[ 73.406995][ T27] audit: type=1800 audit(1581310609.636:25): pid=9699 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 74.312904][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 74.312916][ T27] audit: type=1800 audit(1581310610.546:29): pid=9699 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 74.339692][ T27] audit: type=1800 audit(1581310610.556:30): pid=9699 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.86' (ECDSA) to the list of known hosts. syzkaller login: [ 87.788089][ T9852] IPVS: ftp: loaded support on port[0] = 21 [ 87.846793][ T9852] chnl_net:caif_netlink_parms(): no params data found [ 87.882749][ T9852] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.890558][ T9852] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.899213][ T9852] device bridge_slave_0 entered promiscuous mode [ 87.908562][ T9852] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.915695][ T9852] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.923782][ T9852] device bridge_slave_1 entered promiscuous mode [ 87.940986][ T9852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.952490][ T9852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.971734][ T9852] team0: Port device team_slave_0 added [ 87.979175][ T9852] team0: Port device team_slave_1 added [ 87.993919][ T9852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.001156][ T9852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.027389][ T9852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.039957][ T9852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.047057][ T9852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.073156][ T9852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.149878][ T9852] device hsr_slave_0 entered promiscuous mode [ 88.218791][ T9852] device hsr_slave_1 entered promiscuous mode [ 88.340598][ T9852] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.390607][ T9852] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.440465][ T9852] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.500355][ T9852] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.569388][ T9852] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.576732][ T9852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.584678][ T9852] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.591824][ T9852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.637196][ T9852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.653350][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.664503][ T2691] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.672977][ T2691] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.682133][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 88.696878][ T9852] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.707826][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.716341][ T2686] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.723510][ T2686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.740031][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.748934][ T2691] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.755973][ T2691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.778888][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.788314][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.798186][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.806868][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.818320][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.831112][ T9852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.851433][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.859131][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.872912][ T9852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.891479][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.901883][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.923849][ T9852] device veth0_vlan entered promiscuous mode [ 88.930563][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.940392][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.950640][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.959023][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.971927][ T9852] device veth1_vlan entered promiscuous mode [ 88.992174][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.002403][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.010620][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.019817][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.030897][ T9852] device veth0_macvtap entered promiscuous mode [ 89.042103][ T9852] device veth1_macvtap entered promiscuous mode [ 89.060402][ T9852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.068469][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.076611][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.084927][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.094213][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.107286][ T9852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.115544][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.124900][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready executing program [ 89.234003][ T9856] xt_hashlimit: size too large, truncated to 1048576 [ 89.241104][ T9856] xt_hashlimit: max too large, truncated to 1048576 [ 89.263882][ T9856] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 89.393839][ T9858] xt_hashlimit: size too large, truncated to 1048576 [ 89.402394][ T9858] xt_hashlimit: max too large, truncated to 1048576 [ 89.444321][ T9858] ------------[ cut here ]------------ [ 89.450166][ T9858] proc_dir_entry 'ip6t_hashlimit/syzkaller1' already registered [ 89.458234][ T9858] WARNING: CPU: 1 PID: 9858 at fs/proc/generic.c:362 proc_register+0x41e/0x590 [ 89.467176][ T9858] Kernel panic - not syncing: panic_on_warn set ... [ 89.473784][ T9858] CPU: 1 PID: 9858 Comm: syz-executor532 Not tainted 5.5.0-next-20200210-syzkaller #0 [ 89.483334][ T9858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 89.493428][ T9858] Call Trace: [ 89.497021][ T9858] dump_stack+0x197/0x210 [ 89.501368][ T9858] ? proc_register+0x340/0x590 [ 89.506149][ T9858] panic+0x2e3/0x75c [ 89.510069][ T9858] ? add_taint.cold+0x16/0x16 [ 89.514782][ T9858] ? __kasan_check_write+0x14/0x20 [ 89.519919][ T9858] ? __warn.cold+0x14/0x3e [ 89.524350][ T9858] ? __warn+0xd9/0x1cf [ 89.528564][ T9858] ? proc_register+0x41e/0x590 [ 89.533353][ T9858] __warn.cold+0x2f/0x3e [ 89.537633][ T9858] ? proc_register+0x41e/0x590 [ 89.542421][ T9858] report_bug+0x289/0x300 [ 89.546771][ T9858] do_error_trap+0x11b/0x200 [ 89.551378][ T9858] do_invalid_op+0x37/0x50 [ 89.555808][ T9858] ? proc_register+0x41e/0x590 [ 89.560598][ T9858] invalid_op+0x23/0x30 [ 89.564968][ T9858] RIP: 0010:proc_register+0x41e/0x590 [ 89.570371][ T9858] Code: ff df 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 5a 01 00 00 48 8b 45 d0 48 c7 c7 e0 1e 59 88 48 8b b0 d0 00 00 00 e8 11 af 5e ff <0f> 0b 48 c7 c7 e0 44 cb 89 e8 24 77 08 06 48 8b 4d a0 48 b8 00 00 [ 89.590166][ T9858] RSP: 0018:ffffc90002117550 EFLAGS: 00010286 [ 89.596291][ T9858] RAX: 0000000000000000 RBX: ffff8880a88a0330 RCX: 0000000000000000 [ 89.604290][ T9858] RDX: 0000000000000000 RSI: ffffffff815ec996 RDI: fffff52000422e9c [ 89.612281][ T9858] RBP: ffffc900021175b8 R08: ffff8880a45343c0 R09: fffffbfff16a376e [ 89.620261][ T9858] R10: fffffbfff16a376d R11: ffffffff8b51bb6f R12: ffff88809ce38b80 [ 89.630336][ T9858] R13: 0000000000000000 R14: ffff88809de6f9f8 R15: dffffc0000000000 [ 89.638346][ T9858] ? vprintk_func+0x86/0x189 [ 89.643044][ T9858] proc_create_seq_private+0x12b/0x190 [ 89.648529][ T9858] ? proc_create+0x40/0x40 [ 89.653077][ T9858] ? lockdep_init_map+0x1be/0x6d0 [ 89.658129][ T9858] hashlimit_mt_check_common.isra.0+0xb30/0x1680 [ 89.664489][ T9858] hashlimit_mt_check_v1+0x325/0x3ab [ 89.669799][ T9858] ? hashlimit_mt_check_v2+0x3b0/0x3b0 [ 89.675265][ T9858] ? lock_downgrade+0x920/0x920 [ 89.680129][ T9858] ? xt_find_match+0xa6/0x280 [ 89.684826][ T9858] ? mutex_trylock+0x2d0/0x2d0 [ 89.689702][ T9858] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 89.695876][ T9858] ? hashlimit_mt_check_v2+0x3b0/0x3b0 [ 89.701476][ T9858] xt_check_match+0x280/0x690 [ 89.706178][ T9858] ? xt_check_target+0x690/0x690 [ 89.711133][ T9858] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 89.717408][ T9858] ? mutex_unlock+0xd/0x10 [ 89.721843][ T9858] ? xt_find_match+0x73/0x280 [ 89.726562][ T9858] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 89.732965][ T9858] find_check_entry.isra.0+0x389/0x9d0 [ 89.738476][ T9858] ? __do_replace+0x950/0x950 [ 89.743620][ T9858] ? lockdep_hardirqs_on+0x421/0x5e0 [ 89.748927][ T9858] ? trace_hardirqs_on+0x67/0x240 [ 89.753987][ T9858] ? kvfree+0x4a/0x60 [ 89.758037][ T9858] translate_table+0xd15/0x1860 [ 89.762947][ T9858] ? compat_do_ip6t_get_ctl+0x9a0/0x9a0 [ 89.768511][ T9858] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 89.774884][ T9858] ? _copy_from_user+0x12c/0x1a0 [ 89.779869][ T9858] do_ip6t_set_ctl+0x2fe/0x4c8 [ 89.784669][ T9858] ? compat_do_ip6t_set_ctl+0x170/0x170 [ 89.790256][ T9858] ? mutex_unlock+0xd/0x10 [ 89.794695][ T9858] ? nf_sockopt_find.constprop.0+0x226/0x290 [ 89.800709][ T9858] nf_setsockopt+0x77/0xd0 [ 89.805144][ T9858] ipv6_setsockopt+0x147/0x180 [ 89.809946][ T9858] rawv6_setsockopt+0x5e/0x150 [ 89.814897][ T9858] sock_common_setsockopt+0x94/0xd0 [ 89.820224][ T9858] __sys_setsockopt+0x261/0x4c0 [ 89.825114][ T9858] ? sock_create_kern+0x50/0x50 [ 89.829985][ T9858] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 89.835678][ T9858] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 89.841159][ T9858] ? do_syscall_64+0x26/0x790 [ 89.845845][ T9858] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 89.851930][ T9858] ? do_syscall_64+0x26/0x790 [ 89.856624][ T9858] __x64_sys_setsockopt+0xbe/0x150 [ 89.861748][ T9858] do_syscall_64+0xfa/0x790 [ 89.866288][ T9858] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 89.872191][ T9858] RIP: 0033:0x4482b9 [ 89.876119][ T9858] Code: e8 ec 14 03 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 9b 0c fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 89.895832][ T9858] RSP: 002b:00007f5cbd09cda8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 89.904273][ T9858] RAX: ffffffffffffffda RBX: 00000000006dec48 RCX: 00000000004482b9 [ 89.913481][ T9858] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 89.921460][ T9858] RBP: 00000000006dec40 R08: 0000000000000001 R09: 0000000000000000 [ 89.929541][ T9858] R10: 0000000020000000 R11: 0000000000000246 R12: 00000000006dec4c [ 89.937633][ T9858] R13: 0000000020000000 R14: 00000000004b09c0 R15: 000000000000002d [ 89.947405][ T9858] Kernel Offset: disabled [ 89.951884][ T9858] Rebooting in 86400 seconds..