[ 34.346096] audit: type=1800 audit(1550861272.861:27): pid=7396 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 34.387220] audit: type=1800 audit(1550861272.861:28): pid=7396 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 35.232615] audit: type=1800 audit(1550861273.791:29): pid=7396 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 35.256897] audit: type=1800 audit(1550861273.791:30): pid=7396 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.23' (ECDSA) to the list of known hosts. syzkaller login: [ 54.074365] IPVS: ftp: loaded support on port[0] = 21 [ 54.124456] chnl_net:caif_netlink_parms(): no params data found [ 54.154840] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.161693] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.168825] device bridge_slave_0 entered promiscuous mode [ 54.176735] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.183199] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.190520] device bridge_slave_1 entered promiscuous mode [ 54.204868] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 54.214028] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 54.230800] team0: Port device team_slave_0 added [ 54.236921] team0: Port device team_slave_1 added [ 54.317104] device hsr_slave_0 entered promiscuous mode [ 54.365892] device hsr_slave_1 entered promiscuous mode [ 54.441999] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.448480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.455397] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.461757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.489253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.499980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.519816] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.527421] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.534599] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 54.546624] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.556271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.563935] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.570365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.580019] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.587859] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.594196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.608695] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.616591] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.627021] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.639854] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.649913] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.660812] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.668930] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.676586] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 54.692318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.704815] IPv6: ADDRCONF(NETDEV_CHANGE): rose0: link becomes ready [ 54.865512] kasan: CONFIG_KASAN_INLINE enabled [ 54.870202] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 54.877602] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 54.883829] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.0.0-rc7+ #90 [ 54.890417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 54.899765] RIP: 0010:rose_send_frame+0x1a8/0x280 [ 54.904600] Code: c1 ea 03 80 3c 02 00 0f 85 8d 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 63 20 49 8d bc 24 58 03 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 7e 49 8b 94 24 58 03 00 00 e9 b8 fe ff ff e8 00 00 [ 54.923499] RSP: 0018:ffff8880ae807ae8 EFLAGS: 00010202 [ 54.928854] RAX: dffffc0000000000 RBX: ffff888216705540 RCX: ffffffff8635dffb [ 54.936213] RDX: 000000000000006b RSI: ffffffff8635e12c RDI: 0000000000000358 [ 54.943481] RBP: ffff8880ae807b18 R08: ffffffff8887dec0 R09: ffffed1012cdeb5d [ 54.950791] R10: ffffed1012cdeb5c R11: ffff8880966f5ae3 R12: 0000000000000000 [ 54.958054] R13: 0000000000000078 R14: 0000000000000005 R15: ffff888094e8cc00 [ 54.965318] FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 54.973537] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.979405] CR2: 00007f5d6090ce78 CR3: 0000000092106000 CR4: 