[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 28.654622] kauditd_printk_skb: 7 callbacks suppressed [ 28.654635] audit: type=1800 audit(1542300739.433:29): pid=5829 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 28.679658] audit: type=1800 audit(1542300739.443:30): pid=5829 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 33.046576] sshd (5967) used greatest stack depth: 15744 bytes left Warning: Permanently added '10.128.0.111' (ECDSA) to the list of known hosts. executing program [ 39.760819] netlink: 'syz-executor154': attribute type 3 has an invalid length. [ 39.768383] netlink: 'syz-executor154': attribute type 2 has an invalid length. [ 39.776206] WARNING: CPU: 0 PID: 5983 at net/netfilter/nfnetlink_cttimeout.c:478 cttimeout_default_get+0x1df/0xb30 [ 39.786757] Kernel panic - not syncing: panic_on_warn set ... [ 39.792656] CPU: 0 PID: 5983 Comm: syz-executor154 Not tainted 4.20.0-rc2+ #238 [ 39.800080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 39.809413] Call Trace: [ 39.811984] dump_stack+0x244/0x39d [ 39.815616] ? dump_stack_print_info.cold.1+0x20/0x20 [ 39.820795] panic+0x2ad/0x55c [ 39.823969] ? add_taint.cold.5+0x16/0x16 [ 39.828107] ? __warn.cold.8+0x5/0x45 [ 39.831893] ? __warn+0xe8/0x1d0 [ 39.835240] ? cttimeout_default_get+0x1df/0xb30 [ 39.839977] __warn.cold.8+0x20/0x45 [ 39.843673] ? rcu_softirq_qs+0x20/0x20 [ 39.847633] ? cttimeout_default_get+0x1df/0xb30 [ 39.852372] report_bug+0x254/0x2d0 [ 39.855983] do_error_trap+0x11b/0x200 [ 39.859870] do_invalid_op+0x36/0x40 [ 39.863577] ? cttimeout_default_get+0x1df/0xb30 [ 39.868318] invalid_op+0x14/0x20 [ 39.871754] RIP: 0010:cttimeout_default_get+0x1df/0xb30 [ 39.877113] Code: 00 0f 87 8d 00 00 00 41 80 ff 06 0f 84 94 07 00 00 41 80 ff 11 0f 84 6c 07 00 00 41 80 ff 01 0f 84 44 07 00 00 e8 91 f1 20 fb <0f> 0b 41 bd a1 ff ff ff eb 06 41 bd a1 ff ff ff e8 7c f1 20 fb 48 [ 39.896013] RSP: 0018:ffff8881c1e0f260 EFLAGS: 00010293 [ 39.901392] RAX: ffff8881c2e10300 RBX: ffffffff88bf58e0 RCX: ffffffff865e961c [ 39.908647] RDX: 0000000000000000 RSI: ffffffff865e964f RDI: 0000000000000001 [ 39.915899] RBP: ffff8881c1e0f370 R08: ffff8881c2e10300 R09: ffffed103b5c5b67 [ 39.923155] R10: 0000000000000002 R11: ffff8881dae2db3b R12: 0000000000000088 [ 39.930424] R13: ffff8881c39f2340 R14: 0000000000000017 R15: 0000000000000088 [ 39.937688] ? cttimeout_default_get+0x1ac/0xb30 [ 39.942472] ? cttimeout_default_get+0x1df/0xb30 [ 39.947251] ? lock_downgrade+0x900/0x900 [ 39.951385] ? check_preemption_disabled+0x48/0x280 [ 39.956384] ? cttimeout_new_timeout+0x8c0/0x8c0 [ 39.961152] ? __lock_is_held+0xb5/0x140 [ 39.965215] ? cttimeout_new_timeout+0x8c0/0x8c0 [ 39.969956] nfnetlink_rcv_msg+0xdd3/0x10c0 [ 39.974265] ? nfnetlink_bind+0x3b0/0x3b0 [ 39.978400] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 39.983920] ? refcount_sub_and_test_checked+0x203/0x310 [ 39.989374] ? refcount_inc_not_zero_checked+0x2f0/0x2f0 [ 39.994810] ? netlink_deliver_tap+0x32e/0xf80 [ 39.999382] ? lock_downgrade+0x900/0x900 [ 40.003553] ? check_preemption_disabled+0x48/0x280 [ 40.008558] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 40.014079] ? apparmor_capable+0x355/0x6c0 [ 40.018400] ? rcu_softirq_qs+0x20/0x20 [ 40.022355] ? apparmor_cred_transfer+0x590/0x590 [ 