[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 33.661721] audit: type=1800 audit(1539143793.693:25): pid=5656 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 33.687692] audit: type=1800 audit(1539143793.693:26): pid=5656 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 33.715561] audit: type=1800 audit(1539143793.693:27): pid=5656 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.3' (ECDSA) to the list of known hosts. 2018/10/10 03:56:41 parsed 1 programs 2018/10/10 03:56:43 executed programs: 0 syzkaller login: [ 43.470372] IPVS: ftp: loaded support on port[0] = 21 [ 43.474701] IPVS: ftp: loaded support on port[0] = 21 [ 43.485622] IPVS: ftp: loaded support on port[0] = 21 [ 43.498106] IPVS: ftp: loaded support on port[0] = 21 [ 43.509056] IPVS: ftp: loaded support on port[0] = 21 [ 43.510343] IPVS: ftp: loaded support on port[0] = 21 [ 44.536909] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.543476] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.555623] device bridge_slave_0 entered promiscuous mode [ 44.563201] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.570342] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.577915] device bridge_slave_0 entered promiscuous mode [ 44.586559] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.592920] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.600268] device bridge_slave_0 entered promiscuous mode [ 44.607815] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.614223] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.621848] device bridge_slave_0 entered promiscuous mode [ 44.634921] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.641296] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.651384] device bridge_slave_0 entered promiscuous mode [ 44.660671] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.671012] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.678306] device bridge_slave_1 entered promiscuous mode [ 44.685706] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.692055] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.700675] device bridge_slave_1 entered promiscuous mode [ 44.709133] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.716107] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.723587] device bridge_slave_1 entered promiscuous mode [ 44.737496] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.743857] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.751583] device bridge_slave_1 entered promiscuous mode [ 44.759533] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.771375] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.782024] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.793146] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.805535] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.812945] device bridge_slave_0 entered promiscuous mode [ 44.819604] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.826953] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.833293] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.843018] device bridge_slave_1 entered promiscuous mode [ 44.850422] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.860538] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.871008] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.881756] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.889821] device bridge_slave_1 entered promiscuous mode [ 44.896470] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.916179] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.923422] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.955134] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.968640] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.022430] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 45.032401] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.061732] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 45.094422] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 45.127375] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 45.141225] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 45.153536] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 45.179307] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 45.201145] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.209361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.221145] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.229902] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 45.241802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.259801] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 45.274971] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 45.285606] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.293908] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.307911] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 45.320703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.330127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.348961] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.365745] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 45.373869] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.383518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.395225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.404911] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.415411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.436780] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.453981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.468782] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.483051] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.491298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.503463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.519428] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 