][ T9747] ? do_syscall_64+0x26/0x790 [ 82.660343][ T9747] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 82.666412][ T9747] ? do_syscall_64+0x26/0x790 [ 82.671084][ T9747] __x64_sys_sendmsg+0x78/0xb0 [ 82.675858][ T9747] do_syscall_64+0xfa/0x790 [ 82.680367][ T9747] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 82.686250][ T9747] RIP: 0033:0x440479 [ 82.690133][ T9747] Code: 23 02 00 85 c0 b8 00 00 00 00 48 0f 44 c3 5b c3 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 9b 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 82.709729][ T9747] RSP: 002b:00007ffd7e403438 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 82.718173][ T9747] RAX: ffffffffffffffda RBX: 00007ffd7e403440 RCX: 0000000000440479 [ 82.726162][ T9747] RDX: 0000000000000000 RSI: 0000000020000d00 RDI: 0000000000000004 [ 82.734113][ T9747] RBP: 00000000006cb018 R08: 6c616b7a79732f2e R09: 6c616b7a79732f2e [ 82.742064][ T9747] R10: 6c616b7a79732f2e R11: 0000000000000246 R12: 0000000000401ca0 [ 82.750011][ T9747] R13: 0000000000401d30 R14: 0000000000000000 R15: 0000000000000000 [ 82.757983][ T9747] Modules linked in: [ 82.761916][ T9747] ---[ end trace 23c605b3dfcc812e ]--- [ 82.767393][ T9747] RIP: 0010:strlen+0x1f/0xa0 [ 82.772037][ T9747] Code: 00 66 2e 0f 1f 84 00 00 00 00 00 48 b8 00 00 00 00 00 fc ff df 55 48 89 fa 48 89 e5 48 c1 ea 03 41 54 49 89 fc 53 48 83 ec 08 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 04 84 c0 75 4d 41 80 3c 24 [ 82.791654][ T9747] RSP: 0018:ffffc90002026e90 EFLAGS: 00010286 [ 82.797711][ T9747] RAX: dffffc0000000000 RBX: ffff8880932cb018 RCX: 1ffffffff154c3fa [ 82.805717][ T9747] RDX: 00000000000000a3 RSI: ffffffff868dbe21 RDI: 0000000000000518 [ 82.813696][ T9747] RBP: ffffc90002026ea8 R08: ffff888093946100 R09: ffffed1012659603 [ 82.821699][ T9747] R10: ffffed1012659602 R11: ffff8880932cb017 R12: 0000000000000518 [ 82.829682][ T9747] R13: 0000000000000508 R14: ffff8880a8595d00 R15: ffff8880932cb000 [ 82.837635][ T9747] FS: 0000000001bff880(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 82.846572][ T9747] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 82.853173][ T9747] CR2: 0000000020001080 CR3: 000000009654b000 CR4: 00000000001406f0 [ 82.861175][ T9747] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 82.869170][ T9747] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 82.877140][ T9747] Kernel panic - not syncing: Fatal exception in interrupt [ 82.885623][ T9747] Kernel Offset: disabled [ 82.889969][ T9747] Rebooting in 86400 seconds..