[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 37.870014][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 37.870027][ T26] audit: type=1800 audit(1553873404.503:29): pid=7432 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 37.901622][ T26] audit: type=1800 audit(1553873404.503:30): pid=7432 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.67' (ECDSA) to the list of known hosts. syzkaller login: [ 92.385837][ T7584] IPVS: ftp: loaded support on port[0] = 21 [ 92.425042][ T7584] chnl_net:caif_netlink_parms(): no params data found [ 92.448860][ T7584] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.456146][ T7584] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.463667][ T7584] device bridge_slave_0 entered promiscuous mode [ 92.470941][ T7584] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.478339][ T7584] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.485854][ T7584] device bridge_slave_1 entered promiscuous mode [ 92.499772][ T7584] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 92.509426][ T7584] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 92.523312][ T7584] team0: Port device team_slave_0 added [ 92.530026][ T7584] team0: Port device team_slave_1 added [ 92.596441][ T7584] device hsr_slave_0 entered promiscuous mode [ 92.646098][ T7584] device hsr_slave_1 entered promiscuous mode [ 92.719582][ T7584] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.726684][ T7584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.733947][ T7584] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.741041][ T7584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.763480][ T7584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.773117][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.792219][ T17] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.799765][ T17] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.807675][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 92.817393][ T7584] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.826553][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.834777][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.841866][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.851253][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.859583][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.866675][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.879953][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 92.888547][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 92.899177][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 92.909670][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready executing program [ 92.920560][ T7584] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.931963][ T7584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 92.940117][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.954759][ T7584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.966859][ T7588] kasan: CONFIG_KASAN_INLINE enabled [ 92.972167][ T7588] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 92.980718][ T7588] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 92.987662][ T7588] CPU: 0 PID: 7588 Comm: syz-executor559 Not tainted 5.1.0-rc2-next-20190329 #14 [ 92.996742][ T7588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 93.006804][ T7588] RIP: 0010:load_elf_binary+0x167c/0x5b10 [ 93.012508][ T7588] Code: b8 fe ff ff e8 65 8c db ff e8 70 23 a3 ff 48 8b 85 f8 fe ff ff 48 8d 78 20 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 b2 3e 00 00 4c 8b bd f8 fe ff ff be 04 00 00 00 [ 93.032204][ T7588] RSP: 0018:ffff88808db17bf8 EFLAGS: 00010207 [ 93.038249][ T7588] RAX: dffffc0000000000 RBX: 00000000fffffffe RCX: 1ffffffff12be8fb [ 93.046198][ T7588] RDX: 0000000000000003 RSI: ffffffff81cd3e10 RDI: 000000000000001e [ 93.054149][ T7588] RBP: ffff88808db17d78 R08: ffff88808fc746c0 R09: fffffbfff11a6d55 [ 93.062102][ T7588] R10: fffffbfff11a6d54 R11: ffffffff88d36aa3 R12: 0000000000000000 [ 93.070056][ T7588] R13: ffff8880905992c0 R14: ffff8880962d7240 R15: ffff88809433aac0 [ 93.078264][ T7588] FS: 00007f00b549e700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 93.087177][ T7588] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.093737][ T7588] CR2: 0000000020001140 CR3: 00000000902b1000 CR4: 00000000001406f0 [ 93.101691][ T7588] Call Trace: [ 93.104978][ T7588] ? load_misc_binary+0xb1/0x1161 [ 93.110011][ T7588] ? mark_held_locks+0xa0/0xf0 [ 93.114758][ T7588] ? do_raw_read_unlock+0x3f/0x70 [ 93.119776][ T7588] ? notesize.isra.0+0x80/0x80 [ 93.124785][ T7588] ? lock_downgrade+0x880/0x880 [ 93.129659][ T7588] ? search_binary_handler+0x18e/0x570 [ 93.135126][ T7588] ? kasan_check_write+0x14/0x20 [ 93.140066][ T7588] search_binary_handler+0x17f/0x570 [ 93.145338][ T7588] __do_execve_file.isra.0+0x1394/0x23f0 [ 93.150954][ T7588] ? copy_strings_kernel+0x110/0x110 [ 93.156311][ T7588] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 93.162546][ T7588] ? getname_flags+0x277/0x5b0 [ 93.167366][ T7588] __x64_sys_execve+0x8f/0xc0 [ 93.172046][ T7588] do_syscall_64+0x103/0x610 [ 93.176623][ T7588] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 93.182548][ T7588] RIP: 0033:0x447139 [ 93.186427][ T7588] Code: e8 4c 15 03 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb 0e fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 93.206055][ T7588] RSP: 002b:00007f00b549dce8 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 93.214799][ T7588] RAX: ffffffffffffffda RBX: 00000000006dcc28 RCX: 0000000000447139 [ 93.222863][ T7588] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 93.231002][ T7588] RBP: 00000000006dcc20 R08: 0000000000000000 R09: 0000000000000000 [ 93.239057][ T7588] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dcc2c [ 93.247009][ T7588] R13: 00007ffcb2d5610f R14: 00007f00b549e9c0 R15: 0000000000000000 [ 93.255238][ T7588] Modules linked in: [ 93.260873][ T7588] ---[ end trace 2e60703d22657961 ]--- [ 93.266462][ T7588] RIP: 0010:load_elf_binary+0x167c/0x5b10 [ 93.272170][ T7588] Code: b8 fe ff ff e8 65 8c db ff e8 70 23 a3 ff 48 8b 85 f8 fe ff ff 48 8d 78 20 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 b2 3e 00 00 4c 8b bd f8 fe ff ff be 04 00 00 00 [ 93.292026][ T7588] RSP: 0018:ffff88808db17bf8 EFLAGS: 00010207 [ 93.298091][ T7588] RAX: dffffc0000000000 RBX: 00000000fffffffe RCX: 1ffffffff12be8fb [ 93.306098][ T7588] RDX: 0000000000000003 RSI: ffffffff81cd3e10 RDI: 000000000000001e [ 93.314069][ T7588] RBP: ffff88808db17d78 R08: ffff88808fc746c0 R09: fffffbfff11a6d55 [ 93.322108][ T7588] R10: fffffbfff11a6d54 R11: ffffffff88d36aa3 R12: 0000000000000000 [ 93.330192][ T7588] R13: ffff8880905992c0 R14: ffff8880962d7240 R15: ffff88809433aac0 [ 93.338191][ T7588] FS: 00007f00b549e700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 93.347263][ T7588] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.353836][ T7588] CR2: 0000000020001140 CR3: 00000000902b1000 CR4: 00000000001406f0 [ 93.361856][ T7588] Kernel panic - not syncing: Fatal exception [ 93.368610][ T7588] Kernel Offset: disabled [ 93.372931][ T7588] Rebooting in 86400 seconds..