[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 77.558954][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 77.558965][ T27] audit: type=1800 audit(1582636599.559:29): pid=9850 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 77.586800][ T27] audit: type=1800 audit(1582636599.569:30): pid=9850 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.247' (ECDSA) to the list of known hosts. syzkaller login: [ 88.400159][T10010] IPVS: ftp: loaded support on port[0] = 21 [ 88.400556][T10009] IPVS: ftp: loaded support on port[0] = 21 [ 88.423644][T10012] IPVS: ftp: loaded support on port[0] = 21 [ 88.425620][T10011] IPVS: ftp: loaded support on port[0] = 21 [ 88.436496][T10013] IPVS: ftp: loaded support on port[0] = 21 [ 88.437585][T10006] IPVS: ftp: loaded support on port[0] = 21 executing program executing program executing program [ 88.549992][T10015] netlink: 'syz-executor671': attribute type 1 has an invalid length. [ 88.568128][T10017] netlink: 'syz-executor671': attribute type 1 has an invalid length. executing program executing program executing program [ 88.613570][T10019] netlink: 'syz-executor671': attribute type 1 has an invalid length. [ 88.627093][T10022] netlink: 'syz-executor671': attribute type 1 has an invalid length. [ 88.647296][T10025] netlink: 'syz-executor671': attribute type 1 has an invalid length. [ 88.668063][T10027] netlink: 'syz-executor671': attribute type 1 has an invalid length. executing program executing program [ 88.790928][T10033] netlink: 'syz-executor671': attribute type 1 has an invalid length. [ 88.808593][T10035] netlink: 'syz-executor671': attribute type 1 has an invalid length. executing program executing program executing program executing program [ 88.878801][T10039] netlink: 'syz-executor671': attribute type 1 has an invalid length. [ 88.899211][T10042] netlink: 'syz-executor671': attribute type 1 has an invalid length. executing program executing program executing program executing program executing program executing program executing program executing program [ 89.253183][T10069] bond0: (slave vcan0): The slave device specified does not support setting the MAC address [ 89.266244][T10069] bond0: (slave vcan0): Error -22 calling dev_set_mtu executing program executing program [ 89.295972][T10072] bond0: (slave vcan0): The slave device specified does not support setting the MAC address [ 89.306971][T10072] bond0: (slave vcan0): Error -22 calling dev_set_mtu executing program [ 89.351330][T10076] bond0: (slave vcan0): The slave device specified does not support setting the MAC address [ 89.362322][T10076] bond0: (slave vcan0): Error -22 calling dev_set_mtu executing program [ 89.392538][T10081] bond0: (slave vcan0): The slave device specified does not support setting the MAC address [ 89.404355][T10081] bond0: (slave vcan0): Error -22 calling dev_set_mtu [ 89.416992][T10082] bond0: (slave vcan0): The slave device specified does not support setting the MAC address [ 89.428570][T10082] bond0: (slave vcan0): Error -22 calling dev_set_mtu executing program [ 89.450118][T10087] bond0: (slave vcan0): The slave device specified does not support setting the MAC address [ 89.461782][T10087] bond0: (slave vcan0): Error -22 calling dev_set_mtu executing program [ 89.503284][T10092] bond1: (slave vcan0): The slave device specified does not support setting the MAC address [ 89.514040][T10092] bond1: (slave vcan0): Error -22 calling dev_set_mtu [ 89.541645][T10096] bond1: (slave vcan0): The slave device specified does not support setting the MAC address executing program [ 89.553418][T10096] bond1: (slave vcan0): Error -22 calling dev_set_mtu executing program executing program [ 89.603619][T10101] bond1: (slave vcan0): The slave device specified does not support setting the MAC address [ 89.617262][T10101] bond1: (slave vcan0): Error -22 calling dev_set_mtu executing program executing program [ 89.669146][T10104] bond1: (slave vcan0): The slave device specified does not support setting the MAC address [ 89.680077][T10104] bond1: (slave vcan0): Error -22 calling dev_set_mtu [ 89.691257][T10107] bond1: (slave vcan0): The slave device specified does not support setting the MAC address [ 89.702629][T10107] bond1: (slave vcan0): Error -22 calling dev_set_mtu [ 89.751666][T10114] bond1: (slave vcan0): The slave device specified does not support setting the MAC address [ 89.763077][T10114] bond1: (slave vcan0): Error -22 calling dev_set_mtu [ 89.777397][T10115] bond2: (slave vcan0): The slave device specified does not support setting the