[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 89.593021][ T27] audit: type=1800 audit(1580324429.723:25): pid=9630 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 89.612782][ T27] audit: type=1800 audit(1580324429.723:26): pid=9630 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 89.666189][ T27] audit: type=1800 audit(1580324429.723:27): pid=9630 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.247' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 101.110748][ T9787] general protection fault, probably for non-canonical address 0xdffffc00060e8d2f: 0000 [#1] PREEMPT SMP KASAN [ 101.122594][ T9787] KASAN: probably user-memory-access in range [0x0000000030746978-0x000000003074697f] [ 101.132137][ T9787] CPU: 0 PID: 9787 Comm: syz-executor370 Not tainted 5.5.0-syzkaller #0 [ 101.140430][ T9787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 101.150471][ T9787] RIP: 0010:nf_flow_table_offload_setup+0x4dc/0x6d0 [ 101.157050][ T9787] Code: bc 24 50 ff ff ff 48 ba 00 00 00 00 00 fc ff df 4d 8b ae 00 02 00 00 4d 8b a4 24 58 ff ff ff 49 8d 7f 08 48 89 f9 48 c1 e9 03 <80> 3c 11 00 0f 85 cd 01 00 00 4c 89 e2 49 89 47 08 48 b8 00 00 00 [ 101.176642][ T9787] RSP: 0018:ffffc90002167218 EFLAGS: 00010202 [ 101.182785][ T9787] RAX: ffff8880a03e3250 RBX: 1ffff9200042ce47 RCX: 00000000060e8d2f [ 101.190746][ T9787] RDX: dffffc0000000000 RSI: ffffffff867501ce RDI: 000000003074697b [ 101.198941][ T9787] RBP: ffffc90002167360 R08: ffff8880a3e94240 R09: fffff5200042ce53 [ 101.206902][ T9787] R10: fffff5200042ce52 R11: ffffc90002167296 R12: 0000000000000000 [ 101.214851][ T9787] R13: ffff8880a03e3250 R14: ffff8880a03e3050 R15: 0000000030746973 [ 101.222810][ T9787] FS: 0000000000000000(0000) GS:ffff8880ae800000(0063) knlGS:0000000009039840 [ 101.231715][ T9787] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 101.238292][ T9787] CR2: 0000000020000104 CR3: 000000008dd04000 CR4: 00000000001406f0 [ 101.246264][ T9787] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 101.254213][ T9787] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 101.262181][ T9787] Call Trace: [ 101.265467][ T9787] ? flow_offload_queue_work+0x130/0x130 [ 101.271089][ T9787] ? nft_netdev_hook_alloc+0xfb/0x170 [ 101.276440][ T9787] ? nf_tables_init_net+0x1e0/0x1e0 [ 101.281617][ T9787] ? nla_memcpy+0xb0/0xb0 [ 101.285925][ T9787] ? wait_for_completion+0x440/0x440 [ 101.291185][ T9787] ? trace_hardirqs_on+0x67/0x240 [ 101.296186][ T9787] ? nf_tables_parse_netdev_hooks+0x70/0x660 [ 101.302164][ T9787] nf_tables_newflowtable+0x1352/0x1d90 [ 101.307688][ T9787] ? nf_tables_newrule+0x2400/0x2400 [ 101.312954][ T9787] ? __nla_parse+0x43/0x60 [ 101.317366][ T9787] nfnetlink_rcv_batch+0x8c8/0x1790 [ 101.322559][ T9787] ? nf_tables_newrule+0x2400/0x2400 [ 101.327822][ T9787] ? nfnetlink_subsys_register+0x2b0/0x2b0 [ 101.333607][ T9787] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 101.339835][ T9787] ? apparmor_capable+0x497/0x900 [ 101.344862][ T9787] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 101.351093][ T9787] ? __nla_validate_parse+0x2d0/0x1ee0 [ 101.356526][ T9787] ? cap_capable+0x205/0x270 [ 101.361095][ T9787] ? nla_memcpy+0xb0/0xb0 [ 101.365403][ T9787] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 101.371620][ T9787] ? ns_capable_common+0x93/0x100 [ 101.376648][ T9787] ? __nla_parse+0x43/0x60 [ 101.381041][ T9787] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 101.386756][ T9787] nfnetlink_rcv+0x3e7/0x460 [ 101.391336][ T9787] ? nfnetlink_rcv_batch+0x1790/0x1790 [ 101.396793][ T9787] ? netlink_deliver_tap+0x248/0xbf0 [ 101.402089][ T9787] ? __kasan_check_write+0x14/0x20 [ 101.407179][ T9787] netlink_unicast+0x59e/0x7e0 [ 101.411921][ T9787] ? netlink_attachskb+0x870/0x870 [ 101.417008][ T9787] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 