[ 32.320900][ T26] audit: type=1800 audit(1550964610.773:30): pid=7200 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.113' (ECDSA) to the list of known hosts. syzkaller login: [ 42.827946][ T7355] IPVS: ftp: loaded support on port[0] = 21 [ 42.878969][ T7355] chnl_net:caif_netlink_parms(): no params data found [ 42.906923][ T7355] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.914303][ T7355] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.922039][ T7355] device bridge_slave_0 entered promiscuous mode [ 42.930504][ T7355] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.937646][ T7355] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.945455][ T7355] device bridge_slave_1 entered promiscuous mode [ 42.959687][ T7355] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 42.969326][ T7355] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 42.985546][ T7355] team0: Port device team_slave_0 added [ 42.991983][ T7355] team0: Port device team_slave_1 added [ 43.065089][ T7355] device hsr_slave_0 entered promiscuous mode [ 43.103374][ T7355] device hsr_slave_1 entered promiscuous mode [ 43.179167][ T7355] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.186449][ T7355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.194158][ T7355] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.201205][ T7355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.228786][ T7355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.240375][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.260275][ T22] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.269116][ T22] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.278034][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 43.288686][ T7355] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.297686][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.306228][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.313306][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.331729][ T7355] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 43.342870][ T7355] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.356244][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.364821][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.371852][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.379805][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.388579][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.396914][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.405151][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.419072][ T7355] 8021q: adding VLAN 0 to HW filter on device batadv0 executing program [ 43.426864][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 43.434451][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.447470][ T7359] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 43.843549][ C0] WARNING: CPU: 0 PID: 0 at net/ipv4/tcp_output.c:2534 tcp_send_loss_probe+0x771/0x8a0 [ 43.853324][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 43.859916][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.0.0-rc7-next-20190222 #41 [ 43.868222][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 43.878303][ C0] Call Trace: [ 43.881658][ C0] [ 43.884491][ C0] dump_stack+0x172/0x1f0 [ 43.888822][ C0] ? tcp_send_loss_probe+0x6c0/0x8a0 [ 43.894088][ C0] panic+0x2cb/0x65c [ 43.897975][ C0] ? __warn_printk+0xf3/0xf3 [ 43.902564][ C0] ? tcp_send_loss_probe+0x771/0x8a0 [ 43.907840][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 43.914061][ C0] ? __warn.cold+0x5/0x45 [ 43.918376][ C0] ? __warn+0xe8/0x1d0 [ 43.922445][ C0] ? tcp_send_loss_probe+0x771/0x8a0 [ 43.927718][ C0] __warn.cold+0x20/0x45 [ 43.931944][ C0] ? trace_hardirqs_off+0x62/0x220 [ 43.937037][ C0] ? tcp_send_loss_probe+0x771/0x8a0 [ 43.942303][ C0] report_bug+0x263/0x2b0 [ 43.946618][ C0] do_error_trap+0x11b/0x200 [ 43.951187][ C0] do_invalid_op+0x37/0x50 [ 43.955586][ C0] ? tcp_send_loss_probe+0x771/0x8a0 [ 43.960848][ C0] invalid_op+0x14/0x20 [ 43.964982][ C0] RIP: 0010:tcp_send_loss_probe+0x771/0x8a0 [ 43.970850][ C0] Code: 88 fc ff ff 4c 89 ef e8 ed 56 c4 fb e9 c8 fc ff ff e8 43 57 c4 fb e9 63 fd ff ff e8 d9 56 c4 fb e9 94 f9 ff ff e8 df 85 8c fb <0f> 0b e9 7d fa ff ff e8 d3 85 8c fb 0f b6 1d d2 10 76 03 31 ff 89 [ 43.990444][ C0] RSP: 0018:ffff8880ae807c60 EFLAGS: 00010206 [ 43.996490][ C0] RAX: ffffffff8887e040 RBX: 0000000000000000 RCX: ffffffff85e3cadb [ 44.004450][ C0] RDX: 0000000000000100 RSI: ffffffff85e3cfb1 RDI: 0000000000000005 [ 44.012403][ C0] RBP: ffff8880ae807c90 R08: ffffffff8887e040 R09: ffffed10133f2089 [ 44.020367][ C0] R10: ffffed10133f2088 R11: ffff888099f90443 R12: ffff88808605c040 [ 44.028320][ C0] R13: ffff888099f90280 R14: 0000000000008000 R15: ffff88808605c860 [ 44.036297][ C0] ? tcp_send_loss_probe+0x29b/0x8a0 [ 44.041573][ C0] ? tcp_send_loss_probe+0x771/0x8a0 [ 44.046851][ C0] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 44.052550][ C0] tcp_write_timer_handler+0x5c0/0x8a0 [ 44.057989][ C0] tcp_write_timer+0x10e/0x1d0 [ 44.062734][ C0] call_timer_fn+0x190/0x720 [ 44.067304][ C0] ? tcp_write_timer_handler+0x8a0/0x8a0 [ 44.072918][ C0] ? process_timeout+0x40/0x40 [ 44.077659][ C0] ? run_timer_softirq+0x647/0x1700 [ 44.082840][ C0] ? trace_hardirqs_on+0x67/0x230 [ 44.087854][ C0] ? kasan_check_read+0x11/0x20 [ 44.092691][ C0] ? tcp_write_timer_handler+0x8a0/0x8a0 [ 44.098320][ C0] run_timer_softirq+0x652/0x1700 [ 44.103341][ C0] ? add_timer+0xbe0/0xbe0 [ 44.107736][ C0] ? kvm_clock_read+0x18/0x30 [ 44.112390][ C0] ? kvm_sched_clock_read+0x9/0x20 [ 44.117494][ C0] ? sched_clock+0x2e/0x50 [ 44.121893][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 44.128119][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 44.134447][ C0] __do_softirq+0x266/0x95a [ 44.138938][ C0] ? sched_clock_cpu+0x1b/0x1b0 [ 44.143776][ C0] irq_exit+0x180/0x1d0 [ 44.147923][ C0] smp_apic_timer_interrupt+0x14a/0x570 [ 44.153462][ C0] apic_timer_interrupt+0xf/0x20 [ 44.158384][ C0] [ 44.161330][ C0] RIP: 0010:native_safe_halt+0x2/0x10 [ 44.166793][ C0] Code: ff ff ff 48 89 c7 48 89 45 d8 e8 79 02 9d fa 48 8b 45 d8 e9 ce fe ff ff 48 89 df e8 68 02 9d fa eb 82 90 90 90 90 90 90 fb f4 0f 1f 00 66 2e 0f 1f 84 00 00 00 00 00 f4 c3 90 90 90 90 90 90 [ 44.186379][ C0] RSP: 0018:ffffffff88807d08 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13 [ 44.194767][ C0] RAX: 1ffffffff1125119 RBX: ffffffff8887e040 RCX: 0000000000000000 [ 44.202713][ C0] RDX: dffffc0000000000 RSI: 0000000000000006 RDI: ffffffff8887e8bc [ 44.210671][ C0] RBP: ffffffff88807d38 R08: ffffffff8887e040 R09: 0000000000000000 [ 44.218714][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 44.226666][ C0] R13: ffffffff889288b8 R14: 0000000000000000 R15: 0000000000000000 [ 44.234636][ C0] ? default_idle+0x4e/0x330 [ 44.239213][ C0] arch_cpu_idle+0x10/0x20 [ 44.243616][ C0] default_idle_call+0x36/0x90 [ 44.248365][ C0] do_idle+0x386/0x570 [ 44.252419][ C0] ? arch_cpu_idle_exit+0x80/0x80 [ 44.257423][ C0] ? trace_hardirqs_on+0x67/0x230 [ 44.262421][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 44.268637][ C0] ? debug_smp_processor_id+0x3c/0x280 [ 44.274074][ C0] cpu_startup_entry+0x1b/0x20 [ 44.278824][ C0] rest_init+0x245/0x37b [ 44.283053][ C0] arch_call_rest_init+0xe/0x1b [ 44.287896][ C0] start_kernel+0x816/0x84f [ 44.292482][ C0] ? mem_encrypt_init+0xb/0xb [ 44.297152][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 44.303375][ C0] ? x86_family+0x41/0x50 [ 44.307683][ C0] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 44.313927][ C0] x86_64_start_reservations+0x29/0x2b [ 44.319377][ C0] x86_64_start_kernel+0x77/0x7b [ 44.324293][ C0] secondary_startup_64+0xa4/0xb0 [ 44.330500][ C0] Kernel Offset: disabled [ 44.334915][ C0] Rebooting in 86400 seconds..