45.526935] team0: Port device team_slave_0 added [ 45.539452] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 45.548371] team0: Port device team_slave_0 added [ 45.568487] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.595326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.607525] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 45.615179] team0: Port device team_slave_1 added [ 45.630204] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 45.642157] team0: Port device team_slave_1 added [ 45.665587] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 45.676248] team0: Port device team_slave_0 added [ 45.681455] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 45.693508] team0: Port device team_slave_0 added [ 45.702044] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 45.715089] team0: Port device team_slave_0 added [ 45.723920] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.735369] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.747244] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 45.754854] team0: Port device team_slave_1 added [ 45.768333] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 45.775943] team0: Port device team_slave_1 added [ 45.786918] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 45.794107] team0: Port device team_slave_1 added [ 45.811093] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.823875] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.838340] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 45.845785] team0: Port device team_slave_0 added [ 45.852560] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 45.865416] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.872907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.882447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.890847] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.900999] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 45.913275] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 45.924329] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 45.935100] team0: Port device team_slave_1 added [ 45.941196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.953466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.962112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.973602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.981368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.989118] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.000062] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 46.009206] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 46.023374] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 46.039067] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.051546] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.067153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.075103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.082737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.090732] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.098208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.105875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.116534] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.135464] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.153901] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 46.164388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.172718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.184013] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 46.194003] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 46.205412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.213236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.221750] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.231300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.245878] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 46.254211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.270296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.280863] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 46.296725] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.305152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.315936] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 46.326401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.336031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.652850] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.659280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.665968] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.672324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.682194] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.739082] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.745508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.752135] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.758538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.766881] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.850123] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.856537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.863157] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.869542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.878695] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.896460] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.902874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.909592] