[ 33.377688][ T26] audit: type=1800 audit(1549952713.966:27): pid=7348 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 33.409104][ T26] audit: type=1800 audit(1549952713.966:28): pid=7348 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 34.286678][ T26] audit: type=1800 audit(1549952714.916:29): pid=7348 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 34.307358][ T26] audit: type=1800 audit(1549952714.916:30): pid=7348 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.243' (ECDSA) to the list of known hosts. 2019/02/12 06:25:26 parsed 1 programs 2019/02/12 06:25:28 executed programs: 0 syzkaller login: [ 47.891835][ T7516] IPVS: ftp: loaded support on port[0] = 21 [ 47.949387][ T7516] chnl_net:caif_netlink_parms(): no params data found [ 47.979192][ T7516] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.986548][ T7516] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.994500][ T7516] device bridge_slave_0 entered promiscuous mode [ 48.002320][ T7516] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.009471][ T7516] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.016990][ T7516] device bridge_slave_1 entered promiscuous mode [ 48.034226][ T7516] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 48.043836][ T7516] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 48.060469][ T7516] team0: Port device team_slave_0 added [ 48.067225][ T7516] team0: Port device team_slave_1 added [ 48.150922][ T7516] device hsr_slave_0 entered promiscuous mode [ 48.219623][ T7516] device hsr_slave_1 entered promiscuous mode [ 48.265996][ T7516] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.273162][ T7516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.280785][ T7516] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.287830][ T7516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.315624][ T7516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.328477][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.348722][ T2986] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.356936][ T2986] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.365318][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 48.375826][ T7516] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.385116][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.393617][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.400776][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.410389][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.418604][ T2986] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.425719][ T2986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.441759][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.450760][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.466368][ T7516] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 48.477326][ T7516] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.490239][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.498583][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.507382][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.515807][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.532088][ T7516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.574964][ T7524] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 48.673568][ C0] hrtimer: interrupt took 26196 ns 2019/02/12 06:25:33 executed programs: 50 2019/02/12 06:25:38 executed programs: 115 [ 58.557476][ T8140] kasan: CONFIG_KASAN_INLINE enabled [ 58.564636][ T8140] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 58.577388][ T8140] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 58.584345][ T8140] CPU: 0 PID: 8140 Comm: syz-executor.0 Not tainted 5.0.0-rc5-next-20190211 #32 [ 58.593344][ T8140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.603387][ T8140] RIP: 0010:__dentry_path+0x49e/0x7c0 [ 58.608735][ T8140] Code: 89 fc 41 83 e4 01 44 89 e6 e8 be 03 b2 ff 45 84 e4 0f 85 04 02 00 00 e8 70 02 b2 ff 48 8b 85 18 ff ff ff 44 89 bd 40 ff ff ff <80> 38 00 0f 85 f9 02 00 00 48 8b 85 38 ff ff ff 41 83 e7 01 44 