[ 34.283012] audit: type=1800 audit(1546837315.867:27): pid=7511 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 34.303098] audit: type=1800 audit(1546837315.867:28): pid=7511 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 34.958589] audit: type=1800 audit(1546837316.597:29): pid=7511 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 34.982356] audit: type=1800 audit(1546837316.597:30): pid=7511 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.55' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 45.042767] ------------[ cut here ]------------ [ 45.047543] kernel BUG at net/core/skbuff.c:1459! [ 45.052458] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 45.057816] CPU: 1 PID: 7666 Comm: syz-executor930 Not tainted 4.20.0+ #3 [ 45.064734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 45.074075] RIP: 0010:pskb_expand_head+0xbb0/0x1080 [ 45.079103] Code: 8b b5 e0 fe ff ff 48 85 f6 0f 84 4d fe ff ff e8 d6 9d 65 fb 4d 8d 74 24 ff e9 3e fe ff ff e8 c7 9d 65 fb 0f 0b e8 c0 9d 65 fb <0f> 0b e8 b9 9d 65 fb 81 8d 10 ff ff ff 00 20 00 00 e9 0f f6 ff ff [ 45.097987] RSP: 0018:ffff88808ea775e0 EFLAGS: 00010293 [ 45.103338] RAX: ffff88809801c4c0 RBX: ffff8880a90ac440 RCX: ffffffff861bfe18 [ 45.110593] RDX: 0000000000000000 RSI: ffffffff861c0850 RDI: 0000000000000005 [ 45.117851] RBP: ffff88808ea77720 R08: ffff88809801c4c0 R09: ffffed10152158a3 [ 45.125100] R10: ffffed10152158a2 R11: ffff8880a90ac517 R12: ffff8880a90ac4fc [ 45.132370] R13: 000000000000003f R14: dffffc0000000000 R15: 0000000000000000 [ 45.139632] FS: 00007f1feb331700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 45.147838] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.153713] CR2: 0000000020000300 CR3: 000000008fc1a000 CR4: 00000000001406e0 [ 45.160966] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 45.168222] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 45.175472] Call Trace: [ 45.178047] ? find_held_lock+0x35/0x120 [ 45.182092] ? __skb_try_recv_datagram+0x332/0x5b0 [ 45.187009] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 45.192094] ? skb_release_data+0x970/0x970 [ 45.196411] ? lockdep_hardirqs_on+0x415/0x5d0 [ 45.200983] ? trace_hardirqs_on+0xbd/0x310 [ 45.205301] ? kasan_check_read+0x11/0x20 [ 45.209433] ? __skb_try_recv_datagram+0x332/0x5b0 [ 45.214460] ? trace_hardirqs_off_caller+0x300/0x300 [ 45.219560] ? do_raw_spin_trylock+0x270/0x270 [ 45.224121] ? zerocopy_sg_from_iter+0x120/0x120 [ 45.228859] __pskb_pull_tail+0x13a/0x1740 [ 45.233077] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 45.238186] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 45.243709] ? __skb_try_recv_datagram+0x448/0x5b0 [ 45.248634] ? proto_init_net+0x61/0x80 [ 45.252594] ? pskb_carve+0x1e20/0x1e20 [ 45.256548] ? __skb_try_recv_from_queue+0x920/0x920 [ 45.261633] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 45.267171] ? copy_page_to_iter+0x59a/0x1000 [ 45.271680] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 45.277313] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 45.282835] ip6_datagram_recv_specific_ctl+0x1751/0x1bd0 [ 45.288452] ? rcu_lockdep_current_cpu_online+0x1aa/0x220 [ 45.293973] ? ip6_datagram_recv_common_ctl+0x5e0/0x5e0 [ 45.299330] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 45.304866] ? skb_copy_datagram_iter+0x25c/0xbe0 [ 45.309690] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 