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.915970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.925704] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.936287] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.942648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.949305] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.955686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.975748] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.010876] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.017295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.023933] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.030332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.039065] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.221823] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.234962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.242073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.256316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.263262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.270794] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.685037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.850333] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 48.861041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.872591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.016853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.038167] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 49.067196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.080022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.088387] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 49.095218] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 49.102648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.117677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.230210] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 49.249684] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 49.260871] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 49.276409] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.312747] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 49.322523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.331679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.342608] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 49.361397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.369067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.439092] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 49.446972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.453933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.475172] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 49.482630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.494987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.526166] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 49.532330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.546592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.572251] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.587045] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.619152] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.710141] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.727073] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.581484] ------------[ cut here ]------------ [ 50.586283] kernel BUG at net/core/dev.c:2880! [ 50.590935] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 50.596307] CPU: 1 PID: 7330 Comm: syz-executor4 Not tainted 4.19.0-rc6+ #253 [ 50.603575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.612944] RIP: 0010:skb_checksum_help+0x9e3/0xbb0 [ 50.617963] Code: 85 00 ff ff ff 48 c1 e8 03 42 80 3c 28 00 0f 84 09 fb ff ff 48 8b bd 00 ff ff ff e8 97 a8 b9 fb e9 f8 fa ff ff e8 2d 09 76 fb <0f> 0b 48 8b bd 28 ff ff ff e8 1f a8 b9 fb e9 b1 f6 ff ff 48 89 cf [ 50.636868] RSP: 0018:ffff8801d83a6f60 EFLAGS: 00010293 [ 50.642244] RAX: ffff8801b9834380 RBX: ffff8801b9f8d8c0 RCX: ffffffff8608c6d7 [ 50.649514] RDX: 0000000000000000 RSI: ffffffff8608cc63 RDI: 0000000000000006 [ 50.656788] RBP: ffff8801d83a7068 R08: ffff8801b9834380 R09: 0000000000000000 [ 50.664070] R10: ffff8801d83a76d8 R11: 0000000000000000 R12: 0000000000000001 [ 50.671341] R13: 0000000000010001 R14: 000000000000ffff R15: 00000000000000a8 [ 50.678624] FS: 00007f1a66db5700(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 50.686850] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.692735] CR2: 00007f7d77f091b0 CR3: 00000001ba252000 CR4: 00000000001406e0 [ 50.700010] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 50.705697] kobject: 'loop0' (000000006fe71a88): kobject_uevent_env [ 50.707290] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 50.713705] kobject: 'loop0' (000000006fe71a88): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 50.720940] Call Trace: [ 50.720965] ? netdev_txq_to_tc+0x140/0x140 [ 50.720978] ? netif_skb_features+0x690/0xb70 [ 50.720991] ? __skb_gso_segment+0x880/0x880 [ 50.721011] skb_csum_hwoffload_help+0x8f/0xe0 [ 50.721023] validate_xmit_skb+0xa2a/0xf30 [ 50.721037] ? lock_release+0x970/0x970 [ 50.721051] ? netif_skb_features+0xb70/0xb70 [ 50.721065] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 50.721077] ? check_preemption_disabled+0x48/0x200 [ 50.721087] ? check_preemption_disabled+0x48/0x200 [ 50.721102] __dev_queue_xmit+0xc2f/0x3950 [ 50.721115] ? kasan_kmalloc+0xc7/0xe0 [ 50.721132] ? netdev_pick_tx+0x2d0/0x2d0 [ 50.721146] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 50.721159] ? __alloc_skb+0x4c6/0x770 [ 