[ 63.826104][ T26] audit: type=1800 audit(1567821344.541:27): pid=9720 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 63.850968][ T26] audit: type=1800 audit(1567821344.541:28): pid=9720 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 64.596759][ T26] audit: type=1800 audit(1567821345.341:29): pid=9720 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 64.616875][ T26] audit: type=1800 audit(1567821345.341:30): pid=9720 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.166' (ECDSA) to the list of known hosts. syzkaller login: [ 72.138134][ T9870] IPVS: ftp: loaded support on port[0] = 21 [ 72.179194][ T9870] chnl_net:caif_netlink_parms(): no params data found [ 72.199930][ T9870] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.207256][ T9870] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.214903][ T9870] device bridge_slave_0 entered promiscuous mode [ 72.222131][ T9870] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.229191][ T9870] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.236704][ T9870] device bridge_slave_1 entered promiscuous mode [ 72.249434][ T9870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.259782][ T9870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.276035][ T9870] team0: Port device team_slave_0 added [ 72.282693][ T9870] team0: Port device team_slave_1 added [ 72.353427][ T9870] device hsr_slave_0 entered promiscuous mode [ 72.402224][ T9870] device hsr_slave_1 entered promiscuous mode [ 72.456712][ T9870] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.463786][ T9870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.471049][ T9870] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.478112][ T9870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.502442][ T9870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.512161][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.530221][ T17] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.538166][ T17] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.546063][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 72.555674][ T9870] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.564616][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.572945][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.579960][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.598838][ T9870] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.609269][ T9870] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.620965][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.629375][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.636503][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.644610][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready executing program [ 72.653375][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.661485][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.669625][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.677651][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.685157][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.698799][ T9870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.725530][ T9870] netlink: 24 bytes leftover after parsing attributes in process `syz-executor659'. [ 72.735413][ T9870] kasan: CONFIG_KASAN_INLINE enabled [ 72.740675][ T9870] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 72.749422][ T9870] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 72.756354][ T9870] CPU: 0 PID: 9870 Comm: syz-executor659 Not tainted 5.3.0-rc7+ #0 [ 72.764212][ T9870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 72.774254][ T9870] RIP: 0010:__list_del_entry_valid+0x85/0xf5 [ 72.780204][ T9870] Code: 0f 84 e1 00 00 00 48 b8 22 01 00 00 00 00 ad de 49 39 c4 0f 84 e2 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 e2 48 c1 ea 03 <80> 3c 02 00 75 53 49 8b 14 24 4c 39 f2 0f 85 99 00 00 00 49 8d 7d [ 72.799798][ T9870] RSP: 0018:ffff8880a1377440 EFLAGS: 00010246 [ 72.805848][ T9870] RAX: dffffc0000000000 RBX: ffff8880a2679680 RCX: ffffffff8159b24a [ 72.813797][ T9870] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8880a26799e8 [ 72.821784][ T9870] RBP: ffff8880a1377458 R08: 0000000000000004 R09: ffffed101426ee7b [ 72.829731][ T9870] R10: ffffed101426ee7a R11: 0000000000000003 R12: 0000000000000000 [ 72.837678][ T9870] R13: 0000000000000000 R14: ffff8880a26799e0 R15: ffff8880a2679940 [ 72.845627][ T9870] FS: 0000000000000000(0000) GS:ffff8880ae800000(0063) knlGS:0000000057d0e840 [ 72.854527][ T9870] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 72.861084][ T9870] CR2: 0000000020000600 CR3: 00000000a0082000 CR4: 00000000001406f0 [ 72.869033][ T9870] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 72.876981][ T9870] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 72.884927][ T9870] Call Trace: [ 72.888202][ T9870] cbs_destroy+0x7d/0x2a0 [ 72.892506][ T9870] ? cbs_init+0x25d/0x450 [ 72.896822][ T9870] ? cbs_dequeue_soft+0x410/0x410 [ 72.901819][ T9870] qdisc_create+0xbc6/0x1210 [ 72.906398][ T9870] ? tc_get_qdisc+0xc10/0xc10 [ 72.911052][ T9870] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 72.917274][ T9870] ? qdisc_match_from_root+0x18a/0x280 [ 72.922708][ T9870] tc_modify_qdisc+0x524/0x1c50 [ 72.927552][ T9870] ? qdisc_create+0x1210/0x1210 [ 72.932383][ T9870] ? rtnetlink_rcv_msg+0x1ea/0xb00 [ 72.937493][ T9870] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 72.943707][ T9870] ? qdisc_create+0x1210/0x1210 [ 72.948545][ T9870] rtnetlink_rcv_msg+0x463/0xb00 [ 72.953471][ T9870] ? rtnetlink_put_metrics+0x580/0x580 [ 72.958904][ T9870] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 72.964161][ T9870] ? __copy_skb_header+0x250/0x550 [ 72.969254][ T9870] netlink_rcv_skb+0x177/0x450 [ 72.973991][ T9870] ? rtnetlink_put_metrics+0x580/0x580 [ 72.979436][ T9870] ? netlink_ack+0xb30/0xb30 [ 72.984001][ T9870] ? netlink_deliver_tap+0x254/0xbf0 [ 72.989268][ T9870] rtnetlink_rcv+0x1d/0x30 [ 72.993660][ T9870] netlink_unicast+0x531/0x710 [ 72.998398][ T9870] ? netlink_attachskb+0x7c0/0x7c0 [ 73.003484][ T9870] ? _copy_from_iter_full+0x25d/0x8a0 [ 73.008829][ T9870] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 73.014522][ T9870] ? __check_object_size+0x3d/0x437 [ 73.019694][ T9870] netlink_sendmsg+0x8a5/0xd60 [ 73.024435][ T9870] ? netlink_unicast+0x710/0x710 [ 73.029349][ T9870] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 73.034870][ T9870] ? apparmor_socket_sendmsg+0x2a/0x30 [ 73.040306][ T9870] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 73.046520][ T9870] ? security_socket_sendmsg+0x8d/0xc0 [ 73.051954][ T9870] ? netlink_unicast+0x710/0x710 [ 73.056869][ T9870] sock_sendmsg+0xd7/0x130 [ 73.061268][ T9870] ___sys_sendmsg+0x803/0x920 [ 73.065922][ T9870] ? copy_msghdr_from_user+0x440/0x440 [ 73.071354][ T9870] ? _copy_to_user+0x118/0x160 [ 73.076107][ T9870] ? __might_fault+0x12b/0x1e0 [ 73.080844][ T9870] ? __kasan_check_read+0x11/0x20 [ 73.085858][ T9870] ? lock_downgrade+0x920/0x920 [ 73.090683][ T9870] ? __might_fault+0xfb/0x1e0 [ 73.095337][ T9870] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 73.101555][ T9870] ? __fget_light+0x1a9/0x230 [ 73.106211][ T9870] ? __fdget+0x1b/0x20 [ 73.110281][ T9870] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 73.116510][ T9870] __sys_sendmsg+0x105/0x1d0 [ 73.121079][ T9870] ? __sys_sendmsg_sock+0xd0/0xd0 [ 73.126080][ T9870] ? up_read+0x159/0x570 [ 73.130303][ T9870] ? security_file_ioctl+0x8d/0xc0 [ 73.135436][ T9870] ? entry_SYSENTER_compat+0x68/0x7f [ 73.140697][ T9870] __ia32_compat_sys_sendmsg+0x7a/0xb0 [ 73.146132][ T9870] do_fast_syscall_32+0x27b/0xdb3 [ 73.151131][ T9870] entry_SYSENTER_compat+0x70/0x7f [ 73.156216][ T9870] RIP: 0023:0xf7fdba29 [ 73.160269][ T9870] Code: b8 80 96 98 00 eb cc 8b 04 24 c3 8b 1c 24 c3 8b 34 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 73.179847][ T9870] RSP: 002b:00000000ff82f78c EFLAGS: 00000202 ORIG_RAX: 0000000000000172 [ 73.188249][ T9870] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000240 [ 73.196202][ T9870] RDX: 0000000000000000 RSI: 00000000f7fdb28c RDI: 0000000000000004 [ 73.204167][ T9870] RBP: 0000000057d0f018 R08: 0000000000000000 R09: 0000000000000000 [ 73.212115][ T9870] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 73.220060][ T9870] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 73.228112][ T9870] Modules linked in: [ 73.232170][ T9870] ---[ end trace 4e59b4e87f035ddf ]--- [ 73.237643][ T9870] RIP: 0010:__list_del_entry_valid+0x85/0xf5 [ 73.243663][ T9870] Code: 0f 84 e1 00 00 00 48 b8 22 01 00 00 00 00 ad de 49 39 c4 0f 84 e2 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 e2 48 c1 ea 03 <80> 3c 02 00 75 53 49 8b 14 24 4c 39 f2 0f 85 99 00 00 00 49 8d 7d [ 73.263310][ T9870] RSP: 0018:ffff8880a1377440 EFLAGS: 00010246 [ 73.269382][ T9870] RAX: dffffc0000000000 RBX: ffff8880a2679680 RCX: ffffffff8159b24a [ 73.277378][ T9870] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8880a26799e8 [ 73.285364][ T9870] RBP: ffff8880a1377458 R08: 0000000000000004 R09: ffffed101426ee7b [ 73.293345][ T9870] R10: ffffed101426ee7a R11: 0000000000000003 R12: 0000000000000000 [ 73.301355][ T9870] R13: 0000000000000000 R14: ffff8880a26799e0 R15: ffff8880a2679940 [ 73.309362][ T9870] FS: 0000000000000000(0000) GS:ffff8880ae800000(0063) knlGS:0000000057d0e840 [ 73.318320][ T9870] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 73.325090][ T9870] CR2: 0000000020000600 CR3: 00000000a0082000 CR4: 00000000001406f0 [ 73.333089][ T9870] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 73.341064][ T9870] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 73.349052][ T9870] Kernel panic - not syncing: Fatal exception [ 73.356395][ T9870] Kernel Offset: disabled [ 73.360715][ T9870] Rebooting in 86400 seconds..