[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 68.247202][ T26] audit: type=1800 audit(1583012078.415:25): pid=9477 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 68.267196][ T26] audit: type=1800 audit(1583012078.415:26): pid=9477 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 68.307107][ T26] audit: type=1800 audit(1583012078.415:27): pid=9477 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.15' (ECDSA) to the list of known hosts. 2020/02/29 21:34:51 parsed 1 programs 2020/02/29 21:34:53 executed programs: 0 syzkaller login: [ 83.240302][ T9649] IPVS: ftp: loaded support on port[0] = 21 [ 83.295330][ T9649] chnl_net:caif_netlink_parms(): no params data found [ 83.332050][ T9649] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.339365][ T9649] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.347051][ T9649] device bridge_slave_0 entered promiscuous mode [ 83.355645][ T9649] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.362744][ T9649] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.370535][ T9649] device bridge_slave_1 entered promiscuous mode [ 83.387233][ T9649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.398504][ T9649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.417384][ T9649] team0: Port device team_slave_0 added [ 83.424926][ T9649] team0: Port device team_slave_1 added [ 83.438893][ T9649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.445829][ T9649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.471979][ T9649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.484208][ T9649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.491192][ T9649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.517145][ T9649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.560310][ T9649] device hsr_slave_0 entered promiscuous mode [ 83.608028][ T9649] device hsr_slave_1 entered promiscuous mode [ 83.709115][ T9649] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.750654][ T9649] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.800376][ T9649] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.839933][ T9649] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.902168][ T9649] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.909323][ T9649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.916894][ T9649] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.924004][ T9649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.964259][ T9649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.979434][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.990273][ T17] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.998184][ T17] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.005995][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 84.019183][ T9649] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.029857][ T3870] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.038533][ T3870] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.045587][ T3870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.056170][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.065345][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.072427][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.099987][ T3870] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.108818][ T3870] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.117080][ T3870] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.125633][ T3870] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.134605][ T3870] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.146519][ T9649] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.163505][ T2710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.171023][ T2710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.183718][ T9649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.202392][ T3870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.221975][ T2710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.230213][ T2710] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.238792][ T2710] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.249055][ T9649] device veth0_vlan entered promiscuous mode [ 84.261037][ T9649] device veth1_vlan entered promiscuous mode [ 84.282088][ T3870] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.290604][ T3870] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.299284][ T3870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.311908][ T9649] device veth0_macvtap entered promiscuous mode [ 84.321751][ T9649] device veth1_macvtap entered promiscuous mode [ 84.338949][ T9649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.346278][ T2710] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.355531][ T2710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.367463][ T9649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.375340][ T3870] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.384473][ T3870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.672850][ T9655] BUG: unable to handle page fault for address: ffffed1018556887 [ 84.680608][ T9655] #PF: supervisor read access in kernel mode [ 84.686587][ T9655] #PF: error_code(0x0000) - not-present page [ 84.692565][ T9655] PGD 21ffef067 P4D 21ffef067 PUD 12fff6067 PMD 0 [ 84.699069][ T9655] Oops: 0000 [#1] PREEMPT SMP KASAN [ 84.704240][ T9655] CPU: 0 PID: 9655 Comm: syz-executor.0 Not tainted 5.6.0-rc3-syzkaller #0 [ 84.712811][ T9655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 84.722853][ T9655] RIP: 0010:ethnl_update_bitset32.part.0+0x8be/0x1820 [ 84.729618][ T9655] Code: 45 85 e4 0f 84 aa 03 00 00 e8 6e 31 05 fb 48 8b 85 c8 fe ff ff 4e 8d 2c a8 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <0f> b6 14 02 4c 89 e8 83 e0 07 83 c0 03 38 d0 7c 0c 84 d2 74 08 4c [ 84.749201][ T9655] RSP: 0018:ffffc900022c7238 EFLAGS: 00010a06 [ 84.755272][ T9655] RAX: dffffc0000000000 RBX: ffff8880a2ab4438 RCX: ffffffff867055d4 [ 84.763231][ T9655] RDX: 1ffff11018556887 RSI: ffffffff867055e2 RDI: 0000000000000005 [ 84.771190][ T9655] RBP: ffffc900022c73a0 R08: ffff888090698640 R09: ffffc900022c7308 [ 84.779136][ T9655] R10: fffff52000458e66 R11: ffffc900022c7337 R12: 0000000000000010 [ 84.787081][ T9655] R13: ffff8880c2ab4438 R14: ffff8880a2ab4448 R15: ffffc900022c7378 [ 84.795039][ T9655] FS: 0000000000000000(0000) GS:ffff8880ae800000(0063) knlGS:000000000a009900 [ 84.803961][ T9655] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 84.810518][ T9655] CR2: ffffed1018556887 CR3: 0000000090ad6000 CR4: 00000000001406f0 [ 84.818474][ T9655] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 84.826435][ T9655] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 84.834378][ T9655] Call Trace: [ 84.837666][ T9655] ? __mutex_lock+0x458/0x13c0 [ 84.842406][ T9655] ? lock_downgrade+0x920/0x920 [ 84.847254][ T9655] ? ethnl_bitmap32_clear+0x390/0x390 [ 84.852605][ T9655] ? mutex_trylock+0x2d0/0x2d0 [ 84.857351][ T9655] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 84.863570][ T9655] ? ethnl_default_notify+0x6b0/0x6b0 [ 84.868926][ T9655] ? sock_sendmsg+0xd7/0x130 [ 84.873507][ T9655] ethnl_update_bitset+0x4d/0x67 [ 84.878432][ T9655] ethnl_set_linkmodes+0x461/0xc30 [ 84.883518][ T9655] ? lock_downgrade+0x920/0x920 [ 84.888346][ T9655] ? linkmodes_prepare_data+0x2a0/0x2a0 [ 84.893867][ T9655] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 84.900085][ T9655] ? apparmor_cred_prepare+0x7b0/0x7b0 [ 84.905529][ T9655] ? kfree_skbmem+0xfb/0x1c0 [ 84.910096][ T9655] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 84.916324][ T9655] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 84.922556][ T9655] ? security_capable+0x95/0xc0 [ 84.927383][ T9655] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 84.933612][ T9655] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x300 [ 84.939933][ T9655] genl_rcv_msg+0x67d/0xea0 [ 84.944407][ T9655] ? genl_rcv_msg+0x67d/0xea0 [ 84.949068][ T9655] ? genl_family_rcv_msg_attrs_parse+0x300/0x300 [ 84.955371][ T9655] ? __kasan_check_read+0x11/0x20 [ 84.960385][ T9655] ? find_held_lock+0x35/0x130 [ 84.965123][ T9655] netlink_rcv_skb+0x177/0x450 [ 84.969865][ T9655] ? genl_family_rcv_msg_attrs_parse+0x300/0x300 [ 84.976170][ T9655] ? netlink_ack+0xb50/0xb50 [ 