[ 71.579407][ T27] audit: type=1800 audit(1583065189.566:26): pid=9771 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 72.397882][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 72.397894][ T27] audit: type=1800 audit(1583065190.406:29): pid=9771 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 72.424472][ T27] audit: type=1800 audit(1583065190.406:30): pid=9771 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.42' (ECDSA) to the list of known hosts. 2020/03/01 12:20:00 parsed 1 programs 2020/03/01 12:20:02 executed programs: 0 syzkaller login: [ 84.572665][ T9939] IPVS: ftp: loaded support on port[0] = 21 [ 84.628937][ T9939] chnl_net:caif_netlink_parms(): no params data found [ 84.666484][ T9939] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.673958][ T9939] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.681967][ T9939] device bridge_slave_0 entered promiscuous mode [ 84.690577][ T9939] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.697855][ T9939] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.705841][ T9939] device bridge_slave_1 entered promiscuous mode [ 84.722934][ T9939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.734340][ T9939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.753627][ T9939] team0: Port device team_slave_0 added [ 84.761117][ T9939] team0: Port device team_slave_1 added [ 84.775053][ T9939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.782122][ T9939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.808166][ T9939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.821156][ T9939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.828149][ T9939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.854293][ T9939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.921207][ T9939] device hsr_slave_0 entered promiscuous mode [ 84.969139][ T9939] device hsr_slave_1 entered promiscuous mode [ 85.109873][ T9939] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.171776][ T9939] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.230987][ T9939] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.311945][ T9939] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.413274][ T9939] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.420608][ T9939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.428357][ T9939] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.435536][ T9939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.480793][ T9939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.493592][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.504775][ T2693] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.513422][ T2693] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.521778][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 85.534518][ T9939] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.545583][ T3494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.554171][ T3494] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.561438][ T3494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.572616][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.581946][ T2693] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.589094][ T2693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.608181][ T3492] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.617598][ T3492] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.629877][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.638366][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.653150][ T3492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.661593][ T3492] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.674931][ T9939] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.687509][ T9939] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.695663][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.704045][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.724411][ T3492] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.731959][ T3492] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.745533][ T9939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.764406][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.773645][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.795301][ T9939] device veth0_vlan entered promiscuous