[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 63.228420][ T26] audit: type=1800 audit(1563681531.606:25): pid=8625 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 63.250683][ T26] audit: type=1800 audit(1563681531.616:26): pid=8625 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 63.271662][ T26] audit: type=1800 audit(1563681531.616:27): pid=8625 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.31' (ECDSA) to the list of known hosts. syzkaller login: [ 75.870617][ T8778] IPVS: ftp: loaded support on port[0] = 21 [ 75.935698][ T8778] chnl_net:caif_netlink_parms(): no params data found [ 75.966292][ T8778] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.973664][ T8778] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.981912][ T8778] device bridge_slave_0 entered promiscuous mode [ 75.990905][ T8778] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.998149][ T8778] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.006380][ T8778] device bridge_slave_1 entered promiscuous mode [ 76.023679][ T8778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.034829][ T8778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.053574][ T8778] team0: Port device team_slave_0 added [ 76.060433][ T8778] team0: Port device team_slave_1 added [ 76.134583][ T8778] device hsr_slave_0 entered promiscuous mode [ 76.203300][ T8778] device hsr_slave_1 entered promiscuous mode [ 76.281548][ T8778] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.288885][ T8778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.297195][ T8778] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.304312][ T8778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.338251][ T8778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.349250][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.360338][ T22] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.368990][ T22] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.377192][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 76.389960][ T8778] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.401085][ T3021] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.410282][ T3021] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.417457][ T3021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.433758][ T8780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.442230][ T8780] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.449375][ T8780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.461038][ T3021] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.469967][ T3021] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.481475][ T8780] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.497206][ T8778] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 76.508623][ T8778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.521377][ T8780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.530954][ T8780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.540232][ T8780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready executing program [ 76.559146][ T8778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.597320][ T8778] IPv6: ADDRCONF(NETDEV_CHANGE): rose0: link becomes ready [ 76.712853][ C1] kasan: CONFIG_KASAN_INLINE enabled [ 76.719436][ C1] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 76.727640][ C1] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 76.734583][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.2.0-next-20190718 #41 [ 76.742726][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 76.753099][ C1] RIP: 0010:rose_send_frame+0x1a8/0x280 [ 76.758746][ C1] Code: c1 ea 03 80 3c 02 00 0f 85 8d 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 63 20 49 8d bc 24 50 03 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 7e 49 8b 94 24 50 03 00 00 e9 b8 fe ff ff e8 b0 ad [ 76.779602][ C1] RSP: 0018:ffff8880ae909ad8 EFLAGS: 00010206 [ 76.786313][ C1] RAX: dffffc0000000000 RBX: ffff888216748d40 RCX: ffffffff8666d5bb [ 76.794351][ C1] RDX: 000000000000006a RSI: ffffffff8666d6ec RDI: 0000000000000350 [ 76.802699][ C1] RBP: ffff8880ae909b08 R08: ffff8880a98c4340 R09: ffffed1013e84375 [ 76.810682][ C1] R10: ffffed1013e84374 R11: ffff88809f421ba3 R12: 0000000000000000 [ 76.818700][ C1] R13: 0000000000000078 R14: 