84.980739][ T9655] ? __kasan_check_write+0x14/0x20 [ 84.985825][ T9655] ? netlink_deliver_tap+0x248/0xbf0 [ 84.991093][ T9655] genl_rcv+0x29/0x40 [ 84.995050][ T9655] netlink_unicast+0x59e/0x7e0 [ 84.999790][ T9655] ? netlink_attachskb+0x870/0x870 [ 85.004873][ T9655] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 85.010567][ T9655] ? __check_object_size+0x3d/0x437 [ 85.015742][ T9655] netlink_sendmsg+0x91c/0xea0 [ 85.020482][ T9655] ? netlink_unicast+0x7e0/0x7e0 [ 85.025407][ T9655] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 85.030940][ T9655] ? apparmor_socket_sendmsg+0x2a/0x30 [ 85.036386][ T9655] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 85.042600][ T9655] ? security_socket_sendmsg+0x8d/0xc0 [ 85.048041][ T9655] ? netlink_unicast+0x7e0/0x7e0 [ 85.052972][ T9655] sock_sendmsg+0xd7/0x130 [ 85.057412][ T9655] ____sys_sendmsg+0x753/0x880 [ 85.062163][ T9655] ? kernel_sendmsg+0x50/0x50 [ 85.066864][ T9655] ? __kasan_check_read+0x11/0x20 [ 85.071875][ T9655] ___sys_sendmsg+0x100/0x170 [ 85.076535][ T9655] ? sendmsg_copy_msghdr+0x70/0x70 [ 85.081627][ T9655] ? posix_get_monotonic_timespec+0x75/0x290 [ 85.087647][ T9655] ? find_held_lock+0x35/0x130 [ 85.092413][ T9655] ? __might_fault+0x12b/0x1e0 [ 85.097196][ T9655] ? lock_downgrade+0x920/0x920 [ 85.102060][ T9655] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 85.108285][ T9655] ? __fget_light+0x1ad/0x270 [ 85.112944][ T9655] ? __fdget+0x1b/0x20 [ 85.116985][ T9655] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 85.123199][ T9655] __sys_sendmsg+0x105/0x1d0 [ 85.127767][ T9655] ? __sys_sendmsg_sock+0xc0/0xc0 [ 85.132770][ T9655] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 85.138215][ T9655] ? do_fast_syscall_32+0xd1/0xe16 [ 85.143332][ T9655] ? entry_SYSENTER_compat+0x70/0x7f [ 85.148592][ T9655] ? do_fast_syscall_32+0xd1/0xe16 [ 85.153686][ T9655] __ia32_compat_sys_sendmsg+0x7a/0xb0 [ 85.159126][ T9655] do_fast_syscall_32+0x27b/0xe16 [ 85.164128][ T9655] entry_SYSENTER_compat+0x70/0x7f [ 85.169211][ T9655] RIP: 0023:0xf7f30e39 [ 85.173255][ T9655] Code: 1d 00 00 00 89 d3 5b 5e 5d c3 8b 04 24 c3 8b 1c 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 85.192833][ T9655] RSP: 002b:00000000ffe1715c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 85.201223][ T9655] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000240 [ 85.209172][ T9655] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 85.217116][ T9655] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 85.225071][ T9655] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 85.233019][ T9655] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 85.240983][ T9655] Modules linked in: [ 85.244861][ T9655] CR2: ffffed1018556887 [ 85.249013][ T9655] ---[ end trace 08e5931876ab516d ]--- [ 85.254474][ T9655] RIP: 0010:ethnl_update_bitset32.part.0+0x8be/0x1820 [ 85.261217][ T9655] Code: 45 85 e4 0f 84 aa 03 00 00 e8 6e 31 05 fb 48 8b 85 c8 fe ff ff 4e 8d 2c a8 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <0f> b6 14 02 4c 89 e8 83 e0 07 83 c0 03 38 d0 7c 0c 84 d2 74 08 4c [ 85.280795][ T9655] RSP: 0018:ffffc900022c7238 EFLAGS: 00010a06 [ 85.286835][ T9655] RAX: dffffc0000000000 RBX: ffff8880a2ab4438 RCX: ffffffff867055d4 [ 85.294780][ T9655] RDX: 1ffff11018556887 RSI: ffffffff867055e2 RDI: 0000000000000005 [ 85.302756][ T9655] RBP: ffffc900022c73a0 R08: ffff888090698640 R09: ffffc900022c7308 [ 85.310703][ T9655] R10: fffff52000458e66 R11: ffffc900022c7337 R12: 0000000000000010 [ 85.318684][ T9655] R13: ffff8880c2ab4438 R14: ffff8880a2ab4448 R15: ffffc900022c7378 [ 85.326629][ T9655] FS: 0000000000000000(0000) GS:ffff8880ae800000(0063) knlGS:000000000a009900 [ 85.335553][ T9655] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 85.342113][ T9655] CR2: ffffed1018556887 CR3: 0000000090ad6000 CR4: 00000000001406f0 [ 85.350063][ T9655] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 85.358010][ T9655] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 85.365981][ T9655] Kernel panic - not syncing: Fatal exception [ 85.373004][ T9655] Kernel Offset: disabled [ 85.377321][ T9655] Rebooting in 86400 seconds..