40.027180] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 40.032704] netlink_rcv_skb+0x172/0x440 [ 40.036745] ? nfnetlink_bind+0x3b0/0x3b0 [ 40.040878] ? netlink_ack+0xb80/0xb80 [ 40.044765] ? __netlink_ns_capable+0x100/0x130 [ 40.049423] nfnetlink_rcv+0x1c0/0x4d0 [ 40.053297] ? nfnetlink_rcv_batch+0x19b0/0x19b0 [ 40.058060] ? kasan_check_write+0x14/0x20 [ 40.062279] netlink_unicast+0x5a5/0x760 [ 40.066323] ? netlink_attachskb+0x9a0/0x9a0 [ 40.070716] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 40.076254] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 40.081255] netlink_sendmsg+0xa18/0xfc0 [ 40.085299] ? move_addr_to_kernel.part.18+0xc6/0x100 [ 40.090487] ? netlink_unicast+0x760/0x760 [ 40.094701] ? aa_sock_msg_perm.isra.14+0xba/0x160 [ 40.099616] ? apparmor_socket_sendmsg+0x29/0x30 [ 40.104370] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 40.109898] ? security_socket_sendmsg+0x94/0xc0 [ 40.114632] ? netlink_unicast+0x760/0x760 [ 40.118851] sock_sendmsg+0xd5/0x120 [ 40.122570] ___sys_sendmsg+0x7fd/0x930 [ 40.126533] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 40.131367] ? copy_msghdr_from_user+0x580/0x580 [ 40.136105] ? __fd_install+0x2b5/0x8f0 [ 40.140077] ? lock_downgrade+0x900/0x900 [ 40.144206] ? zap_class+0x640/0x640 [ 40.147907] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 40.153426] ? __fget_light+0x2e9/0x430 [ 40.157403] ? fget_raw+0x20/0x20 [ 40.160847] ? __do_page_fault+0x620/0xe60 [ 40.165064] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 40.170582] ? sockfd_lookup_light+0xc5/0x160 [ 40.175063] __sys_sendmsg+0x11d/0x280 [ 40.178933] ? __ia32_sys_shutdown+0x80/0x80 [ 40.183342] ? up_read+0x225/0x2c0 [ 40.186874] ? do_fast_syscall_32+0x150/0xfb2 [ 40.191367] ? do_fast_syscall_32+0x150/0xfb2 [ 40.195849] ? trace_hardirqs_off_caller+0x310/0x310 [ 40.200951] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 40.206469] ? __do_page_fault+0x491/0xe60 [ 40.210687] __ia32_compat_sys_sendmsg+0x7a/0xb0 [ 40.215426] do_fast_syscall_32+0x34d/0xfb2 [ 40.219750] ? do_int80_syscall_32+0x890/0x890 [ 40.224314] ? entry_SYSENTER_compat+0x68/0x7f [ 40.228891] ? trace_hardirqs_off_caller+0xbb/0x310 [ 40.233885] ? syscall_return_slowpath+0x5e0/0x5e0 [ 40.238810] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 40.243654] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 40.248492] ? trace_hardirqs_on_caller+0x310/0x310 [ 40.253488] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 40.258499] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 40.264032] ? prepare_exit_to_usermode+0x291/0x3b0 [ 40.269043] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 40.273873] entry_SYSENTER_compat+0x70/0x7f [ 40.278260] RIP: 0023:0xf7f7aa29 [ 40.281640] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 40.300546] RSP: 002b:00000000ff8d212c EFLAGS: 00000213 ORIG_RAX: 0000000000000172 [ 40.308242] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020dddfc8 [ 40.315490] RDX: 0000000000000000 RSI: 00000000080ea078 RDI: 00000000ff8d2180 [ 40.322741] RBP: 0000000000001000 R08: 0000000000000000 R09: 0000000000000000 [ 40.329993] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 40.337246] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 40.345569] Kernel Offset: disabled [ 40.349235] Rebooting in 86400 seconds..