89 [ 58.628491][ T8140] RSP: 0018:ffff8880960a7ad0 EFLAGS: 00010293 [ 58.634536][ T8140] RAX: dffffc0000000005 RBX: 0000000000000000 RCX: ffffffff81be4782 [ 58.642485][ T8140] RDX: 0000000000000000 RSI: ffffffff81be4790 RDI: 0000000000000001 [ 58.650434][ T8140] RBP: ffff8880960a7bc0 R08: ffff88805684e480 R09: 0000000000000000 [ 58.658381][ T8140] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 58.666330][ T8140] R13: ffff8880960a7b98 R14: ffff888045e59c7e R15: 000000000000146e [ 58.674300][ T8140] FS: 00007f496e907700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 58.683205][ T8140] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.689866][ T8140] CR2: 00007f2d76244000 CR3: 0000000031485000 CR4: 00000000001426f0 [ 58.697832][ T8140] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 58.705782][ T8140] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 58.714024][ T8140] Call Trace: [ 58.717299][ T8140] ? simple_dname+0x1f0/0x1f0 [ 58.721960][ T8140] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 58.728096][ T8140] ? kmem_cache_alloc_trace+0x354/0x760 [ 58.733629][ T8140] dentry_path_raw+0x26/0x30 [ 58.738202][ T8140] kvm_uevent_notify_change.part.0+0x213/0x440 [ 58.744336][ T8140] kvm_dev_ioctl+0x1132/0x1750 [ 58.749086][ T8140] ? retint_kernel+0x2d/0x2d [ 58.753656][ T8140] ? kvm_debugfs_release+0x90/0x90 [ 58.758746][ T8140] ? find_held_lock+0x35/0x130 [ 58.763495][ T8140] ? __fget+0x340/0x540 [ 58.767657][ T8140] ? retint_kernel+0x2d/0x2d [ 58.772245][ T8140] ? kvm_debugfs_release+0x90/0x90 [ 58.777335][ T8140] do_vfs_ioctl+0xd6e/0x1390 [ 58.781902][ T8140] ? ioctl_preallocate+0x210/0x210 [ 58.787107][ T8140] ? __fget+0x367/0x540 [ 58.791241][ T8140] ? ksys_dup3+0x3e0/0x3e0 [ 58.795636][ T8140] ? nsecs_to_jiffies+0x30/0x30 [ 58.800467][ T8140] ? security_file_ioctl+0x93/0xc0 [ 58.805555][ T8140] ksys_ioctl+0xab/0xd0 [ 58.809694][ T8140] __x64_sys_ioctl+0x73/0xb0 [ 58.814261][ T8140] do_syscall_64+0x103/0x610 [ 58.818830][ T8140] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 58.824699][ T8140] RIP: 0033:0x457e39 [ 58.828583][ T8140] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 58.848250][ T8140] RSP: 002b:00007f496e906c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 58.856748][ T8140] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e39 [ 58.864793][ T8140] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000007 [ 58.872745][ T8140] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 58.880699][ T8140] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f496e9076d4 [ 58.888648][ T8140] R13: 00000000004c0950 R14: 00000000004d2698 R15: 00000000ffffffff [ 58.896604][ T8140] Modules linked in: [ 58.901827][ T8140] ---[ end trace 35cb2a64c93cae4a ]--- [ 58.907383][ T8140] RIP: 0010:__dentry_path+0x49e/0x7c0 [ 58.912865][ T8140] Code: 89 fc 41 83 e4 01 44 89 e6 e8 be 03 b2 ff 45 84 e4 0f 85 04 02 00 00 e8 70 02 b2 ff 48 8b 85 18 ff ff ff 44 89 bd 40 ff ff ff <80> 38 00 0f 85 f9 02 00 00 48 8b 85 38 ff ff ff 41 83 e7 01 44 89 [ 58.932620][ T8140] RSP: 0018:ffff8880960a7ad0 EFLAGS: 00010293 [ 58.938681][ T8140] RAX: dffffc0000000005 RBX: 0000000000000000 RCX: ffffffff81be4782 [ 58.946661][ T8140] RDX: 0000000000000000 RSI: ffffffff81be4790 RDI: 0000000000000001 [ 58.954680][ T8140] RBP: ffff8880960a7bc0 R08: ffff88805684e480 R09: 0000000000000000 [ 58.962866][ T8140] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 58.970872][ T8140] R13: ffff8880960a7b98 R14: ffff888045e59c7e R15: 000000000000146e [ 58.978824][ T8140] FS: 00007f496e907700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 58.987767][ T8140] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.994367][ T8140] CR2: 00007f2d76245000 CR3: 0000000031485000 CR4: 00000000001426e0 [ 59.002351][ T8140] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 59.010324][ T8140] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 59.018399][ T8140] Kernel panic - not syncing: Fatal exception [ 59.025564][ T8140] Kernel Offset: disabled [ 59.029883][ T8140] Rebooting in 86400 seconds..