0000000000000005 R15: ffff88809a09e6c0 [ 76.826794][ C1] FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 76.835868][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.842471][ C1] CR2: 0000000020000190 CR3: 0000000093c2d000 CR4: 00000000001406e0 [ 76.850587][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 76.858909][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 76.866886][ C1] Call Trace: [ 76.870259][ C1] [ 76.873266][ C1] rose_transmit_clear_request+0x1de/0x2a0 [ 76.879606][ C1] ? __local_bh_enable_ip+0x15a/0x270 [ 76.885172][ C1] rose_rx_call_request+0x4ec/0x19d4 [ 76.890462][ C1] ? rose_release+0x450/0x450 [ 76.895163][ C1] rose_loopback_timer+0x164/0x480 [ 76.900290][ C1] call_timer_fn+0x1ac/0x780 [ 76.904919][ C1] ? rose_link_rx_restart.cold+0xa9/0xa9 [ 76.910572][ C1] ? msleep_interruptible+0x150/0x150 [ 76.915951][ C1] ? run_timer_softirq+0x685/0x17a0 [ 76.921216][ C1] ? trace_hardirqs_on+0x67/0x240 [ 76.926246][ C1] ? __kasan_check_read+0x11/0x20 [ 76.931323][ C1] ? rose_link_rx_restart.cold+0xa9/0xa9 [ 76.937043][ C1] ? rose_link_rx_restart.cold+0xa9/0xa9 [ 76.942678][ C1] run_timer_softirq+0x697/0x17a0 [ 76.947745][ C1] ? add_timer+0x930/0x930 [ 76.952167][ C1] ? kvm_clock_read+0x18/0x30 [ 76.956837][ C1] ? kvm_sched_clock_read+0x9/0x20 [ 76.961951][ C1] ? sched_clock+0x2e/0x50 [ 76.966373][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 76.972718][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 76.979108][ C1] __do_softirq+0x262/0x98c [ 76.983666][ C1] ? sched_clock_cpu+0x1b/0x1b0 [ 76.988569][ C1] irq_exit+0x19b/0x1e0 [ 76.992732][ C1] smp_apic_timer_interrupt+0x1a3/0x610 [ 76.998864][ C1] apic_timer_interrupt+0xf/0x20 [ 77.003786][ C1] [ 77.006808][ C1] RIP: 0010:native_safe_halt+0xe/0x10 [ 77.012247][ C1] Code: 78 c2 72 fa eb 8a 90 90 90 90 90 90 e9 07 00 00 00 0f 00 2d 44 28 4e 00 f4 c3 66 90 e9 07 00 00 00 0f 00 2d 34 28 4e 00 fb f4 90 55 48 89 e5 41 57 41 56 41 55 41 54 53 e8 9e 57 26 fa e8 c9 [ 77.032114][ C1] RSP: 0018:ffff8880a98d7d68 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 77.040672][ C1] RAX: 1ffffffff11a5e25 RBX: ffff8880a98c4340 RCX: 0000000000000000 [ 77.048639][ C1] RDX: dffffc0000000000 RSI: 0000000000000006 RDI: ffff8880a98c4bd4 [ 77.056602][ C1] RBP: ffff8880a98d7d98 R08: ffff8880a98c4340 R09: 0000000000000000 [ 77.064577][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 77.072552][ C1] R13: ffffffff89a51ff8 R14: 0000000000000000 R15: 0000000000000001 [ 77.080628][ C1] ? default_idle+0x4e/0x360 [ 77.085213][ C1] arch_cpu_idle+0xa/0x10 [ 77.089582][ C1] default_idle_call+0x84/0xb0 [ 77.094348][ C1] do_idle+0x413/0x760 [ 77.098429][ C1] ? arch_cpu_idle_exit+0x80/0x80 [ 77.103436][ C1] ? do_idle+0x381/0x760 [ 77.107687][ C1] cpu_startup_entry+0x1b/0x20 [ 77.112643][ C1] start_secondary+0x315/0x430 [ 77.117415][ C1] ? set_cpu_sibling_map+0x2180/0x2180 [ 77.122870][ C1] secondary_startup_64+0xa4/0xb0 [ 77.128024][ C1] Modules linked in: [ 77.132081][ C1] ---[ end trace 228e660ad6c521aa ]--- [ 77.137597][ C1] RIP: 0010:rose_send_frame+0x1a8/0x280 [ 77.143284][ C1] Code: c1 ea 03 80 3c 02 00 0f 85 8d 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 63 20 49 8d bc 24 50 03 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 7e 49 8b 94 24 50 03 00 00 e9 b8 fe ff ff e8 b0 ad [ 77.163115][ C1] RSP: 0018:ffff8880ae909ad8 EFLAGS: 00010206 [ 77.169230][ C1] RAX: dffffc0000000000 RBX: ffff888216748d40 RCX: ffffffff8666d5bb [ 77.177427][ C1] RDX: 000000000000006a RSI: ffffffff8666d6ec RDI: 0000000000000350 [ 77.185573][ C1] RBP: ffff8880ae909b08 R08: ffff8880a98c4340 R09: ffffed1013e84375 [ 77.193647][ C1] R10: ffffed1013e84374 R11: ffff88809f421ba3 R12: 0000000000000000 [ 77.201912][ C1] R13: 0000000000000078 R14: 0000000000000005 R15: ffff88809a09e6c0 [ 77.210056][ C1] FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 77.219015][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.225640][ C1] CR2: 0000000020000190 CR3: 0000000093c2d000 CR4: 00000000001406e0 [ 77.233810][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 77.241779][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 77.249978][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 77.258503][ C1] Kernel Offset: disabled [ 77.262983][ C1] Rebooting in 86400 seconds..