[ 95.555035][ T28] audit: type=1800 audit(1580113323.128:27): pid=9829 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 95.593919][ T28] audit: type=1800 audit(1580113323.148:28): pid=9829 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 96.411418][ T28] audit: type=1800 audit(1580113324.038:29): pid=9829 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 96.431477][ T28] audit: type=1800 audit(1580113324.038:30): pid=9829 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.30' (ECDSA) to the list of known hosts. executing program executing program syzkaller login: [ 105.487451][ T9983] netlink: 40803 bytes leftover after parsing attributes in process `syz-executor953'. [ 105.499916][ T9983] netlink: 40543 bytes leftover after parsing attributes in process `syz-executor953'. [ 105.518304][ T9986] netlink: 40803 bytes leftover after parsing attributes in process `syz-executor953'. executing program executing program [ 105.530678][ T9986] netlink: 40543 bytes leftover after parsing attributes in process `syz-executor953'. [ 105.546237][ T9989] netlink: 40803 bytes leftover after parsing attributes in process `syz-executor953'. [ 105.557976][ T9989] netlink: 40543 bytes leftover after parsing attributes in process `syz-executor953'. [ 105.574087][ T9992] netlink: 40803 bytes leftover after parsing attributes in process `syz-executor953'. executing program executing program executing program executing program executing program executing program executing program [ 105.585631][ T9992] netlink: 40543 bytes leftover after parsing attributes in process `syz-executor953'. [ 105.602626][ T9995] netlink: 40803 bytes leftover after parsing attributes in process `syz-executor953'. [ 105.613937][ T9995] netlink: 40543 bytes leftover after parsing attributes in process `syz-executor953'. executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 105.778805][T10063] ------------[ cut here ]------------ [ 105.784445][T10063] WARNING: CPU: 1 PID: 10063 at net/xfrm/xfrm_policy.c:1543 xfrm_policy_insert_list+0x3b7/0xd10 [ 105.795169][T10063] Kernel panic - not syncing: panic_on_warn set ... [ 105.801759][T10063] CPU: 1 PID: 10063 Comm: syz-executor953 Not tainted 5.5.0-rc7-syzkaller #0 [ 105.810509][T10063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 105.820566][T10063] Call Trace: [ 105.823870][T10063] dump_stack+0x197/0x210 [ 105.828274][T10063] ? xfrm_policy_insert_list+0x2f0/0xd10 [ 105.833998][T10063] panic+0x2e3/0x75c [ 105.837915][T10063] ? add_taint.cold+0x16/0x16 [ 105.842598][T10063] ? printk+0xba/0xed [ 105.846577][T10063] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 105.852242][T10063] ? __warn.cold+0x14/0x3e [ 105.856772][T10063] ? __warn+0xd9/0x1cf [ 105.860983][T10063] ? xfrm_policy_insert_list+0x3b7/0xd10 [ 105.866762][T10063] __warn.cold+0x2f/0x3e [ 105.871072][T10063] ? report_bug.cold+0x63/0xb2 [ 105.875841][T10063] ? xfrm_policy_insert_list+0x3b7/0xd10 [ 105.881607][T10063] report_bug+0x289/0x300 [ 105.885943][T10063] do_error_trap+0x11b/0x200 [ 105.890554][T10063] do_invalid_op+0x37/0x50 [ 105.895095][T10063] ? xfrm_policy_insert_list+0x3b7/0xd10 [ 105.900735][T10063] invalid_op+0x23/0x30 [ 105.904920][T10063] RIP: 0010:xfrm_policy_insert_list+0x3b7/0xd10 [ 105.911231][T10063] Code: 14 20 48 89 f8 83 e0 07 83 c0 03 38 d0 0f 8c cf fd ff ff 84 d2 0f 84 c7 fd ff ff e8 e3 1a f9 fa e9 bd fd ff ff e8 99 56 bb fa <0f> 0b 48 8b 45 c0 0f b6 10 48 8b 45 c8 83 e0 07 83 c0 03 38 d0 7c [ 105.931079][T10063] RSP: 0018:ffffc90002117508 EFLAGS: 00010293 [ 105.937237][T10063] RAX: ffff888099c6e500 RBX: ffff88809b5ec000 RCX: ffffffff86b9a35f [ 105.945389][T10063] RDX: 0000000000000000 RSI: ffffffff86b9a0c7 RDI: ffff88809b5ec220 [ 105.953426][T10063] RBP: ffffc90002117580 R08: ffff888099c6e500 R09: ffff888099c6ed90 [ 105.962004][T10063] R10: fffff52000422eb4 R11: ffffffff8a7b3687 R12: