[ 64.169728][ T26] audit: type=1800 audit(1567283006.794:27): pid=9771 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 64.190395][ T26] audit: type=1800 audit(1567283006.794:28): pid=9771 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 64.925598][ T26] audit: type=1800 audit(1567283007.624:29): pid=9771 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 64.947779][ T26] audit: type=1800 audit(1567283007.624:30): pid=9771 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.226' (ECDSA) to the list of known hosts. 2019/08/31 20:23:38 parsed 1 programs 2019/08/31 20:23:40 executed programs: 0 syzkaller login: [ 77.322797][ T9937] IPVS: ftp: loaded support on port[0] = 21 [ 77.370378][ T9937] chnl_net:caif_netlink_parms(): no params data found [ 77.391989][ T9937] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.399525][ T9937] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.407520][ T9937] device bridge_slave_0 entered promiscuous mode [ 77.414651][ T9937] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.421770][ T9937] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.429318][ T9937] device bridge_slave_1 entered promiscuous mode [ 77.442609][ T9937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.453043][ T9937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.470123][ T9937] team0: Port device team_slave_0 added [ 77.476839][ T9937] team0: Port device team_slave_1 added [ 77.526860][ T9937] device hsr_slave_0 entered promiscuous mode [ 77.595358][ T9937] device hsr_slave_1 entered promiscuous mode [ 77.670452][ T9937] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.677568][ T9937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.684972][ T9937] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.692061][ T9937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.717421][ T9937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.728484][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.736935][ T3516] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.744475][ T3516] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.752489][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 77.762405][ T9937] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.771631][ T3021] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.780065][ T3021] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.787148][ T3021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.805791][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.814089][ T3516] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.821156][ T3516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.829046][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.837505][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.845804][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.853841][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.862200][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.871174][ T9937] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.885430][ T9937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.957375][ T9947] kasan: CONFIG_KASAN_INLINE enabled [ 77.963028][ T9947] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 77.972034][ T9947] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 77.979057][ T9947] CPU: 0 PID: 9947 Comm: syz-executor.0 Not tainted 5.3.0-rc6+ #179 [ 77.987011][ T9947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 77.997061][ T9947] RIP: 0010:tls_sk_proto_close+0xe5/0x990 [ 78.002814][ T9947] Code: 0f 85 3f 08 00 00 49 8b 84 24 c0 02 00 00 4d 8d 75 14 4c 89 f2 48 c1 ea 03 48 89 85 50 ff ff ff 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 02 4c 89 f2 83 e2 07 38 d0 7f 08 84 c0 0f 85 2e 06 00 00 [ 78.022423][ T9947] RSP: 0018:ffff888097a37960 EFLAGS: 00010203 [ 78.028508][ T9947] RAX: dffffc0000000000 RBX: dffffc0000000000 RCX: ffffffff862cb00b [ 78.036499][ T9947] RDX: 0000000000000002 RSI: ffffffff862cad69 RDI: ffff888091b7a300 [ 78.044449][ T9947] RBP: ffff888097a37a18 R08: ffff888098270040 R09: ffffed101236f41a [ 78.052443][ T9947] R10: ffffed101236f419 R11: ffff888091b7a0cb R12: ffff888091b7a040 [ 78.060398][ T9947] R13: 0000000000000000 R14: 0000000000000014 R15: 0000000000000001 [ 78.068351][ T9947] FS: 00007f5d6dbce700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 78.077271][ T9947] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.083833][ T9947] CR2: 00007f44b0c85000 CR3: 000000009600c000 CR4: 00000000001406f0 [ 78.091873][ T9947] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 78.099821][ T9947] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 78.107793][ T9947] Call Trace: [ 78.111075][ T9947] ? trace_hardirqs_on+0x67/0x240 [ 78.116085][ T9947] ? wait_on_pending_writer+0x420/0x420 [ 78.121610][ T9947] ? __local_bh_enable_ip+0x15a/0x270 [ 78.126965][ T9947] ? _raw_spin_unlock_bh+0x31/0x40 [ 78.132053][ T9947] tls_sk_proto_close+0x35b/0x990 [ 78.137169][ T9947] ? wait_on_pending_writer+0x420/0x420 [ 78.142948][ T9947] ? wait_on_pending_writer+0x420/0x420 [ 78.148471][ T9947] ? __local_bh_enable_ip+0x15a/0x270 [ 78.153824][ T9947] ? _raw_spin_unlock_bh+0x31/0x40 [ 78.158951][ T9947] ? wait_on_pending_writer+0x420/0x420 [ 78.164488][ T9947] tcp_bpf_close+0x17c/0x390 [ 78.169145][ T9947] inet_release+0xed/0x200 [ 78.173538][ T9947] inet6_release+0x53/0x80 [ 78.177941][ T9947] __sock_release+0xce/0x280 [ 78.182510][ T9947] sock_close+0x1e/0x30 [ 78.186641][ T9947] __fput+0x2ff/0x890 [ 78.190598][ T9947] ? __sock_release+0x280/0x280 [ 78.195428][ T9947] ____fput+0x16/0x20 [ 78.199387][ T9947] task_work_run+0x145/0x1c0 [ 78.203969][ T9947] get_signal+0x2078/0x2500 [ 78.208451][ T9947] ? __do_sys_bpf+0x74d/0x3460 [ 78.213190][ T9947] do_signal+0x87/0x1700 [ 78.217413][ T9947] ? __kasan_check_read+0x11/0x20 [ 78.222423][ T9947] ? _copy_to_user+0x118/0x160 [ 78.227170][ T9947] ? setup_sigcontext+0x7d0/0x7d0 [ 78.232180][ T9947] ? put_timespec64+0xda/0x140 [ 78.236963][ T9947] ? nsecs_to_jiffies+0x30/0x30 [ 78.241792][ T9947] ? trace_hardirqs_on+0x67/0x240 [ 78.246804][ T9947] exit_to_usermode_loop+0x286/0x380 [ 78.252068][ T9947] do_syscall_64+0x5a9/0x6a0 [ 78.256654][ T9947] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 78.262524][ T9947] RIP: 0033:0x459879 [ 78.266419][ T9947] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 78.286030][ T9947] RSP: 002b:00007f5d6dbcdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 78.294423][ T9947] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000459879 [ 78.302373][ T9947] RDX: 000000000000002c RSI: 0000000020003000 RDI: 0000000000000002 [ 78.310324][ T9947] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 78.318273][ T9947] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d6dbce6d4 [ 78.326221][ T9947] R13: 00000000004bfc3a R14: 00000000004d1900 R15: 00000000ffffffff [ 78.334175][ T9947] Modules linked in: [ 78.338736][ T9947] ---[ end trace fc8a3e88dc25f1de ]--- [ 78.344221][ T9947] RIP: 0010:tls_sk_proto_close+0xe5/0x990 [ 78.349993][ T9947] Code: 0f 85 3f 08 00 00 49 8b 84 24 c0 02 00 00 4d 8d 75 14 4c 89 f2 48 c1 ea 03 48 89 85 50 ff ff ff 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 02 4c 89 f2 83 e2 07 38 d0 7f 08 84 c0 0f 85 2e 06 00 00 [ 78.369811][ T9947] RSP: 0018:ffff888097a37960 EFLAGS: 00010203 [ 78.375973][ T9947] RAX: dffffc0000000000 RBX: dffffc0000000000 RCX: ffffffff862cb00b [ 78.383947][ T9947] RDX: 0000000000000002 RSI: ffffffff862cad69 RDI: ffff888091b7a300 [ 78.391943][ T9947] RBP: ffff888097a37a18 R08: ffff888098270040 R09: ffffed101236f41a [ 78.400001][ T9947] R10: ffffed101236f419 R11: ffff888091b7a0cb R12: ffff888091b7a040 [ 78.408040][ T9947] R13: 0000000000000000 R14: 0000000000000014 R15: 0000000000000001 [ 78.416071][ T9947] FS: 00007f5d6dbce700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 78.424982][ T9947] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.431592][ T9947] CR2: 00007f44b0c85000 CR3: 000000009600c000 CR4: 00000000001406f0 [ 78.439582][ T9947] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 78.447680][ T9947] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 78.455675][ T9947] Kernel panic - not syncing: Fatal exception [ 78.462984][ T9947] Kernel Offset: disabled [ 78.467307][ T9947] Rebooting in 86400 seconds..