50.721174] ? skb_scrub_packet+0x490/0x490 [ 50.721187] ? mark_held_locks+0x130/0x130 [ 50.721204] ? plist_add+0x601/0x7a0 [ 50.721223] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 50.721239] ? refcount_add_not_zero_checked+0x21e/0x330 [ 50.721254] ? refcount_dec_if_one+0x180/0x180 [ 50.721269] ? alloc_skb_with_frags+0x508/0x7d0 [ 50.721286] ? __might_fault+0x12b/0x1e0 [ 50.721300] ? lock_downgrade+0x900/0x900 [ 50.721315] ? lock_release+0x970/0x970 [ 50.721330] ? arch_local_save_flags+0x40/0x40 [ 50.721342] ? skb_set_owner_w+0x24e/0x360 [ 50.721369] ? kasan_check_write+0x14/0x20 [ 50.721380] ? copyin+0xb7/0x100 [ 50.721397] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 50.795985] kobject: 'loop2' (00000000a73c97bc): kobject_uevent_env [ 50.797149] ? _copy_from_iter+0x39d/0x1090 [ 50.797165] ? usercopy_warn+0x110/0x110 [ 50.797183] ? _copy_from_iter_nocache+0x1050/0x1050 [ 50.801132] kobject: 'loop2' (00000000a73c97bc): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 50.805374] ? _copy_from_iter_full+0x2b3/0xd20 [ 50.805393] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 50.805407] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 50.805424] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 50.805445] ? skb_copy_datagram_from_iter+0x451/0x660 [ 50.840569] kobject: 'loop3' (00000000d4c12978): kobject_uevent_env [ 50.841763] ? iov_iter_advance+0x1460/0x1460 [ 50.841782] dev_queue_xmit+0x17/0x20 [ 50.841797] ? dev_queue_xmit+0x17/0x20 [ 50.860918] kobject: 'loop3' (00000000d4c12978): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 50.862171] packet_sendmsg+0x422d/0x64c0 [ 50.862187] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 50.862206] ? __fget+0x4aa/0x740 [ 50.868548] ------------[ cut here ]------------ [ 50.873611] ? lock_downgrade+0x900/0x900 [ 50.877909] kernel BUG at net/core/dev.c:2880! [ 50.881971] ? packet_getname+0x5f0/0x5f0 [ 50.981415] ? aa_profile_af_perm+0x410/0x410 [ 50.985914] ? ksys_dup3+0x680/0x680 [ 50.989641] ? aa_sk_perm+0x218/0x8b0 [ 50.993442] ? aa_af_perm+0x5a0/0x5a0 [ 50.997239] ? usercopy_warn+0x110/0x110 [ 51.001296] ? aa_profile_af_perm+0x410/0x410 [ 51.005793] ? aa_sock_msg_perm.isra.12+0xba/0x160 [ 51.010728] ? apparmor_socket_sendmsg+0x29/0x30 [ 51.015482] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 51.021020] ? security_socket_sendmsg+0x94/0xc0 [ 51.025774] ? packet_getname+0x5f0/0x5f0 [ 51.029927] sock_sendmsg+0xd5/0x120 [ 51.033645] __sys_sendto+0x3d7/0x670 [ 51.037451] ? __ia32_sys_getpeername+0xb0/0xb0 [ 51.042121] ? lock_release+0x970/0x970 [ 51.046093] ? arch_local_save_flags+0x40/0x40 [ 51.050676] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 51.056128] ? aa_af_perm+0x5a0/0x5a0 [ 51.059941] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 51.065480] ? put_timespec64+0x10f/0x1b0 [ 51.069645] ? trace_hardirqs_on+0xbd/0x310 [ 51.073974] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 51.079510] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 51.084874] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 51.090329] __x64_sys_sendto+0xe1/0x1a0 [ 51.094395] do_syscall_64+0x1b9/0x820 [ 51.098463] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 51.103835] ? syscall_return_slowpath+0x5e0/0x5e0 [ 51.108767] ? trace_hardirqs_on_caller+0x310/0x310 [ 51.113781] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 51.118801] ? recalc_sigpending_tsk+0x180/0x180 [ 51.123565] ? kasan_check_write+0x14/0x20 [ 51.127802] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 51.132655] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 51.137852] RIP: 0033:0x457579 [ 51.141045] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 51.159944] RSP: 002b:00007f1a66db4c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 51.167652] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457579 [ 51.174923] RDX: 000000000000000b RSI: 0000000020000040 RDI: 0000000000000003 [ 51.182190] RBP: 000000000072bf00 R08: 0000000020000080 R09: 000000000000001c [ 51.189457] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1a66db56d4 [ 51.196720] R13: 00000000004c3935 R14: 00000000004d57d8 R15: 00000000ffffffff [ 51.203991] Modules linked in: [ 51.207200] invalid opcode: 0000 [#2] PREEMPT SMP KASAN [ 51.207265] ---[ end trace 2a4ecc0b5902c9a7 ]--- [ 51.212575] CPU: 0 PID: 7358 Comm: syz-executor3 Tainted: G D 4.19.0-rc6+ #253 [ 51.217343] RIP: 0010:skb_checksum_help+0x9e3/0xbb0 [ 51.225943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 51.225962] RIP: 0010:skb_checksum_help+0x9e3/0xbb0 [ 51.225980] Code: 85 00 ff ff ff 48 c1 e8 03 42 80 3c 28 00 0f 84 09 fb ff ff 48 8b bd 00 ff ff ff e8 97 a8 b9 fb e9 f8 fa ff ff e8 2d 09 76 fb <0f> 0b 48 8b bd 28 ff ff ff e8 1f a8 b9 fb e9 b1 f6 ff ff 48 89 cf [ 51.231492] Code: 85 00 ff ff ff 48 c1 e8 03 42 80 3c 28 00 0f 84 09 fb ff ff 48 8b bd 00 ff ff ff e8 97 a8 b9 fb e9 f8 fa ff ff e8 2d 09 76 fb <0f> 0b 48 8b bd 28 ff ff ff e8 1f a8 b9 fb e9 b1 f6 ff ff 48 89 cf [ 51.240836] RSP: 0018:ffff8801cb92ef60 EFLAGS: 00010293 [ 51.240855] RAX: ffff8801cc7b0040 RBX: ffff8801ce7437c0 RCX: ffffffff8608c6d7 [ 51.240869] RDX: 0000000000000000 RSI: ffffffff8608cc63 RDI: 0000000000000006 [ 51.245887] RSP: 0018:ffff8801d83a6f60 EFLAGS: 00010293 [ 51.264756] RBP: ffff8801cb92f068 R08: ffff8801cc7b0040 R09: 0000000000000000 [ 51.264763] R10: ffff8801cb92f6d8 R11: 0000000000000000 R12: 0000000000000001 [ 51.264771] R13: 0000000000010001 R14: 000000000000ffff R15: 00000000000000a8 [ 51.264783] FS: 00007f36dcf61700(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 51.264797] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.289063] CR2: 