dffffc0000000000 [ 105.970518][T10063] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 105.978600][T10063] ? xfrm_policy_insert_list+0x64f/0xd10 [ 105.984363][T10063] ? xfrm_policy_insert_list+0x3b7/0xd10 [ 105.990133][T10063] ? xfrm_policy_insert_list+0x3b7/0xd10 [ 105.995818][T10063] xfrm_policy_inexact_insert+0xef/0xba0 [ 106.001576][T10063] ? rwlock_bug.part.0+0x90/0x90 [ 106.007319][T10063] ? lock_acquire+0x190/0x410 [ 106.012005][T10063] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 106.017926][T10063] ? __sanitizer_cov_trace_cmp1+0x17/0x20 [ 106.023677][T10063] ? policy_hash_bysel+0x129/0xce0 [ 106.028806][T10063] xfrm_policy_insert+0x597/0x7f0 [ 106.033832][T10063] xfrm_add_policy+0x28f/0x580 [ 106.038826][T10063] ? xfrm_policy_construct+0x680/0x680 [ 106.044295][T10063] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 106.050531][T10063] ? ns_capable_common+0x93/0x100 [ 106.055566][T10063] ? __nla_parse+0x43/0x60 [ 106.059973][T10063] ? xfrm_policy_construct+0x680/0x680 [ 106.065575][T10063] xfrm_user_rcv_msg+0x459/0x770 [ 106.070532][T10063] ? copy_to_user_state_extra+0xdf0/0xdf0 [ 106.076328][T10063] ? __mutex_lock+0x458/0x13c0 [ 106.081120][T10063] ? find_held_lock+0x35/0x130 [ 106.086028][T10063] ? xfrm_netlink_rcv+0x61/0x90 [ 106.090984][T10063] netlink_rcv_skb+0x177/0x450 [ 106.095748][T10063] ? copy_to_user_state_extra+0xdf0/0xdf0 [ 106.101477][T10063] ? netlink_ack+0xb50/0xb50 [ 106.106249][T10063] xfrm_netlink_rcv+0x70/0x90 [ 106.111060][T10063] netlink_unicast+0x58c/0x7d0 [ 106.115847][T10063] ? netlink_attachskb+0x870/0x870 [ 106.120965][T10063] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 106.127070][T10063] ? __check_object_size+0x3d/0x437 [ 106.132418][T10063] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 106.138143][T10063] netlink_sendmsg+0x91c/0xea0 [ 106.142940][T10063] ? netlink_unicast+0x7d0/0x7d0 [ 106.147887][T10063] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 106.153562][T10063] ? apparmor_socket_sendmsg+0x2a/0x30 [ 106.159239][T10063] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 106.165519][T10063] ? security_socket_sendmsg+0x8d/0xc0 [ 106.170990][T10063] ? netlink_unicast+0x7d0/0x7d0 [ 106.175945][T10063] sock_sendmsg+0xd7/0x130 [ 106.180367][T10063] __sys_sendto+0x262/0x380 [ 106.185454][T10063] ? __ia32_sys_getpeername+0xb0/0xb0 [ 106.190985][T10063] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 106.197134][T10063] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 106.202888][T10063] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 106.208884][T10063] ? __x64_sys_futex+0x404/0x590 [ 106.213975][T10063] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 106.219707][T10063] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 106.225273][T10063] ? do_syscall_64+0x26/0x790 [ 106.229952][T10063] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 106.236097][T10063] __x64_sys_sendto+0xe1/0x1a0 [ 106.240872][T10063] do_syscall_64+0xfa/0x790 [ 106.245390][T10063] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 106.251389][T10063] RIP: 0033:0x446ad9 [ 106.255280][T10063] Code: e8 5c b3 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 0b 08 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 106.275163][T10063] RSP: 002b:00007feef5ce7d88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 106.283695][T10063] RAX: ffffffffffffffda RBX: 00000000006dbc48 RCX: 0000000000446ad9 [ 106.291787][T10063] RDX: 000000000000ff3b RSI: 0000000020000000 RDI: 0000000000000008 [ 106.299760][T10063] RBP: 00000000006dbc40 R08: 0000000000000000 R09: 00000000000002e2 [ 106.307867][T10063] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc4c [ 106.315948][T10063] R13: 96a714ca4ded7b70 R14: 985704ddcbc5fd89 R15: 0d1d00190000a01b [ 106.326052][T10063] Kernel Offset: disabled [ 106.330574][T10063] Rebooting in 86400 seconds..