45.315220] ? ip6_datagram_recv_common_ctl+0x37b/0x5e0 [ 45.320566] ? ipv6_recv_rxpmtu+0x920/0x920 [ 45.324878] ? __sk_queue_drop_skb+0x1f0/0x1f0 [ 45.329441] ip6_datagram_recv_ctl+0x34/0x40 [ 45.333829] rawv6_recvmsg+0xc43/0xe90 [ 45.337701] ? aa_sk_perm+0x234/0x8e0 [ 45.341484] ? rawv6_rcv_skb+0x470/0x470 [ 45.345529] ? __fget_light+0x2db/0x420 [ 45.349488] sock_common_recvmsg+0x13f/0x2b0 [ 45.353880] ? compat_sock_common_getsockopt+0x150/0x150 [ 45.359312] ? apparmor_socket_recvmsg+0x2a/0x30 [ 45.364175] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 45.369702] ? security_socket_recvmsg+0x9b/0xd0 [ 45.374436] ? compat_sock_common_getsockopt+0x150/0x150 [ 45.379867] sock_recvmsg+0xd0/0x110 [ 45.383562] __sys_recvfrom+0x30b/0x5d0 [ 45.387519] ? __ia32_sys_send+0x100/0x100 [ 45.391735] ? __sys_sendmsg+0x1a3/0x270 [ 45.395778] ? do_syscall_64+0x8c/0x800 [ 45.399741] ? do_syscall_64+0x8c/0x800 [ 45.403695] ? lockdep_hardirqs_on+0x415/0x5d0 [ 45.408256] ? trace_hardirqs_on+0xbd/0x310 [ 45.412559] ? do_futex+0x2910/0x2910 [ 45.416341] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 45.421684] ? trace_hardirqs_off_caller+0x300/0x300 [ 45.426773] __x64_sys_recvfrom+0xe1/0x1a0 [ 45.430992] do_syscall_64+0x1a3/0x800 [ 45.434862] ? syscall_return_slowpath+0x5f0/0x5f0 [ 45.439773] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 45.444769] ? __switch_to_asm+0x34/0x70 [ 45.448814] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 45.453641] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 45.458809] RIP: 0033:0x445809 [ 45.461982] Code: e8 6c b6 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b 12 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 45.480863] RSP: 002b:00007f1feb330da8 EFLAGS: 00000216 ORIG_RAX: 000000000000002d [ 45.488551] RAX: ffffffffffffffda RBX: 00000000006dac38 RCX: 0000000000445809 [ 45.495799] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 45.503046] RBP: 00000000006dac30 R08: 0000000000000000 R09: 0000000000000000 [ 45.510304] R10: 0000000000000002 R11: 0000000000000216 R12: 00000000006dac3c [ 45.517555] R13: 00007fffe1f7ec0f R14: 00007f1feb3319c0 R15: 00000000006dad2c [ 45.524806] Modules linked in: [ 45.528387] ---[ end trace 7376c540a597e39d ]--- [ 45.533144] RIP: 0010:pskb_expand_head+0xbb0/0x1080 [ 45.538203] Code: 8b b5 e0 fe ff ff 48 85 f6 0f 84 4d fe ff ff e8 d6 9d 65 fb 4d 8d 74 24 ff e9 3e fe ff ff e8 c7 9d 65 fb 0f 0b e8 c0 9d 65 fb <0f> 0b e8 b9 9d 65 fb 81 8d 10 ff ff ff 00 20 00 00 e9 0f f6 ff ff [ 45.557184] RSP: 0018:ffff88808ea775e0 EFLAGS: 00010293 [ 45.562524] RAX: ffff88809801c4c0 RBX: ffff8880a90ac440 RCX: ffffffff861bfe18 [ 45.569802] RDX: 0000000000000000 RSI: ffffffff861c0850 RDI: 0000000000000005 [ 45.577193] RBP: ffff88808ea77720 R08: ffff88809801c4c0 R09: ffffed10152158a3 [ 45.584455] R10: ffffed10152158a2 R11: ffff8880a90ac517 R12: ffff8880a90ac4fc [ 45.591731] R13: 000000000000003f R14: dffffc0000000000 R15: 0000000000000000 [ 45.599009] FS: 00007f1feb331700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 45.607243] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.613118] CR2: 0000000020000300 CR3: 000000008fc1a000 CR4: 00000000001406e0 [ 45.620403] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 45.627679] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 45.634956] Kernel panic - not syncing: Fatal exception [ 45.641367] Kernel Offset: disabled [ 45.644990] Rebooting in 86400 seconds..