MAC address [ 89.788293][T10115] bond2: (slave vcan0): Error -22 calling dev_set_mtu [ 89.796054][T10119] general protection fault, probably for non-canonical address 0xdffffc0000000c05: 0000 [#1] PREEMPT SMP KASAN [ 89.807872][T10119] KASAN: probably user-memory-access in range [0x0000000000006028-0x000000000000602f] [ 89.817413][T10119] CPU: 1 PID: 10119 Comm: syz-executor671 Not tainted 5.6.0-rc2-syzkaller #0 [ 89.826419][T10119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 89.836617][T10119] RIP: 0010:j1939_netdev_start+0x361/0x650 [ 89.842462][T10119] Code: 03 80 3c 02 00 0f 85 bc 02 00 00 4c 8b ab 90 05 00 00 48 b8 00 00 00 00 00 fc ff df 49 8d bd 28 60 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 89 02 00 00 4d 89 a5 28 60 00 00 48 c7 c7 60 89 [ 89.862185][T10119] RSP: 0018:ffffc900070b7d00 EFLAGS: 00010206 [ 89.868427][T10119] RAX: dffffc0000000000 RBX: ffff888094ed4000 RCX: ffffffff8715dd84 [ 89.876444][T10119] RDX: 0000000000000c05 RSI: ffffffff8715ed3c RDI: 0000000000006028 [ 89.884430][T10119] RBP: ffffc900070b7d40 R08: ffff888095b121c0 R09: fffff52000e16f8e [ 89.892394][T10119] R10: fffff52000e16f8d R11: 0000000000000003 R12: ffff888095538000 [ 89.900387][T10119] R13: 0000000000000000 R14: ffff888095539050 R15: ffff888094ed4558 [ 89.908350][T10119] FS: 00007f9a340ef700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 89.917403][T10119] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.923979][T10119] CR2: 00007f9a340eee78 CR3: 00000000947c2000 CR4: 00000000001406e0 [ 89.931941][T10119] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 89.939904][T10119] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 89.947878][T10119] Call Trace: [ 89.951225][T10119] j1939_sk_bind+0x68d/0x980 [ 89.955809][T10119] __sys_bind+0x239/0x290 [ 89.960371][T10119] ? __ia32_sys_socketpair+0xf0/0xf0 [ 89.965657][T10119] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 89.971660][T10119] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 89.977174][T10119] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 89.982620][T10119] ? do_syscall_64+0x26/0x790 [ 89.987341][T10119] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 89.993396][T10119] ? do_syscall_64+0x26/0x790 [ 90.000702][T10119] __x64_sys_bind+0x73/0xb0 [ 90.005234][T10119] do_syscall_64+0xfa/0x790 [ 90.009741][T10119] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 90.015650][T10119] RIP: 0033:0x446d39 [ 90.019536][T10119] Code: e8 8c e7 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 07 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 90.039132][T10119] RSP: 002b:00007f9a340eed98 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 90.047633][T10119] RAX: ffffffffffffffda RBX: 00000000006dbc78 RCX: 0000000000446d39 [ 90.055772][T10119] RDX: 0000000000000018 RSI: 0000000020000040 RDI: 0000000000000003 [ 90.063734][T10119] RBP: 00000000006dbc70 R08: 00007f9a340ef700 R09: 0000000000000000 [ 90.071698][T10119] R10: 00007f9a340ef700 R11: 0000000000000246 R12: 00000000006dbc7c [ 90.079661][T10119] R13: 000000006f340000 R14: 0000000000000000 R15: 068500100000003c [ 90.088239][T10119] Modules linked in: [ 90.092512][T10119] ---[ end trace e9a9971e66fb9d42 ]--- [ 90.098163][T10119] RIP: 0010:j1939_netdev_start+0x361/0x650 [ 90.104025][T10119] Code: 03 80 3c 02 00 0f 85 bc 02 00 00 4c 8b ab 90 05 00 00 48 b8 00 00 00 00 00 fc ff df 49 8d bd 28 60 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 89 02 00 00 4d 89 a5 28 60 00 00 48 c7 c7 60 89 [ 90.123789][T10119] RSP: 0018:ffffc900070b7d00 EFLAGS: 00010206 [ 90.130208][T10119] RAX: dffffc0000000000 RBX: ffff888094ed4000 RCX: ffffffff8715dd84 [ 90.138261][T10119] RDX: 0000000000000c05 RSI: ffffffff8715ed3c RDI: 0000000000006028 [ 90.146416][T10119] RBP: ffffc900070b7d40 R08: ffff888095b121c0 R09: fffff52000e16f8e [ 90.154420][T10119] R10: fffff52000e16f8d R11: 0000000000000003 R12: ffff888095538000 [ 90.162415][T10119] R13: 0000000000000000 R14: ffff888095539050 R15: ffff888094ed4558 [ 90.170503][T10119] FS: 00007f9a340ef700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 90.179460][T10119] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 90.186225][T10119] CR2: 00007f9a340eee78 CR3: 00000000947c2000 CR4: 00000000001406e0 [ 90.194342][T10119] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 90.202353][T10119] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 90.210802][T10119] Kernel panic - not syncing: Fatal exception [ 90.218624][T10119] Kernel Offset: disabled [ 90.222981][T10119] Rebooting in 86400 seconds..