00000000001406f0 [ 54.986665] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 54.993921] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 55.001701] Call Trace: [ 55.004264] [ 55.006409] rose_transmit_clear_request+0x1de/0x2a0 [ 55.011509] ? __local_bh_enable_ip+0x15a/0x270 [ 55.016349] rose_rx_call_request+0x4ea/0x1990 [ 55.020937] ? rose_dev_get+0x21e/0x320 [ 55.024896] ? rose_release+0x410/0x410 [ 55.028866] rose_loopback_timer+0x26a/0x3f0 [ 55.033264] call_timer_fn+0x190/0x720 [ 55.037155] ? rose_link_rx_restart.cold+0xa9/0xa9 [ 55.042071] ? process_timeout+0x40/0x40 [ 55.046134] ? run_timer_softirq+0x647/0x1700 [ 55.050621] ? trace_hardirqs_on+0x67/0x230 [ 55.054927] ? kasan_check_read+0x11/0x20 [ 55.059073] ? rose_link_rx_restart.cold+0xa9/0xa9 [ 55.063993] run_timer_softirq+0x652/0x1700 [ 55.068323] ? add_timer+0xbe0/0xbe0 [ 55.072034] ? kvm_clock_read+0x18/0x30 [ 55.076078] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 55.081629] ? check_preemption_disabled+0x48/0x290 [ 55.086635] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 55.092207] __do_softirq+0x266/0x95a [ 55.095995] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 55.101523] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 55.107055] irq_exit+0x180/0x1d0 [ 55.110499] smp_apic_timer_interrupt+0x14a/0x570 [ 55.115335] apic_timer_interrupt+0xf/0x20 [ 55.119562] [ 55.121871] RIP: 0010:native_safe_halt+0x2/0x10 [ 55.126543] Code: ff ff ff 48 89 c7 48 89 45 d8 e8 49 93 a3 fa 48 8b 45 d8 e9 ce fe ff ff 48 89 df e8 38 93 a3 fa eb 82 90 90 90 90 90 90 fb f4 0f 1f 00 66 2e 0f 1f 84 00 00 00 00 00 f4 c3 90 90 90 90 90 90 [ 55.145434] RSP: 0018:ffffffff88807d08 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13 [ 55.153203] RAX: 1ffffffff1125061 RBX: ffffffff8887dec0 RCX: 0000000000000000 [ 55.160475] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffffffff8887e73c [ 55.167737] RBP: ffffffff88807d38 R08: ffffffff8887dec0 R09: 0000000000000000 [ 55.174996] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 55.182258] R13: ffffffff889282f8 R14: 0000000000000000 R15: 0000000000000000 [ 55.189534] ? default_idle+0x4e/0x330 [ 55.193419] arch_cpu_idle+0x10/0x20 [ 55.197131] default_idle_call+0x36/0x90 [ 55.201184] do_idle+0x386/0x570 [ 55.204551] ? arch_cpu_idle_exit+0x80/0x80 [ 55.208858] ? check_preemption_disabled+0x48/0x290 [ 55.214145] ? trace_hardirqs_on+0x67/0x230 [ 55.218472] cpu_startup_entry+0x1b/0x20 [ 55.222524] rest_init+0x245/0x37b [ 55.226059] arch_call_rest_init+0xe/0x1b [ 55.230204] start_kernel+0x803/0x83c [ 55.233992] ? mem_encrypt_init+0xb/0xb [ 55.237960] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 55.243481] ? x86_family+0x41/0x50 [ 55.247097] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 55.252625] x86_64_start_reservations+0x29/0x2b [ 55.257375] x86_64_start_kernel+0x77/0x7b [ 55.261628] secondary_startup_64+0xa4/0xb0 [ 55.265932] Modules linked in: [ 55.269140] ---[ end trace ca817d5bd10ec289 ]--- [ 55.273894] RIP: 0010:rose_send_frame+0x1a8/0x280 [ 55.278749] Code: c1 ea 03 80 3c 02 00 0f 85 8d 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 63 20 49 8d bc 24 58 03 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 7e 49 8b 94 24 58 03 00 00 e9 b8 fe ff ff e8 00 00 [ 55.297741] RSP: 0018:ffff8880ae807ae8 EFLAGS: 00010202 [ 55.303694] RAX: dffffc0000000000 RBX: ffff888216705540 RCX: ffffffff8635dffb [ 55.311047] RDX: 000000000000006b RSI: ffffffff8635e12c RDI: 0000000000000358 [ 55.318329] RBP: ffff8880ae807b18 R08: ffffffff8887dec0 R09: ffffed1012cdeb5d [ 55.325618] R10: ffffed1012cdeb5c R11: ffff8880966f5ae3 R12: 0000000000000000 [ 55.332881] R13: 0000000000000078 R14: 0000000000000005 R15: ffff888094e8cc00 [ 55.340173] FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 55.348405] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.354390] CR2: 00007f5d6090ce78 CR3: 0000000092106000 CR4: 00000000001406f0 [ 55.361806] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 55.369083] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 55.376374] Kernel panic - not syncing: Fatal exception in interrupt [ 55.383971] Kernel Offset: disabled [ 55.387595] Rebooting in 86400 seconds..