[ 39.245058][ T26] audit: type=1800 audit(1556190057.151:27): pid=7565 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 39.268243][ T26] audit: type=1800 audit(1556190057.161:28): pid=7565 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 40.015353][ T26] audit: type=1800 audit(1556190057.991:29): pid=7565 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 40.037639][ T26] audit: type=1800 audit(1556190058.011:30): pid=7565 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.35' (ECDSA) to the list of known hosts. syzkaller login: [ 47.882055][ T7717] IPVS: ftp: loaded support on port[0] = 21 [ 47.939112][ T7717] chnl_net:caif_netlink_parms(): no params data found [ 47.972548][ T7717] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.982771][ T7717] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.992809][ T7717] device bridge_slave_0 entered promiscuous mode [ 48.002451][ T7717] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.010551][ T7717] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.020088][ T7717] device bridge_slave_1 entered promiscuous mode [ 48.037591][ T7717] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 48.047651][ T7717] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 48.068676][ T7717] team0: Port device team_slave_0 added [ 48.076111][ T7717] team0: Port device team_slave_1 added [ 48.156755][ T7717] device hsr_slave_0 entered promiscuous mode [ 48.205402][ T7717] device hsr_slave_1 entered promiscuous mode [ 48.292547][ T7717] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.301857][ T7717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.311229][ T7717] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.319743][ T7717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.359020][ T7717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.372767][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.384820][ T17] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.407510][ T17] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.418079][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 48.436689][ T7717] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.446966][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.457779][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.465422][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.485332][ T2829] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.495965][ T2829] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.504000][ T2829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.513606][ T2829] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.527600][ T2829] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.536643][ T2829] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.551307][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.566567][ T7717] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.584356][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.594035][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready executing program [ 48.613248][ T7717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.677206][ T7720] WARNING: CPU: 1 PID: 7720 at fs/attr.c:234 notify_change+0xca2/0xfb0 [ 48.686541][ T7720] Kernel panic - not syncing: panic_on_warn set ... [ 48.697082][ T7720] CPU: 1 PID: 7720 Comm: syz-executor293 Not tainted 5.1.0-rc6-next-20190424 #30 [ 48.708895][ T7720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 48.721352][ T7720] Call Trace: [ 48.725087][ T7720] dump_stack+0x172/0x1f0 [ 48.730355][ T7720] ? notify_change+0xc40/0xfb0 [ 48.735867][ T7720] panic+0x2cb/0x72b [ 48.740613][ T7720] ? __warn_printk+0xf3/0xf3 [ 48.745602][ T7720] ? notify_change+0xca2/0xfb0 [ 48.750718][ T7720] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 48.757977][ T7720] ? __warn.cold+0x5/0x46 [ 48.763988][ T7720] ? __warn+0xe8/0x1d0 [ 48.771605][ T7720] ? notify_change+0xca2/0xfb0 [ 48.777411][ T7720] __warn.cold+0x20/0x46 [ 48.782482][ T7720] ? notify_change+0xca2/0xfb0 [ 48.789171][ T7720] report_bug+0x263/0x2b0 [ 48.794450][ T7720] do_error_trap+0x11b/0x200 [ 48.800596][ T7720] do_invalid_op+0x37/0x50 [ 48.806889][ T7720] ? notify_change+0xca2/0xfb0 [ 48.812561][ T7720] invalid_op+0x14/0x20 [ 48.817258][ T7720] RIP: 0010:notify_change+0xca2/0xfb0 [ 48.823599][ T7720] Code: 54 5d 0a 00 e8 5f b6 b6 ff 4c 8b 7c 24 20 4c 89 ff e8 52 88 4c 01 89 de 4c 89 ff e8 38 a4 4c 01 e9 33 fa ff ff e8 3e b6 b6 ff <0f> 0b e9 42 f4 ff ff e8 32 b6 b6 ff 44 89 f3 4c 89 ea 48 b8 00 00 [ 48.848132][ T7720] RSP: 0018:ffff8880928b74c0 EFLAGS: 00010293 [ 48.854430][ T7720] RAX: ffff8880a7526080 RBX: 0000000000004200 RCX: ffffffff81ba6da2 [ 48.863773][ T7720] RDX: 0000000000000000 RSI: ffffffff81ba7962 RDI: 0000000000000007 [ 48.873532][ T7720] RBP: ffff8880928b7510 R08: ffff8880a7526080 R09: ffffed10147d6b87 [ 48.882133][ T7720] R10: ffffed10147d6b86 R11: ffff8880a3eb5c37 R12: ffff8880928b7560 [ 48.891057][ T7720] R13: ffff8880a3eb5b58 R14: 0000000000000000 R15: ffff8880928b75f0 [ 48.902963][ T7720] ? notify_change+0xe2/0xfb0 [ 48.907999][ T7720] ? notify_change+0xca2/0xfb0 [ 48.912942][ T7720] file_remove_privs+0x2a9/0x480 [ 48.918314][ T7720] ? dentry_needs_remove_privs.part.0+0x80/0x80 [ 48.924962][ T7720] ? lock_downgrade+0x880/0x880 [ 48.930434][ T7720] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 48.937432][ T7720] ? kasan_check_read+0x11/0x20 [ 48.942560][ T7720] __generic_file_write_iter+0x15e/0x630 [ 48.948211][ T7720] blkdev_write_iter+0x23a/0x440 [ 48.954195][ T7720] ? __blkdev_get+0x1660/0x1660 [ 48.959699][ T7720] do_iter_readv_writev+0x5e1/0x8e0 [ 48.969095][ T7720] ? common_file_perm+0x238/0x720 [ 48.974915][ T7720] ? vfs_dedupe_file_range+0x780/0x780 [ 48.983924][ T7720] ? apparmor_file_permission+0x25/0x30 [ 48.990098][ T7720] ? rw_verify_area+0x118/0x360 [ 48.995364][ T7720] do_iter_write+0x184/0x610 [ 49.000862][ T7720] ? rcu_read_lock_sched_held+0x110/0x130 [ 49.007970][ T7720] ? __kmalloc+0x5d5/0x740 [ 49.014041][ T7720] vfs_iter_write+0x77/0xb0 [ 49.018832][ T7720] iter_file_splice_write+0x662/0xbe0 [ 49.025141][ T7720] ? atime_needs_update+0x5f0/0x5f0 [ 49.030844][ T7720] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 49.038143][ T7720] ? rw_verify_area+0x118/0x360 [ 49.043550][ T7720] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 49.050222][ T7720] direct_splice_actor+0x126/0x1a0 [ 49.056116][ T7720] splice_direct_to_actor+0x369/0x970 [ 49.061925][ T7720] ? generic_pipe_buf_nosteal+0x10/0x10 [ 49.068411][ T7720] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 49.084003][ T7720] ? do_splice_to+0x190/0x190 [ 49.089233][ T7720] ? rw_verify_area+0x118/0x360 [ 49.094267][ T7720] do_splice_direct+0x1da/0x2a0 [ 49.099812][ T7720] ? splice_direct_to_actor+0x970/0x970 [ 49.105752][ T7720] ? rw_verify_area+0x118/0x360 [ 49.111700][ T7720] do_sendfile+0x597/0xd00 [ 49.118817][ T7720] ? do_compat_pwritev64+0x1c0/0x1c0 [ 49.125621][ T7720] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 49.133289][ T7720] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 49.140790][ T7720] __x64_sys_sendfile64+0x1dd/0x220 [ 49.146642][ T7720] ? __ia32_sys_sendfile+0x230/0x230 [ 49.152390][ T7720] ? do_syscall_64+0x26/0x670 [ 49.158197][ T7720] ? lockdep_hardirqs_on+0x418/0x5d0 [ 49.163904][ T7720] ? trace_hardirqs_on+0x67/0x230 [ 49.170247][ T7720] do_syscall_64+0x103/0x670 [ 49.177245][ T7720] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 49.184796][ T7720] RIP: 0033:0x44b1d9 [ 49.189294][ T7720] Code: e8 9c de 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 ab d2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 49.212400][ T7720] RSP: 002b:00007fc8cbfa4ce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 49.221362][ T7720] RAX: ffffffffffffffda RBX: 00000000006ddc48 RCX: 000000000044b1d9 [ 49.230942][ T7720] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 49.240420][ T7720] RBP: 00000000006ddc40 R08: 0000000000000000 R09: 0000000000000000 [ 49.257667][ T7720] R10: 0020000102000007 R11: 0000000000000246 R12: 00000000006ddc4c [ 49.268556][ T7720] R13: 00007ffd780be27f R14: 00007fc8cbfa59c0 R15: 000000000000002d [ 49.283107][ T7720] Kernel Offset: disabled [ 49.290383][ T7720] Rebooting in 86400 seconds..