[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 54.941664][ T26] audit: type=1800 audit(1569079284.412:25): pid=8498 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 54.983861][ T26] audit: type=1800 audit(1569079284.412:26): pid=8498 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 55.026744][ T26] audit: type=1800 audit(1569079284.412:27): pid=8498 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.247' (ECDSA) to the list of known hosts. 2019/09/21 15:21:36 parsed 1 programs 2019/09/21 15:21:38 executed programs: 0 syzkaller login: [ 68.880347][ T8666] IPVS: ftp: loaded support on port[0] = 21 [ 68.940817][ T8666] chnl_net:caif_netlink_parms(): no params data found [ 68.966223][ T8666] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.974112][ T8666] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.981828][ T8666] device bridge_slave_0 entered promiscuous mode [ 68.989707][ T8666] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.996790][ T8666] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.004649][ T8666] device bridge_slave_1 entered promiscuous mode [ 69.021039][ T8666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.031657][ T8666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.051397][ T8666] team0: Port device team_slave_0 added [ 69.058491][ T8666] team0: Port device team_slave_1 added [ 69.120899][ T8666] device hsr_slave_0 entered promiscuous mode [ 69.158847][ T8666] device hsr_slave_1 entered promiscuous mode [ 69.216249][ T8666] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.223438][ T8666] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.231243][ T8666] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.238281][ T8666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.271153][ T8666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.281939][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.302417][ T3509] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.310398][ T3509] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.318107][ T3509] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 69.331550][ T8666] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.342026][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.350465][ T2902] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.357501][ T2902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.381491][ T8670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.390888][ T8670] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.397923][ T8670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.406259][ T8670] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.416506][ T8670] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.426545][ T8670] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.434792][ T8670] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.444948][ T8666] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.453249][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.470513][ T8666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.584543][ T8678] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 69.597036][ T8678] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 69.623091][ T8682] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 69.635251][ T8682] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 69.660029][ T8687] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 69.671327][ T8687] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 69.698359][ T8692] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 69.710597][ T8692] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 69.737520][ T8697] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 69.750416][ T8697] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 71.441980][ T8973] ------------[ cut here ]------------ [ 71.448126][ T8973] WARNING: CPU: 0 PID: 8973 at net/xfrm/xfrm_policy.c:1543 xfrm_policy_insert_list.cold+0x11/0x90 [ 71.458713][ T8973] Kernel panic - not syncing: panic_on_warn set ... [ 71.465354][ T8973] CPU: 0 PID: 8973 Comm: syz-executor.0 Not tainted 5.3.0+ #0 [ 71.472793][ T8973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.482929][ T8973] Call Trace: [ 71.486207][ T8973] dump_stack+0x172/0x1f0 [ 71.490522][ T8973] ? __xfrm_sk_clone_policy+0xae0/0xae0 [ 71.496091][ T8973] panic+0x2dc/0x755 [ 71.499968][ T8973] ? add_taint.cold+0x16/0x16 [ 71.504628][ T8973] ? __kasan_check_write+0x14/0x20 [ 71.509737][ T8973] ? __warn.cold+0x5/0x4c [ 71.514070][ T8973] ? __warn+0xe7/0x1e0 [ 71.518134][ T8973] ? xfrm_policy_insert_list.cold+0x11/0x90 [ 71.524010][ T8973] __warn.cold+0x20/0x4c [ 71.528424][ T8973] ? wake_up_klogd+0x99/0xd0 [ 71.533006][ T8973] ? xfrm_policy_insert_list.cold+0x11/0x90 [ 71.538877][ T8973] report_bug+0x263/0x2b0 [ 71.543186][ T8973] do_error_trap+0x11b/0x200 [ 71.547756][ T8973] do_invalid_op+0x37/0x50 [ 71.552152][ T8973] ? xfrm_policy_insert_list.cold+0x11/0x90 [ 71.558027][ T8973] invalid_op+0x23/0x30 [ 71.562174][ T8973] RIP: 0010:xfrm_policy_insert_list.cold+0x11/0x90 [ 71.568657][ T8973] Code: c5 76 fb e9 67 fa ff ff 88 55 c0 e8 99 c5 76 fb 0f b6 55 c0 e9 83 fa ff ff e8 eb 56 3c fb 48 c7 c7 a0 3b 53 88 e8 b3 da 25 fb <0f> 0b 48 8b 45 b8 42 0f b6 14 20 48 8b 45 d0 83 e0 07 83 c0 03 38 [ 71.588241][ T8973] RSP: 0018:ffff8880885cf3a0 EFLAGS: 00010282 [ 71.594297][ T8973] RAX: 0000000000000024 RBX: ffff888099b80040 RCX: 0000000000000000 [ 71.602309][ T8973] RDX: 0000000000000000 RSI: ffffffff815c2736 RDI: ffffed10110b9e66 [ 71.610268][ T8973] RBP: ffff8880885cf420 R08: 0000000000000024 R09: ffffed1015d060d1 [ 71.618223][ T8973] R10: ffffed1015d060d0 R11: ffff8880ae830687 R12: dffffc0000000000 [ 71.626175][ T8973] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888099978dc0 [ 71.634161][ T8973] ? vprintk_func+0x86/0x189 [ 71.638742][ T8973] xfrm_policy_inexact_insert+0xec/0x1000 [ 71.644439][ T8973] ? lock_acquire+0x190/0x410 [ 71.649098][ T8973] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 71.654970][ T8973] ? __sanitizer_cov_trace_cmp1+0x17/0x20 [ 71.660690][ T8973] xfrm_policy_insert+0x530/0x750 [ 71.665695][ T8973] xfrm_add_policy+0x28f/0x530 [ 71.670439][ T8973] ? xfrm_policy_construct+0x680/0x680 [ 71.675876][ T8973] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 71.682162][ T8973] ? ns_capable_common+0x93/0x100 [ 71.687185][ T8973] ? __nla_parse+0x43/0x60 [ 71.691596][ T8973] ? xfrm_policy_construct+0x680/0x680 [ 71.697125][ T8973] xfrm_user_rcv_msg+0x459/0x770 [ 71.702149][ T8973] ? copy_to_user_state_extra+0xdf0/0xdf0 [ 71.707851][ T8973] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 71.713830][ T8973] ? __mutex_lock+0x45d/0x13c0 [ 71.718582][ T8973] ? netlink_deliver_tap+0x22d/0xbf0 [ 71.723851][ T8973] ? xfrm_netlink_rcv+0x61/0x90 [ 71.728738][ T8973] netlink_rcv_skb+0x177/0x450 [ 71.733528][ T8973] ? copy_to_user_state_extra+0xdf0/0xdf0 [ 71.739343][ T8973] ? netlink_ack+0xb30/0xb30 [ 71.743925][ T8973] xfrm_netlink_rcv+0x70/0x90 [ 71.748668][ T8973] netlink_unicast+0x531/0x710 [ 71.753415][ T8973] ? netlink_attachskb+0x7c0/0x7c0 [ 71.758511][ T8973] ? _copy_from_iter_full+0x25d/0x8a0 [ 71.763879][ T8973] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 71.769788][ T8973] ? __check_object_size+0x3d/0x437 [ 71.774985][ T8973] netlink_sendmsg+0x8a5/0xd60 [ 71.779734][ T8973] ? netlink_unicast+0x710/0x710 [ 71.784653][ T8973] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 71.790178][ T8973] ? apparmor_socket_sendmsg+0x2a/0x30 [ 71.795621][ T8973] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 71.801849][ T8973] ? security_socket_sendmsg+0x8d/0xc0 [ 71.807300][ T8973] ? netlink_unicast+0x710/0x710 [ 71.812222][ T8973] sock_sendmsg+0xd7/0x130 [ 71.816621][ T8973] ___sys_sendmsg+0x803/0x920 [ 71.821288][ T8973] ? copy_msghdr_from_user+0x440/0x440 [ 71.826746][ T8973] ? __kasan_check_read+0x11/0x20 [ 71.831754][ T8973] ? __fget+0x384/0x560 [ 71.835894][ T8973] ? ksys_dup3+0x3e0/0x3e0 [ 71.840296][ T8973] ? __fget_light+0x1a9/0x230 [ 71.844973][ T8973] ? __fdget+0x1b/0x20 [ 71.849040][ T8973] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 71.855329][ T8973] __sys_sendmsg+0x105/0x1d0 [ 71.859907][ T8973] ? __sys_sendmsg_sock+0xd0/0xd0 [ 71.864920][ T8973] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 71.870363][ T8973] ? do_syscall_64+0x26/0x760 [ 71.875042][ T8973] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 71.881087][ T8973] ? do_syscall_64+0x26/0x760 [ 71.885749][ T8973] __x64_sys_sendmsg+0x78/0xb0 [ 71.890508][ T8973] do_syscall_64+0xfa/0x760 [ 71.894991][ T8973] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 71.900860][ T8973] RIP: 0033:0x459a09 [ 71.904735][ T8973] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 71.924334][ T8973] RSP: 002b:00007f5acda5fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.932746][ T8973] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a09 [ 71.940706][ T8973] RDX: 0000000000000000 RSI: 000000002014f000 RDI: 0000000000000004 [ 71.948667][ T8973] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 71.956635][ T8973] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5acda606d4 [ 71.964617][ T8973] R13: 00000000004c794a R14: 00000000004dd340 R15: 00000000ffffffff [ 71.974041][ T8973] Kernel Offset: disabled [ 71.978489][ T8973] Rebooting in 86400 seconds..