[ 88.214735][ T27] audit: type=1800 audit(1579664832.582:27): pid=9947 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 88.254492][ T27] audit: type=1800 audit(1579664832.612:28): pid=9947 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 89.207830][ T27] audit: type=1800 audit(1579664833.652:29): pid=9947 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 89.229508][ T27] audit: type=1800 audit(1579664833.652:30): pid=9947 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.210' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 98.894505][T10103] netlink: 96 bytes leftover after parsing attributes in process `syz-executor622'. executing program [ 99.186747][T10106] netlink: 96 bytes leftover after parsing attributes in process `syz-executor622'. [ 99.197809][T10106] ------------[ cut here ]------------ [ 99.203558][T10106] WARNING: CPU: 0 PID: 10106 at net/sched/sch_cbq.c:1437 cbq_destroy_class+0x11a/0x150 [ 99.213396][T10106] Kernel panic - not syncing: panic_on_warn set ... [ 99.220087][T10106] CPU: 0 PID: 10106 Comm: syz-executor622 Not tainted 5.5.0-rc7-syzkaller #0 [ 99.229031][T10106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 99.239279][T10106] Call Trace: [ 99.242861][T10106] dump_stack+0x197/0x210 [ 99.247211][T10106] ? cbq_destroy_class+0x80/0x150 [ 99.253035][T10106] panic+0x2e3/0x75c [ 99.257023][T10106] ? add_taint.cold+0x16/0x16 [ 99.261768][T10106] ? printk+0xba/0xed [ 99.265819][T10106] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 99.271290][T10106] ? __warn.cold+0x14/0x3e [ 99.275716][T10106] ? __warn+0xd9/0x1cf [ 99.279802][T10106] ? cbq_destroy_class+0x11a/0x150 [ 99.284937][T10106] __warn.cold+0x2f/0x3e [ 99.289193][T10106] ? report_bug.cold+0x63/0xb2 [ 99.294135][T10106] ? cbq_destroy_class+0x11a/0x150 [ 99.299382][T10106] report_bug+0x289/0x300 [ 99.303715][T10106] do_error_trap+0x11b/0x200 [ 99.308307][T10106] do_invalid_op+0x37/0x50 [ 99.312842][T10106] ? cbq_destroy_class+0x11a/0x150 [ 99.317966][T10106] invalid_op+0x23/0x30 [ 99.322323][T10106] RIP: 0010:cbq_destroy_class+0x11a/0x150 [ 99.328044][T10106] Code: 00 00 e8 d9 57 da ff 49 39 dc 74 0d e8 9f 98 30 fb 4c 89 e7 e8 67 09 6e fb e8 92 98 30 fb 5b 41 5c 41 5d 5d c3 e8 86 98 30 fb <0f> 0b e9 37 ff ff ff e8 9a 58 6e fb e9 12 ff ff ff e8 b0 58 6e fb [ 99.348150][T10106] RSP: 0018:ffffc9000640f0e0 EFLAGS: 00010293 [ 99.354228][T10106] RAX: ffff88808b4ae3c0 RBX: ffff88809890c000 RCX: ffffffff86445bcf [ 99.362406][T10106] RDX: 0000000000000000 RSI: ffffffff86445c9a RDI: 0000000000000005 [ 99.370379][T10106] RBP: ffffc9000640f0f8 R08: ffff88808b4ae3c0 R09: fffffbfff165e7a0 [ 99.378631][T10106] R10: fffffbfff165e79f R11: ffffffff8b2f3cff R12: ffff88809890c320 [ 99.386936][T10106] R13: 0000000000000001 R14: 0000000000000000 R15: ffff88809890c320 [ 99.395116][T10106] ? cbq_destroy_class+0x4f/0x150 [ 99.400170][T10106] ? cbq_destroy_class+0x11a/0x150 [ 99.405289][T10106] cbq_destroy+0x208/0x2c0 [ 99.409712][T10106] ? cbq_walk+0x320/0x320 [ 99.414156][T10106] qdisc_destroy+0x11f/0x630 [ 99.419123][T10106] qdisc_put+0xdb/0x100 [ 99.423356][T10106] notify_and_destroy+0xa2/0xb0 [ 99.428377][T10106] qdisc_graft+0xd42/0x1210 [ 99.433259][T10106] ? tc_dump_tclass+0x4e0/0x4e0 [ 99.438492][T10106] ? tc_get_qdisc+0xc10/0xc10 [ 99.443178][T10106] tc_modify_qdisc+0xcbd/0x1cd0 [ 99.448051][T10106] ? qdisc_create+0x1210/0x1210 [ 99.453036][T10106] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 99.459290][T10106] ? qdisc_create+0x1210/0x1210 [ 99.464150][T10106] rtnetlink_rcv_msg+0x45e/0xaf0 [ 99.469093][T10106] ? rtnl_bridge_getlink+0x910/0x910 [ 99.474401][T10106] ? lock_downgrade+0x920/0x920 [ 99.479280][T10106] ? netlink_deliver_tap+0x228/0xbe0 [ 99.484713][T10106] ? find_held_lock+0x35/0x130 [ 99.489622][T10106] netlink_rcv_skb+0x177/0x450 [ 99.494525][T10106] ? rtnl_bridge_getlink+0x910/0x910 [ 99.499999][T10106] ? netlink_ack+0xb50/0xb50 [ 99.505107][T10106] ? __kasan_check_read+0x11/0x20 [ 99.510260][T10106] ? netlink_deliver_tap+0x24a/0xbe0 [ 99.515648][T10106] rtnetlink_rcv+0x1d/0x30 [ 99.520085][T10106] netlink_unicast+0x58c/0x7d0 [ 99.525201][T10106] ? netlink_attachskb+0x870/0x870 [ 99.530317][T10106] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 99.536057][T10106] ? __check_object_size+0x3d/0x437 [ 99.541489][T10106] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 99.547220][T10106] netlink_sendmsg+0x91c/0xea0 [ 99.552216][T10106] ? netlink_unicast+0x7d0/0x7d0 [ 99.557303][T10106] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 99.562851][T10106] ? apparmor_socket_sendmsg+0x2a/0x30 [ 99.568566][T10106] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 99.574813][T10106] ? security_socket_sendmsg+0x8d/0xc0 [ 99.580305][T10106] ? netlink_unicast+0x7d0/0x7d0 [ 99.585252][T10106] sock_sendmsg+0xd7/0x130 [ 99.589680][T10106] kernel_sendmsg+0x44/0x50 [ 99.594352][T10106] sock_no_sendpage+0x116/0x150 [ 99.599281][T10106] ? sock_kzfree_s+0x70/0x70 [ 99.603891][T10106] ? lock_acquire+0x190/0x410 [ 99.608636][T10106] ? pipe_lock+0x65/0x80 [ 99.613183][T10106] kernel_sendpage+0x92/0xf0 [ 99.617798][T10106] ? sock_kzfree_s+0x70/0x70 [ 99.622384][T10106] sock_sendpage+0x8b/0xc0 [ 99.626905][T10106] pipe_to_sendpage+0x2da/0x3c0 [ 99.632029][T10106] ? kernel_sendpage+0xf0/0xf0 [ 99.636810][T10106] ? direct_splice_actor+0x190/0x190 [ 99.642222][T10106] ? splice_from_pipe_next.part.0+0x2a2/0x350 [ 99.648765][T10106] __splice_from_pipe+0x3ee/0x7c0 [ 99.653841][T10106] ? direct_splice_actor+0x190/0x190 [ 99.659409][T10106] ? direct_splice_actor+0x190/0x190 [ 99.664813][T10106] splice_from_pipe+0x108/0x170 [ 99.669761][T10106] ? splice_shrink_spd+0xd0/0xd0 [ 99.674708][T10106] ? apparmor_file_permission+0x27/0x30 [ 99.680799][T10106] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 99.687331][T10106] ? security_file_permission+0x8f/0x380 [ 99.693168][T10106] ? rcu_read_lock_held+0x9c/0xb0 [ 99.698650][T10106] generic_splice_sendpage+0x3c/0x50 [ 99.704074][T10106] ? splice_from_pipe+0x170/0x170 [ 99.709188][T10106] do_splice+0xba4/0x1680 [ 99.713848][T10106] ? ksys_dup3+0x3e0/0x3e0 [ 99.718287][T10106] ? opipe_prep.part.0+0x300/0x300 [ 99.723691][T10106] ? __fget_light+0x1a9/0x230 [ 99.728515][T10106] __x64_sys_splice+0x2c6/0x330 [ 99.733382][T10106] do_syscall_64+0xfa/0x790 [ 99.738053][T10106] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 99.744146][T10106] RIP: 0033:0x446e79 [ 99.748076][T10106] Code: e8 5c b3 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 0b 08 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 99.768332][T10106] RSP: 002b:00007f93b8fa8d88 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 99.777256][T10106] RAX: ffffffffffffffda RBX: 00000000006dcc98 RCX: 0000000000446e79 [ 99.785874][T10106] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000007 [ 99.794168][T10106] RBP: 00000000006dcc90 R08: 000000000004ffe0 R09: 0000000000000000 [ 99.802516][T10106] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dcc9c [ 99.810715][T10106] R13: 00000000004aed8e R14: 54c6c2ff093a6d32 R15: 0000000000010000 [ 99.821269][T10106] Kernel Offset: disabled [ 99.826717][T10106] Rebooting in 86400 seconds..