mode [ 85.802906][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.811435][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.821280][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.829313][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.841050][ T9939] device veth1_vlan entered promiscuous mode [ 85.862538][ T3492] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.871362][ T3492] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.880007][ T3492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.888563][ T3492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.899486][ T9939] device veth0_macvtap entered promiscuous mode [ 85.908642][ T9939] device veth1_macvtap entered promiscuous mode [ 85.927252][ T9939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.935726][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.945139][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.953518][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.962512][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.974025][ T9939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.982043][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.990957][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.201191][ T9944] BUG: unable to handle page fault for address: ffffed1019080707 [ 86.208929][ T9944] #PF: supervisor read access in kernel mode [ 86.214915][ T9944] #PF: error_code(0x0000) - not-present page [ 86.220901][ T9944] PGD 21ffef067 P4D 21ffef067 PUD 12fff6067 PMD 0 [ 86.227409][ T9944] Oops: 0000 [#1] PREEMPT SMP KASAN [ 86.232590][ T9944] CPU: 1 PID: 9944 Comm: syz-executor.0 Not tainted 5.6.0-rc3-syzkaller #0 [ 86.241152][ T9944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 86.251426][ T9944] RIP: 0010:ethnl_update_bitset32.part.0+0x8be/0x1820 [ 86.258174][ T9944] Code: 45 85 e4 0f 84 aa 03 00 00 e8 6e 31 05 fb 48 8b 85 c8 fe ff ff 4e 8d 2c a8 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <0f> b6 14 02 4c 89 e8 83 e0 07 83 c0 03 38 d0 7c 0c 84 d2 74 08 4c [ 86.277815][ T9944] RSP: 0018:ffffc900023b7238 EFLAGS: 00010a02 [ 86.283861][ T9944] RAX: dffffc0000000000 RBX: ffff8880a8403838 RCX: ffffffff867065d4 [ 86.291820][ T9944] RDX: 1ffff11019080707 RSI: ffffffff867065e2 RDI: 0000000000000005 [ 86.299778][ T9944] RBP: ffffc900023b73a0 R08: ffff8880977ea340 R09: ffffc900023b7308 [ 86.307739][ T9944] R10: fffff52000476e66 R11: ffffc900023b7337 R12: 000000000000001d [ 86.315698][ T9944] R13: ffff8880c8403838 R14: ffff8880a8403848 R15: ffffc900023b7378 [ 86.323657][ T9944] FS: 0000000000000000(0000) GS:ffff8880ae900000(0063) knlGS:000000000a227900 [ 86.332677][ T9944] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 86.339247][ T9944] CR2: ffffed1019080707 CR3: 0000000090882000 CR4: 00000000001406e0 [ 86.347195][ T9944] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 86.355152][ T9944] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 86.363538][ T9944] Call Trace: [ 86.366810][ T9944] ? __mutex_lock+0x458/0x13c0 [ 86.371550][ T9944] ? lock_downgrade+0x920/0x920 [ 86.376400][ T9944] ? ethnl_bitmap32_clear+0x390/0x390 [ 86.381752][ T9944] ? mutex_trylock+0x2d0/0x2d0 [ 86.386500][ T9944] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 86.394644][ T9944] ? ethnl_default_notify+0x6b0/0x6b0 [ 86.399993][ T9944] ? sock_sendmsg+0xd7/0x130 [ 86.404611][ T9944] ethnl_update_bitset+0x4d/0x67 [ 86.409536][ T9944] ethnl_set_linkmodes+0x461/0xc30 [ 86.414729][ T9944] ? lock_downgrade+0x920/0x920 [ 86.419736][ T9944] ? linkmodes_prepare_data+0x2a0/0x2a0 [ 86.425275][ T9944] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 86.431507][ T9944] ? apparmor_cred_prepare+0x7b0/0x7b0 [ 86.436998][ T9944] ? kfree_skbmem+0xfb/0x1c0 [ 86.441714][ T9944] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 86.448052][ T9944] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 86.454514][ T9944] ? security_capable+0x95/0xc0 [ 86.459360][ T9944] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 86.466726][ T9944] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x300 [ 86.473055][ T9944] genl_rcv_msg+0x67d/0xea0 [ 86.477549][ T9944] ? genl_rcv_msg+0x67d/0xea0 [ 86.482222][ T9944] ? genl_family_rcv_msg_attrs_parse+0x300/0x300 [ 86.488546][ T9944] ? __kasan_check_read+0x11/0x20 [ 86.493574][ T9944] ? find_held_lock+0x35/0x130 [ 86.498341][ T9944] netlink_rcv_skb+0x177/0x450 [ 86.503099][ T9944] ? genl_family_rcv_msg_attrs_parse+0x300/0x300 [ 86.509527][ T9944] ? netlink_ack+0xb50/0xb50 [ 86.514099][ T9944] ? __kasan_check_write+0x14/0x20 [ 86.519208][ T9944] ? netlink_deliver_tap+0x248/0xbf0 [ 86.524536][ T9944] genl_rcv+0x29/0x40 [ 86.528509][ T9944] netlink_unicast+0x59e/0x7e0 [ 86.533319][ T9944] ? netlink_attachskb+0x870/0x870 [ 86.538426][ T9944] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 86.544139][ T9944] ? __check_object_size+0x3d/0x437 [ 86.549333][ T9944] netlink_sendmsg+0x91c/0xea0 [ 86.554094][ T9944] ? netlink_unicast+0x7e0/0x7e0 [ 86.559040][ T9944] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 86.564569][ T9944] ? apparmor_socket_sendmsg+0x2a/0x30 [ 86.570025][ T9944] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 86.576259][ T9944] ? security_socket_sendmsg+0x8d/0xc0 [ 86.581709][ T9944] ? netlink_unicast+0x7e0/0x7e0 [ 86.586644][ T9944] sock_sendmsg+0xd7/0x130 [ 86.591050][ T9944] ____sys_sendmsg+0x753/0x880 [ 86.595796][ T9944] ? kernel_sendmsg+0x50/0x50 [ 86.600469][ T9944] ? __kasan_check_read+0x11/0x20 [ 86.605479][ T9944] ___sys_sendmsg+0x100/0x170 [ 86.610148][ T9944] ? sendmsg_copy_msghdr+0x70/0x70 [ 86.615257][ T9944] ? posix_get_monotonic_timespec+0x75/0x290 [ 86.621241][ T9944] ? find_held_lock+0x35/0x130 [ 86.625997][ T9944] ? __might_fault+0x12b/0x1e0 [ 86.630757][ T9944] ? lock_downgrade+0x920/0x920 [ 86.635612][ T9944] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 86.641849][ T9944] ? __fget_light+0x1ad/0x270 [ 86.646526][ T9944] ? __fdget+0x1b/0x20 [ 86.650588][ T9944] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 86.656999][ T9944] __sys_sendmsg+0x105/0x1d0 [ 86.661705][ T9944] ? __sys_sendmsg_sock+0xc0/0xc0 [ 86.666719][ T9944] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 86.672168][ T9944] ? do_fast_syscall_32+0xd1/0xe16 [ 86.677270][ T9944] ? entry_SYSENTER_compat+0x70/0x7f [ 86.682544][ T9944] ? do_fast_syscall_32+0xd1/0xe16 [ 86.687687][ T9944] __ia32_compat_sys_sendmsg+0x7a/0xb0 [ 86.693144][ T9944] do_fast_syscall_32+0x27b/0xe16 [ 86.698165][ T9944] entry_SYSENTER_compat+0x70/0x7f [ 86.703256][ T9944] RIP: 0023:0xf7f70e39 [ 86.707340][ T9944] Code: 1d 00 00 00 89 d3 5b 5e 5d c3 8b 04 24 c3 8b 1c 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 86.727087][ T9944] RSP: 002b:000000000868fb6c EFLAGS: 00000216 ORIG_RAX: 0000000000000172 [ 86.735552][ T9944] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000240 [ 86.743517][ T9944] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 86.751477][ T9944] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 86.759443][ T9944] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 86.767426][ T9944] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 86.775394][ T9944] Modules linked in: [ 86.779282][ T9944] CR2: ffffed1019080707 [ 86.783486][ T9944] ---[ end trace 0790e2810f827eaa ]--- [ 86.788951][ T9944] RIP: 0010:ethnl_update_bitset32.part.0+0x8be/0x1820 [ 86.795712][ T9944] Code: 45 85 e4 0f 84 aa 03 00 00 e8 6e 31 05 fb 48 8b 85 c8 fe ff ff 4e 8d 2c a8 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <0f> b6 14 02 4c 89 e8 83 e0 07 83 c0 03 38 d0 7c 0c 84 d2 74 08 4c [ 86.815304][ T9944] RSP: 0018:ffffc900023b7238 EFLAGS: 00010a02 [ 86.821462][ T9944] RAX: dffffc0000000000 RBX: ffff8880a8403838 RCX: ffffffff867065d4 [ 86.829418][ T9944] RDX: 1ffff11019080707 RSI: ffffffff867065e2 RDI: 0000000000000005 [ 86.837481][ T9944] RBP: ffffc900023b73a0 R08: ffff8880977ea340 R09: ffffc900023b7308 [ 86.845445][ T9944] R10: fffff52000476e66 R11: ffffc900023b7337 R12: 000000000000001d [ 86.853411][ T9944] R13: ffff8880c8403838 R14: ffff8880a8403848 R15: ffffc900023b7378 [ 86.861388][ T9944] FS: 0000000000000000(0000) GS:ffff8880ae900000(0063) knlGS:000000000a227900 [ 86.870311][ T9944] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 86.876886][ T9944] CR2: ffffed1019080707 CR3: 0000000090882000 CR4: 00000000001406e0 [ 86.884925][ T9944] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 86.892901][ T9944] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 86.900862][ T9944] Kernel panic - not syncing: Fatal exception [ 86.908396][ T9944] Kernel Offset: disabled [ 86.912724][ T9944] Rebooting in 86400 seconds..