[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 84.591961][ T26] audit: type=1800 audit(1579131811.788:25): pid=9403 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 84.612145][ T26] audit: type=1800 audit(1579131811.788:26): pid=9403 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 84.664956][ T26] audit: type=1800 audit(1579131811.798:27): pid=9403 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.15.198' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 96.791667][ T9557] kasan: CONFIG_KASAN_INLINE enabled [ 96.797207][ T9557] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 96.805608][ T9557] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 96.812560][ T9557] CPU: 1 PID: 9557 Comm: syz-executor096 Not tainted 5.5.0-rc6-syzkaller #0 [ 96.821207][ T9557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 96.831258][ T9557] RIP: 0010:nft_tunnel_get_init+0x65/0x2b0 [ 96.837052][ T9557] Code: 02 00 00 4c 8b 6b 08 4d 85 ed 0f 84 ba 01 00 00 e8 a0 8d 08 fb 49 8d 7d 04 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 df [ 96.856737][ T9557] RSP: 0018:ffffc90002127398 EFLAGS: 00010247 [ 96.862797][ T9557] RAX: dffffc0000000000 RBX: ffff88808b620008 RCX: ffffffff866720af [ 96.870767][ T9557] RDX: 0000000000000000 RSI: ffffffff866c67e0 RDI: 0000000000000004 [ 96.878735][ T9557] RBP: ffffc900021273c8 R08: ffff88809f4424c0 R09: ffffed1015d2703d [ 96.886798][ T9557] R10: ffffed1015d2703c R11: ffff8880ae9381e3 R12: ffff88809824ac18 [ 96.894876][ T9557] R13: 0000000000000000 R14: 0000000000000000 R15: ffffc90002127498 [ 96.902839][ T9557] FS: 00000000011dc880(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 96.911757][ T9557] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.918324][ T9557] CR2: 00000000200009c6 CR3: 00000000a8486000 CR4: 00000000001406e0 [ 96.926286][ T9557] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 96.934248][ T9557] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 96.942246][ T9557] Call Trace: [ 96.945617][ T9557] ? nft_tunnel_get_dump+0x210/0x210 [ 96.950892][ T9557] nf_tables_newrule+0xd96/0x2400 [ 96.955914][ T9557] ? nf_tables_abort+0x30/0x30 [ 96.960666][ T9557] ? nla_memcpy+0xb0/0xb0 [ 96.964989][ T9557] ? __nla_parse+0x43/0x60 [ 96.969400][ T9557] nfnetlink_rcv_batch+0xf42/0x17a0 [ 96.974584][ T9557] ? nf_tables_abort+0x30/0x30 [ 96.979365][ T9557] ? nfnetlink_subsys_register+0x2b0/0x2b0 [ 96.985203][ T9557] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 96.991432][ T9557] ? apparmor_capable+0x497/0x900 [ 96.996533][ T9557] ? __nla_validate_parse+0x2d0/0x1ee0 [ 97.001995][ T9557] ? cap_capable+0x205/0x270 [ 97.006581][ T9557] ? nla_memcpy+0xb0/0xb0 [ 97.010895][ T9557] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 97.017129][ T9557] ? ns_capable_common+0x93/0x100 [ 97.022144][ T9557] ? __nla_parse+0x43/0x60 [ 97.026552][ T9557] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 97.032280][ T9557] nfnetlink_rcv+0x3e7/0x460 [ 97.036908][ T9557] ? nfnetlink_rcv_batch+0x17a0/0x17a0 [ 97.042362][ T9557] ? netlink_deliver_tap+0x24a/0xbe0 [ 97.047638][ T9557] ? __kasan_check_write+0x14/0x20 [ 97.052826][ T9557] netlink_unicast+0x58c/0x7d0 [ 97.057590][ T9557] ? netlink_attachskb+0x870/0x870 [ 97.062724][ T9557] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 97.068682][ T9557] ? __check_object_size+0x3d/0x437 [ 97.073864][ T9557] netlink_sendmsg+0x91c/0xea0 [ 97.078730][ T9557] ? netlink_unicast+0x7d0/0x7d0 [ 97.083660][ T9557] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 97.089199][ T9557] ? apparmor_socket_sendmsg+0x2a/0x30 [ 97.094643][ T9557] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 