[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 56.827261][ T26] audit: type=1800 audit(1570406667.955:25): pid=8568 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 56.870826][ T26] audit: type=1800 audit(1570406667.955:26): pid=8568 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 56.912913][ T26] audit: type=1800 audit(1570406667.955:27): pid=8568 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.6' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 67.289339][ T8721] netlink: 20 bytes leftover after parsing attributes in process `syz-executor671'. [ 67.299312][ T8721] kasan: CONFIG_KASAN_INLINE enabled [ 67.304846][ T8721] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 67.313000][ T8721] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 67.319980][ T8721] CPU: 0 PID: 8721 Comm: syz-executor671 Not tainted 5.4.0-rc1+ #0 [ 67.327858][ T8721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.337910][ T8721] RIP: 0010:tipc_nl_publ_dump+0x1c3/0xd60 [ 67.343625][ T8721] Code: 80 3c 02 00 0f 85 9d 09 00 00 48 8b 85 f0 fe ff ff 4c 8b 70 20 48 b8 00 00 00 00 00 fc ff df 49 8d 7e 10 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 69 09 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b [ 67.363406][ T8721] RSP: 0018:ffff88808e2c6eb8 EFLAGS: 00010202 [ 67.369468][ T8721] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff870875af [ 67.377431][ T8721] RDX: 0000000000000002 RSI: ffffffff870875bd RDI: 0000000000000010 [ 67.385564][ T8721] RBP: ffff88808e2c7040 R08: ffff888093c7a300 R09: ffffed1015d06b75 [ 67.393518][ T8721] R10: ffffed1015d06b74 R11: ffff8880ae835ba3 R12: ffffffff89986140 [ 67.401469][ T8721] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880a97b28c0 [ 67.409427][ T8721] FS: 0000000002434880(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 67.418346][ T8721] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 67.424906][ T8721] CR2: 000000000043e990 CR3: 0000000093db1000 CR4: 00000000001406f0 [ 67.432968][ T8721] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 67.441101][ T8721] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 67.449050][ T8721] Call Trace: [ 67.452335][ T8721] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 67.458564][ T8721] ? tipc_nl_sk_dump+0x30/0x30 [ 67.463306][ T8721] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 67.469262][ T8721] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 67.475047][ T8721] ? __kmalloc+0x608/0x770 [ 67.479443][ T8721] ? __tipc_nl_compat_dumpit.isra.0+0x1fe/0xa80 [ 67.485668][ T8721] __tipc_nl_compat_dumpit.isra.0+0x274/0xa80 [ 67.491715][ T8721] ? tipc_nl_compat_link_stat_dump+0x2100/0x2100 [ 67.498034][ T8721] ? __nla_put+0x37/0x40 [ 67.502255][ T8721] ? nla_put+0x110/0x150 [ 67.506486][ T8721] tipc_nl_compat_sk_dump+0x54d/0x970 [ 67.511852][ T8721] ? __tipc_nl_compat_dumpit.isra.0+0xa80/0xa80 [ 67.518069][ T8721] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 67.523950][ T8721] ? tipc_nl_sk_dump+0x30/0x30 [ 67.528707][ T8721] ? tipc_tlv_sprintf+0x2f0/0x2f0 [ 67.533715][ T8721] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 67.539938][ T8721] ? __nla_validate_parse+0x2d0/0x1ee0 [ 67.545373][ T8721] ? __sanitizer_cov_trace_cmp8+0x8/0x20 [ 67.551962][ T8721] ? __nla_parse+0x43/0x60 [ 67.556370][ T8721] __tipc_nl_compat_dumpit.isra.0+0x3fb/0xa80 [ 67.562415][ T8721] ? tipc_nl_compat_link_stat_dump+0x2100/0x2100 [ 67.568721][ T8721] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 67.574510][ T8721] ? ___ratelimit+0x60/0x595 [ 67.579099][ T8721] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 67.584795][ T8721] ? skb_put+0x177/0x1d0 [ 67.589013][ T8721] tipc_nl_compat_dumpit+0x24c/0x510 [ 67.594286][ T8721] tipc_nl_compat_recv+0x5a0/0xae0 [ 67.599375][ T8721] ? tipc_nl_compat_doit+0x5e0/0x5e0 [ 67.604644][ T8721] ? tipc_dump_start+0x90/0x90 [ 67.609388][ T8721] ? __tipc_nl_compat_dumpit.isra.0+0xa80/0xa80 [ 67.616837][ T8721] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 67.623053][ T8721] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1c4/0x3a0 [ 67.629967][ T8721] genl_rcv_msg+0x678/0x1000 [ 67.634537][ T8721] ? genl_family_rcv_msg_attrs_parse.isra.0+0x3a0/0x3a0 [ 67.641447][ T8721] ? __kasan_check_read+0x11/0x20 [ 67.646466][ T8721] ? __lock_acquire+0x8a0/0x4a00 [ 67.651381][ T8721] ? find_held_lock+0x35/0x130 [ 67.656126][ T8721] netlink_rcv_skb+0x177/0x450 [ 67.660867][ T8721] ? genl_family_rcv_msg_attrs_parse.isra.0+0x3a0/0x3a0 [ 67.667786][ T8721] ? netlink_ack+0xb50/0xb50 [ 67.672354][ T8721] ? __kasan_check_write+0x14/0x20 [ 67.677441][ T8721] ? netlink_deliver_tap+0x254/0xbf0 [ 67.682721][ T8721] genl_rcv+0x29/0x40 [ 67.686689][ T8721] netlink_unicast+0x531/0x710 [ 67.691428][ T8721] ? netlink_attachskb+0x7c0/0x7c0 [ 67.696517][ T8721] ? _copy_from_iter_full+0x25d/0x8c0 [ 67.701866][ T8721] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 67.707650][ T8721] ? __check_object_size+0x3d/0x437 [ 67.712841][ T8721] netlink_sendmsg+0x8a5/0xd60 [ 67.717578][ T8721] ? netlink_unicast+0x710/0x710 [ 67.722503][ T8721] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 67.728087][ T8721] ? apparmor_socket_sendmsg+0x2a/0x30 [ 67.733538][ T8721] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 67.739766][ T8721] ? security_socket_sendmsg+0x8d/0xc0 [ 67.745209][ T8721] ? netlink_unicast+0x710/0x710 [ 67.750130][ T8721] sock_sendmsg+0xd7/0x130 [ 67.754525][ T8721] ___sys_sendmsg+0x803/0x920 [ 67.759183][ T8721] ? copy_msghdr_from_user+0x440/0x440 [ 67.764632][ T8721] ? lock_downgrade+0x920/0x920 [ 67.769469][ T8721] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 67.775250][ T8721] ? lockdep_hardirqs_on+0x421/0x5e0 [ 67.780513][ T8721] ? __kasan_check_read+0x11/0x20 [ 67.785511][ T8721] ? mark_lock+0xc2/0x1220 [ 67.789901][ T8721] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 67.795683][ T8721] ? __kasan_check_read+0x11/0x20 [ 67.800686][ T8721] ? __lock_acquire+0x16f2/0x4a00 [ 67.805687][ T8721] ? debug_object_deactivate+0x320/0x320 [ 67.811300][ T8721] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 67.817439][ T8721] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 67.823664][ T8721] ? __fget_light+0x1a9/0x230 [ 67.828326][ T8721] ? __fdget+0x1b/0x20 [ 67.832368][ T8721] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 67.838584][ T8721] __sys_sendmsg+0x105/0x1d0 [ 67.843149][ T8721] ? __sys_sendmsg_sock+0xd0/0xd0 [ 67.848161][ T8721] ? lockdep_hardirqs_on+0x421/0x5e0 [ 67.853425][ T8721] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 67.858865][ T8721] ? do_syscall_64+0x26/0x760 [ 67.863779][ T8721] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 67.869821][ T8721] ? do_syscall_64+0x26/0x760 [ 67.874473][ T8721] __x64_sys_sendmsg+0x78/0xb0 [ 67.879219][ T8721] do_syscall_64+0xfa/0x760 [ 67.883699][ T8721] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 67.889567][ T8721] RIP: 0033:0x4441b9 [ 67.893526][ T8721] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 1b d8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 67.913116][ T8721] RSP: 002b:00007ffd2b43b478 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 67.921517][ T8721] RAX: ffffffffffffffda RBX: 00000000004002e0 RCX: 00000000004441b9 [ 67.929470][ T8721] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003 [ 67.937416][ T8721] RBP: 00000000006ce018 R08: 0000000000000000 R09: 00000000004002e0 [ 67.945365][ T8721] R10: 0000000000001900 R11: 0000000000000246 R12: 0000000000401e60 [ 67.953310][ T8721] R13: 0000000000401ef0 R14: 0000000000000000 R15: 0000000000000000 [ 67.961258][ T8721] Modules linked in: [ 67.965919][ T8721] ---[ end trace 854b542c9f3952ec ]--- [ 67.971527][ T8721] RIP: 0010:tipc_nl_publ_dump+0x1c3/0xd60 [ 67.977236][ T8721] Code: 80 3c 02 00 0f 85 9d 09 00 00 48 8b 85 f0 fe ff ff 4c 8b 70 20 48 b8 00 00 00 00 00 fc ff df 49 8d 7e 10 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 69 09 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b [ 67.996933][ T8721] RSP: 0018:ffff88808e2c6eb8 EFLAGS: 00010202 [ 68.003076][ T8721] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff870875af [ 68.011101][ T8721] RDX: 0000000000000002 RSI: ffffffff870875bd RDI: 0000000000000010 [ 68.019069][ T8721] RBP: ffff88808e2c7040 R08: ffff888093c7a300 R09: ffffed1015d06b75 [ 68.027210][ T8721] R10: ffffed1015d06b74 R11: ffff8880ae835ba3 R12: ffffffff89986140 [ 68.035207][ T8721] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880a97b28c0 [ 68.043192][ T8721] FS: 0000000002434880(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 68.052298][ T8721] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.058860][ T8721] CR2: 000000000043e990 CR3: 0000000093db1000 CR4: 00000000001406f0 [ 68.066865][ T8721] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 68.074842][ T8721] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 68.082819][ T8721] Kernel panic - not syncing: Fatal exception [ 68.090138][ T8721] Kernel Offset: disabled [ 68.094468][ T8721] Rebooting in 86400 seconds..