0000000020006ffc CR3: 00000001d8a00000 CR4: 00000000001406f0 [ 51.289075] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 51.289083] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 51.289093] Call Trace: [ 51.296382] RAX: ffff8801b9834380 RBX: ffff8801b9f8d8c0 RCX: ffffffff8608c6d7 [ 51.303637] ? netdev_txq_to_tc+0x140/0x140 [ 51.308984] RDX: 0000000000000000 RSI: ffffffff8608cc63 RDI: 0000000000000006 [ 51.316224] ? netif_skb_features+0x690/0xb70 [ 51.316239] ? __skb_gso_segment+0x880/0x880 [ 51.316259] skb_csum_hwoffload_help+0x8f/0xe0 [ 51.323525] RBP: ffff8801d83a7068 R08: ffff8801b9834380 R09: 0000000000000000 [ 51.330801] validate_xmit_skb+0xa2a/0xf30 [ 51.330825] ? lock_release+0x970/0x970 [ 51.330841] ? netif_skb_features+0xb70/0xb70 [ 51.339071] R10: ffff8801d83a76d8 R11: 0000000000000000 R12: 0000000000000001 [ 51.344930] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 51.344944] ? check_preemption_disabled+0x48/0x200 [ 51.344960] ? check_preemption_disabled+0x48/0x200 [ 51.352216] R13: 0000000000010001 R14: 000000000000ffff R15: 00000000000000a8 [ 51.359473] __dev_queue_xmit+0xc2f/0x3950 [ 51.359488] ? kasan_kmalloc+0xc7/0xe0 [ 51.359506] ? netdev_pick_tx+0x2d0/0x2d0 [ 51.366777] FS: 00007f1a66db5700(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 51.369333] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 51.376597] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.380890] ? __alloc_skb+0x4c6/0x770 [ 51.388159] CR2: 00007f7d77f091b0 CR3: 00000001ba252000 CR4: 00000000001406e0 [ 51.392622] ? skb_scrub_packet+0x490/0x490 [ 51.397027] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 51.401581] ? mark_held_locks+0x130/0x130 [ 51.408852] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 51.413065] ? plist_add+0x601/0x7a0 [ 51.417028] Kernel panic - not syncing: Fatal exception in interrupt [ 51.421494] ? mark_held_locks+0x130/0x130 [ 51.532480] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 51.538023] ? refcount_add_not_zero_checked+0x21e/0x330 [ 51.543473] ? refcount_dec_if_one+0x180/0x180 [ 51.548054] ? alloc_skb_with_frags+0x508/0x7d0 [ 51.552728] ? __might_fault+0x12b/0x1e0 [ 51.556790] ? lock_downgrade+0x900/0x900 [ 51.560950] ? lock_release+0x970/0x970 [ 51.564923] ? arch_local_save_flags+0x40/0x40 [ 51.569502] ? skb_set_owner_w+0x24e/0x360 [ 51.573741] ? kasan_check_write+0x14/0x20 [ 51.577981] ? copyin+0xb7/0x100 [ 51.581351] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 51.586364] ? _copy_from_iter+0x39d/0x1090 [ 51.590685] ? usercopy_warn+0x110/0x110 [ 51.594755] ? _copy_from_iter_nocache+0x1050/0x1050 [ 51.599859] ? _copy_from_iter_full+0x2b3/0xd20 [ 51.604526] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 51.610321] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 51.615513] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 51.621050] ? skb_copy_datagram_from_iter+0x451/0x660 [ 51.626324] ? iov_iter_advance+0x1460/0x1460 [ 51.630830] dev_queue_xmit+0x17/0x20 [ 51.634632] ? dev_queue_xmit+0x17/0x20 [ 51.638614] packet_sendmsg+0x422d/0x64c0 [ 51.642761] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 51.647959] ? __fget+0x4aa/0x740 [ 51.651416] ? lock_downgrade+0x900/0x900 [ 51.655585] ? packet_getname+0x5f0/0x5f0 [ 51.659733] ? aa_profile_af_perm+0x410/0x410 [ 51.664230] ? ksys_dup3+0x680/0x680 [ 51.667958] ? aa_sk_perm+0x218/0x8b0 [ 51.671758] ? aa_af_perm+0x5a0/0x5a0 [ 51.675558] ? usercopy_warn+0x110/0x110 [ 51.679613] ? aa_profile_af_perm+0x410/0x410 [ 51.684119] ? aa_sock_msg_perm.isra.12+0xba/0x160 [ 51.689064] ? apparmor_socket_sendmsg+0x29/0x30 [ 51.693830] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 51.699370] ? security_socket_sendmsg+0x94/0xc0 [ 51.704128] ? packet_getname+0x5f0/0x5f0 [ 51.708277] sock_sendmsg+0xd5/0x120 [ 51.711990] __sys_sendto+0x3d7/0x670 [ 51.715796] ? __ia32_sys_getpeername+0xb0/0xb0 [ 51.720471] ? lock_release+0x970/0x970 [ 51.724447] ? arch_local_save_flags+0x40/0x40 [ 51.729037] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 51.734484] ? aa_af_perm+0x5a0/0x5a0 [ 51.738302] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 51.743841] ? put_timespec64+0x10f/0x1b0 [ 51.748002] ? trace_hardirqs_on+0xbd/0x310 [ 51.752319] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 51.757863] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 51.763224] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 51.768676] __x64_sys_sendto+0xe1/0x1a0 [ 51.772741] do_syscall_64+0x1b9/0x820 [ 51.776630] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 51.781991] ? syscall_return_slowpath+0x5e0/0x5e0 [ 51.786918] ? trace_hardirqs_on_caller+0x310/0x310 [ 51.791933] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 51.796948] ? recalc_sigpending_tsk+0x180/0x180 [ 51.801712] ? kasan_check_write+0x14/0x20 [ 51.805949] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 51.810795] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 51.815987] RIP: 0033:0x457579 [ 51.819178] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 51.838079] RSP: 002b:00007f36dcf60c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 51.845788] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457579 [ 51.853065] RDX: 000000000000000b RSI: 0000000020000040 RDI: 0000000000000003 [ 51.860331] RBP: 000000000072bf00 R08: 0000000020000080 R09: 000000000000001c [ 51.867596] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f36dcf616d4 [ 51.874864] R13: 00000000004c3935 R14: 00000000004d57d8 R15: 00000000ffffffff [ 51.882137] Modules linked in: [ 51.886231] Kernel Offset: disabled [ 51.889857] Rebooting in 86400 seconds..