97.100940][ T9557] ? security_socket_sendmsg+0x8d/0xc0 [ 97.106393][ T9557] ? netlink_unicast+0x7d0/0x7d0 [ 97.111365][ T9557] sock_sendmsg+0xd7/0x130 [ 97.115763][ T9557] ____sys_sendmsg+0x753/0x880 [ 97.120516][ T9557] ? kernel_sendmsg+0x50/0x50 [ 97.125244][ T9557] ? lockdep_init_map+0x1be/0x6d0 [ 97.130266][ T9557] ___sys_sendmsg+0x100/0x170 [ 97.134941][ T9557] ? sendmsg_copy_msghdr+0x70/0x70 [ 97.140046][ T9557] ? __kasan_check_read+0x11/0x20 [ 97.145066][ T9557] ? __lock_acquire+0x8a0/0x4a00 [ 97.149987][ T9557] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 97.156234][ T9557] ? __this_cpu_preempt_check+0x35/0x190 [ 97.161854][ T9557] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 97.168089][ T9557] ? percpu_counter_add_batch+0x13c/0x190 [ 97.173799][ T9557] ? __fd_install+0x1bc/0x640 [ 97.178478][ T9557] ? find_held_lock+0x35/0x130 [ 97.183232][ T9557] ? __fd_install+0x1bc/0x640 [ 97.187906][ T9557] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 97.194137][ T9557] ? __fget_light+0x1a9/0x230 [ 97.198792][ T9557] ? __fdget+0x1b/0x20 [ 97.202845][ T9557] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 97.209082][ T9557] __sys_sendmsg+0x105/0x1d0 [ 97.213712][ T9557] ? __sys_sendmsg_sock+0xc0/0xc0 [ 97.219011][ T9557] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 97.224475][ T9557] ? do_syscall_64+0x26/0x790 [ 97.229144][ T9557] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 97.235551][ T9557] ? do_syscall_64+0x26/0x790 [ 97.240212][ T9557] __x64_sys_sendmsg+0x78/0xb0 [ 97.246377][ T9557] do_syscall_64+0xfa/0x790 [ 97.250867][ T9557] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 97.256749][ T9557] RIP: 0033:0x4407b9 [ 97.260708][ T9557] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 97.280312][ T9557] RSP: 002b:00007ffe11777578 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.288717][ T9557] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004407b9 [ 97.296679][ T9557] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 97.304641][ T9557] RBP: 00000000006ca018 R08: 0000000000000001 R09: 00000000004002c8 [ 97.312647][ T9557] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000402040 [ 97.320658][ T9557] R13: 00000000004020d0 R14: 0000000000000000 R15: 0000000000000000 [ 97.328672][ T9557] Modules linked in: [ 97.333549][ T9557] ---[ end trace e202d5958993ae18 ]--- [ 97.339120][ T9557] RIP: 0010:nft_tunnel_get_init+0x65/0x2b0 [ 97.345075][ T9557] Code: 02 00 00 4c 8b 6b 08 4d 85 ed 0f 84 ba 01 00 00 e8 a0 8d 08 fb 49 8d 7d 04 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 df [ 97.364736][ T9557] RSP: 0018:ffffc90002127398 EFLAGS: 00010247 [ 97.370843][ T9557] RAX: dffffc0000000000 RBX: ffff88808b620008 RCX: ffffffff866720af [ 97.378818][ T9557] RDX: 0000000000000000 RSI: ffffffff866c67e0 RDI: 0000000000000004 [ 97.386844][ T9557] RBP: ffffc900021273c8 R08: ffff88809f4424c0 R09: ffffed1015d2703d [ 97.394843][ T9557] R10: ffffed1015d2703c R11: ffff8880ae9381e3 R12: ffff88809824ac18 [ 97.402867][ T9557] R13: 0000000000000000 R14: 0000000000000000 R15: ffffc90002127498 [ 97.411251][ T9557] FS: 00000000011dc880(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 97.420167][ T9557] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 97.426884][ T9557] CR2: 00000000200009c6 CR3: 00000000a8486000 CR4: 00000000001406e0 [ 97.434877][ T9557] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 97.442886][ T9557] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 97.450917][ T9557] Kernel panic - not syncing: Fatal exception [ 97.458357][ T9557] Kernel Offset: disabled [ 97.462728][ T9557] Rebooting in 86400 seconds..