101.422699][ T9787] ? __check_object_size+0x3d/0x437 [ 101.427883][ T9787] netlink_sendmsg+0x91c/0xea0 [ 101.432625][ T9787] ? netlink_unicast+0x7e0/0x7e0 [ 101.437540][ T9787] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 101.443061][ T9787] ? apparmor_socket_sendmsg+0x2a/0x30 [ 101.448509][ T9787] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 101.454736][ T9787] ? security_socket_sendmsg+0x8d/0xc0 [ 101.460170][ T9787] ? netlink_unicast+0x7e0/0x7e0 [ 101.465100][ T9787] sock_sendmsg+0xd7/0x130 [ 101.469509][ T9787] ____sys_sendmsg+0x753/0x880 [ 101.474254][ T9787] ? kernel_sendmsg+0x50/0x50 [ 101.478926][ T9787] ___sys_sendmsg+0x100/0x170 [ 101.483581][ T9787] ? sendmsg_copy_msghdr+0x70/0x70 [ 101.488694][ T9787] ? do_huge_pmd_anonymous_page+0xceb/0x1a50 [ 101.494646][ T9787] ? mark_lock+0xc2/0x1220 [ 101.499040][ T9787] ? prep_transhuge_page+0xa0/0xa0 [ 101.504129][ T9787] ? do_page_fault+0x579/0x12e1 [ 101.508968][ T9787] ? find_held_lock+0x35/0x130 [ 101.513711][ T9787] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 101.519925][ T9787] ? __fget_light+0x1a9/0x230 [ 101.524583][ T9787] ? __fdget+0x1b/0x20 [ 101.528627][ T9787] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 101.534866][ T9787] __sys_sendmsg+0x105/0x1d0 [ 101.539446][ T9787] ? __sys_sendmsg_sock+0xc0/0xc0 [ 101.544452][ T9787] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 101.549886][ T9787] ? do_fast_syscall_32+0xd1/0xe16 [ 101.554978][ T9787] ? entry_SYSENTER_compat+0x70/0x7f [ 101.560239][ T9787] ? do_fast_syscall_32+0xd1/0xe16 [ 101.565346][ T9787] __ia32_compat_sys_sendmsg+0x7a/0xb0 [ 101.570806][ T9787] do_fast_syscall_32+0x27b/0xe16 [ 101.575836][ T9787] entry_SYSENTER_compat+0x70/0x7f [ 101.580935][ T9787] RIP: 0023:0xf7f7be39 [ 101.585039][ T9787] Code: 1d 00 00 00 89 d3 5b 5e 5d c3 8b 04 24 c3 8b 1c 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 101.604672][ T9787] RSP: 002b:00000000ffc9a1ec EFLAGS: 00000202 ORIG_RAX: 0000000000000172 [ 101.613191][ T9787] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003e00 [ 101.621227][ T9787] RDX: 0000000000000000 RSI: 00000000080ea078 RDI: 00000000ffc9a240 [ 101.629188][ T9787] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 101.637138][ T9787] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 101.645088][ T9787] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 101.653043][ T9787] Modules linked in: [ 101.657306][ T9787] ---[ end trace 4788005230983af1 ]--- [ 101.662872][ T9787] RIP: 0010:nf_flow_table_offload_setup+0x4dc/0x6d0 [ 101.669453][ T9787] Code: bc 24 50 ff ff ff 48 ba 00 00 00 00 00 fc ff df 4d 8b ae 00 02 00 00 4d 8b a4 24 58 ff ff ff 49 8d 7f 08 48 89 f9 48 c1 e9 03 <80> 3c 11 00 0f 85 cd 01 00 00 4c 89 e2 49 89 47 08 48 b8 00 00 00 [ 101.689076][ T9787] RSP: 0018:ffffc90002167218 EFLAGS: 00010202 [ 101.695177][ T9787] RAX: ffff8880a03e3250 RBX: 1ffff9200042ce47 RCX: 00000000060e8d2f [ 101.703152][ T9787] RDX: dffffc0000000000 RSI: ffffffff867501ce RDI: 000000003074697b [ 101.711102][ T9787] RBP: ffffc90002167360 R08: ffff8880a3e94240 R09: fffff5200042ce53 [ 101.719089][ T9787] R10: fffff5200042ce52 R11: ffffc90002167296 R12: 0000000000000000 [ 101.727070][ T9787] R13: ffff8880a03e3250 R14: ffff8880a03e3050 R15: 0000000030746973 [ 101.735074][ T9787] FS: 0000000000000000(0000) GS:ffff8880ae800000(0063) knlGS:0000000009039840 [ 101.744025][ T9787] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 101.750607][ T9787] CR2: 0000000020000104 CR3: 000000008dd04000 CR4: 00000000001406f0 [ 101.758594][ T9787] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 101.766580][ T9787] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 101.774556][ T9787] Kernel panic - not syncing: Fatal exception [ 101.781953][ T9787] Kernel Offset: disabled [ 101.786288][ T9787] Rebooting in 86400 seconds..