[ 74.508081][ T27] audit: type=1800 audit(1584626679.428:27): pid=9885 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 74.587928][ T27] audit: type=1800 audit(1584626679.438:28): pid=9885 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 75.237263][ T27] audit: type=1800 audit(1584626680.208:29): pid=9885 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 75.257374][ T27] audit: type=1800 audit(1584626680.218:30): pid=9885 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.127' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 100.209699][T10038] IPVS: ftp: loaded support on port[0] = 21 [ 100.242206][T10038] general protection fault, probably for non-canonical address 0xff3f3b3f3f3f3f3f: 0000 [#1] PREEMPT SMP KASAN [ 100.254008][T10038] KASAN: maybe wild-memory-access in range [0xf9f9f9f9f9f9f9f8-0xf9f9f9f9f9f9f9ff] [ 100.263264][T10038] CPU: 1 PID: 10038 Comm: syz-executor929 Not tainted 5.6.0-rc6-syzkaller #0 [ 100.272102][T10038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 100.282164][T10038] RIP: 0010:tcf_action_destroy+0x6a/0x150 [ 100.287868][T10038] Code: 47 fb 83 c5 01 bf 20 00 00 00 48 83 c3 08 89 ee e8 7b 75 47 fb 83 fd 20 0f 84 ae 00 00 00 e8 fd 73 47 fb 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 0f 85 ae 00 00 00 4c 8b 3b 4d 85 ff 0f 84 8b 00 00 [ 100.307555][T10038] RSP: 0018:ffffc90001c7f028 EFLAGS: 00010a06 [ 100.313632][T10038] RAX: 1f3f3f3f3f3f3f3f RBX: f9f9f9f9f9f9f9f9 RCX: 0000000000000000 [ 100.321583][T10038] RDX: 0000000000000000 RSI: ffffffff862ab123 RDI: f9f9f9f9f9f9f9f9 [ 100.329557][T10038] RBP: 0000000000000000 R08: ffff888093848280 R09: ffffed1015ce7074 [ 100.337520][T10038] R10: ffffed1015ce7073 R11: ffff8880ae73839b R12: 0000000000000000 [ 100.345470][T10038] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 100.353420][T10038] FS: 0000000001c9f880(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 100.362368][T10038] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 100.368922][T10038] CR2: 0000000020000280 CR3: 000000009a660000 CR4: 00000000001406e0 [ 100.376878][T10038] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 100.384839][T10038] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 100.392801][T10038] Call Trace: [ 100.396075][T10038] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 100.402041][T10038] tcf_exts_destroy+0x42/0xc0 [ 100.406707][T10038] tcf_exts_change+0xf4/0x150 [ 100.411490][T10038] ? tcf_exts_destroy+0xc0/0xc0 [ 100.416353][T10038] tcindex_set_parms+0xed8/0x1a00 [ 100.421373][T10038] ? tcindex_alloc_perfect_hash+0x320/0x320 [ 100.427247][T10038] ? mark_held_locks+0xe0/0xe0 [ 100.432000][T10038] ? nla_memcpy+0xa0/0xa0 [ 100.436307][T10038] ? tcindex_change+0x203/0x2e0 [ 100.441173][T10038] tcindex_change+0x203/0x2e0 [ 100.445825][T10038] ? tcindex_set_parms+0x1a00/0x1a00 [ 100.451201][T10038] tc_new_tfilter+0xa59/0x20b0 [ 100.455973][T10038] ? tcindex_set_parms+0x1a00/0x1a00 [ 100.463157][T10038] ? tc_del_tfilter+0x1430/0x1430 [ 100.468155][T10038] ? __lock_acquire+0x80b/0x3ca0 [ 100.473071][T10038] ? apparmor_capable+0x454/0x8a0 [ 100.478076][T10038] ? rcu_read_lock_held+0x9c/0xb0 [ 100.483098][T10038] ? tc_del_tfilter+0x1430/0x1430 [ 100.488097][T10038] rtnetlink_rcv_msg+0x810/0xad0 [ 100.493013][T10038] ? rtnl_bridge_getlink+0x880/0x880 [ 100.498279][T10038] ? mark_held_locks+0xe0/0xe0 [ 100.503036][T10038] ? netlink_deliver_tap+0x146/0xb50 [ 100.508335][T10038] netlink_rcv_skb+0x15a/0x410 [ 100.513102][T10038] ? rtnl_bridge_getlink+0x880/0x880 [ 100.518363][T10038] ? netlink_ack+0xa80/0xa80 [ 100.522948][T10038] netlink_unicast+0x537/0x740 [ 100.527703][T10038] ? netlink_attachskb+0x810/0x810 [ 100.532804][T10038] ? _copy_from_iter_full+0x25c/0x870 [ 100.538156][T10038] ? __phys_addr_symbol+0x2c/0x70 [ 100.543174][T10038] ? __check_object_size+0x171/0x437 [ 100.548443][T10038] netlink_sendmsg+0x882/0xe10 [ 100.553193][T10038] ? aa_af_perm+0x260/0x260 [ 100.557673][T10038] ? netlink_unicast+0x740/0x740 [ 100.562590][T10038] ? netlink_unicast+0x740/0x740 [ 100.567758][T10038] sock_sendmsg+0xcf/0x120 [ 100.572161][T10038] ____sys_sendmsg+0x6b9/0x7d0 [ 100.576898][T10038] ? kernel_sendmsg+0x50/0x50 [ 100.581548][T10038] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 100.587071][T10038] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 100.593042][T10038] ___sys_sendmsg+0x100/0x170 [ 100.597695][T10038] ? sendmsg_copy_msghdr+0x70/0x70 [ 100.602782][T10038] ? lock_downgrade+0x7f0/0x7f0 [ 100.607615][T10038] ? lock_acquire+0x197/0x420 [ 100.612290][T10038] ? __might_fault+0xef/0x1d0 [ 100.616958][T10038] ? __might_fault+0x190/0x1d0 [ 100.621705][T10038] ? _copy_to_user+0x107/0x150 [ 100.626452][T10038] ? move_addr_to_user+0xb3/0x200 [ 100.631459][T10038] ? __fget_light+0x1a5/0x270 [ 100.636126][T10038] __sys_sendmsg+0xec/0x1b0 [ 100.640608][T10038] ? __sys_sendmsg_sock+0xb0/0xb0 [ 100.645609][T10038] ? mark_held_locks+0x9f/0xe0 [ 100.650395][T10038] ? trace_hardirqs_off_caller+0x55/0x230 [ 100.656090][T10038] ? do_syscall_64+0x21/0x7d0 [ 100.660878][T10038] do_syscall_64+0xf6/0x7d0 [ 100.665388][T10038] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 100.671295][T10038] RIP: 0033:0x440e79 [ 100.675180][T10038] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 10 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 100.694755][T10038] RSP: 002b:00007ffe3fdf3cf8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.703165][T10038] RAX: ffffffffffffffda RBX: 00000000004a2650 RCX: 0000000000440e79 [ 100.711135][T10038] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 100.719128][T10038] RBP: 00007ffe3fdf3d00 R08: 0000000120080522 R09: 0000000120080522 [ 100.727077][T10038] R10: 0000000120080522 R11: 0000000000000246 R12: 00000000004a2650 [ 100.735044][T10038] R13: 0000000000402410 R14: 0000000000000000 R15: 0000000000000000 [ 100.743032][T10038] Modules linked in: [ 100.747325][T10038] ---[ end trace 7efc989216d2e8bf ]--- [ 100.752974][T10038] RIP: 0010:tcf_action_destroy+0x6a/0x150 [ 100.758829][T10038] Code: 47 fb 83 c5 01 bf 20 00 00 00 48 83 c3 08 89 ee e8 7b 75 47 fb 83 fd 20 0f 84 ae 00 00 00 e8 fd 73 47 fb 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 0f 85 ae 00 00 00 4c 8b 3b 4d 85 ff 0f 84 8b 00 00 [ 100.778472][T10038] RSP: 0018:ffffc90001c7f028 EFLAGS: 00010a06 [ 100.784709][T10038] RAX: 1f3f3f3f3f3f3f3f RBX: f9f9f9f9f9f9f9f9 RCX: 0000000000000000 [ 100.792732][T10038] RDX: 0000000000000000 RSI: ffffffff862ab123 RDI: f9f9f9f9f9f9f9f9 [ 100.800734][T10038] RBP: 0000000000000000 R08: ffff888093848280 R09: ffffed1015ce7074 [ 100.808700][T10038] R10: ffffed1015ce7073 R11: ffff8880ae73839b R12: 0000000000000000 [ 100.816704][T10038] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 100.824727][T10038] FS: 0000000001c9f880(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 100.833702][T10038] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 100.840337][T10038] CR2: ffffffffff600400 CR3: 000000009a660000 CR4: 00000000001406e0 [ 100.848311][T10038] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 100.856325][T10038] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 100.864316][T10038] Kernel panic - not syncing: Fatal exception [ 100.871511][T10038] Kernel Offset: disabled [ 100.875830][T10038] Rebooting in 86400 seconds..