[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 38.540213][ T26] audit: type=1800 audit(1553643202.517:25): pid=7633 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 38.567716][ T26] audit: type=1800 audit(1553643202.527:26): pid=7633 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 38.567742][ T26] audit: type=1800 audit(1553643202.527:27): pid=7633 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.74' (ECDSA) to the list of known hosts. 2019/03/26 23:33:35 parsed 1 programs 2019/03/26 23:33:37 executed programs: 0 syzkaller login: [ 53.556074][ T7798] IPVS: ftp: loaded support on port[0] = 21 [ 53.614209][ T7798] chnl_net:caif_netlink_parms(): no params data found [ 53.645541][ T7798] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.653254][ T7798] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.661340][ T7798] device bridge_slave_0 entered promiscuous mode [ 53.669243][ T7798] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.676831][ T7798] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.684531][ T7798] device bridge_slave_1 entered promiscuous mode [ 53.699414][ T7798] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 53.709289][ T7798] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 53.727499][ T7798] team0: Port device team_slave_0 added [ 53.735008][ T7798] team0: Port device team_slave_1 added [ 53.802248][ T7798] device hsr_slave_0 entered promiscuous mode [ 53.851141][ T7798] device hsr_slave_1 entered promiscuous mode [ 53.918049][ T7798] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.925284][ T7798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.933109][ T7798] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.940279][ T7798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.973254][ T7798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.984676][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.995399][ T7800] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.004538][ T7800] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.012908][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 54.025172][ T7798] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.037736][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.046977][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.054465][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.065334][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.074324][ T7800] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.081439][ T7800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.097784][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.107143][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.118146][ T7801] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.131662][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.143064][ T7798] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.155362][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.163544][ T7801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.179176][ T7798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.812526][ T8140] kasan: CONFIG_KASAN_INLINE enabled [ 55.818092][ T8140] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 55.826988][ T8140] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 55.833932][ T8140] CPU: 0 PID: 8140 Comm: syz-executor.0 Not tainted 5.0.0+ #109 [ 55.841555][ T8140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.851699][ T8140] RIP: 0010:tipc_mcast_filter_msg+0x70/0x17a0 [ 55.857776][ T8140] Code: 4c 39 e0 b8 00 00 00 00 4c 0f 44 e0 e8 e9 cc a2 fa 48 b8 00 00 00 00 00 fc ff df 49 8d bc 24 c8 00 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 43 13 00 00 49 8b 9c 24 c8 00 00 00 48 b8 00 00 [ 55.877634][ T8140] RSP: 0018:ffff888085acf958 EFLAGS: 00010202 [ 55.883683][ T8140] RAX: dffffc0000000000 RBX: ffff888085acfab8 RCX: ffffffff86d5f8e4 [ 55.891747][ T8140] RDX: 0000000000000019 RSI: ffffffff86cd9747 RDI: 00000000000000c8 [ 55.900264][ T8140] RBP: ffff888085acf9c0 R08: ffff8880a06ae240 R09: ffffed1015d05bc8 [ 55.908235][ T8140] R10: ffffed1015d05bc7 R11: ffff8880ae82de3b R12: 0000000000000000 [ 55.916216][ T8140] R13: 0000000000000009 R14: ffff888095b80040 R15: ffff8880a08c86c0 [ 55.924327][ T8140] FS: 00000000012aa940(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 55.933328][ T8140] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.939977][ T8140] CR2: 0000000000c0fe80 CR3: 000000009f1e4000 CR4: 00000000001406f0 [ 55.947940][ T8140] Call Trace: [ 55.951330][ T8140] ? kfree_skbmem+0xaa/0x150 [ 55.955916][ T8140] tipc_sk_filter_rcv+0x1ed3/0x34b0 [ 55.961622][ T8140] ? debug_object_deactivate+0x1e4/0x360 [ 55.967580][ T8140] ? find_held_lock+0x35/0x130 [ 55.972341][ T8140] ? tipc_sk_overlimit2+0xa0/0xa0 [ 55.977355][ T8140] ? lock_downgrade+0x880/0x880 [ 55.982194][ T8140] ? __lock_acquire+0x548/0x3fb0 [ 55.987134][ T8140] ? __release_sock+0xca/0x3a0 [ 55.991884][ T8140] tipc_sk_backlog_rcv+0xeb/0x1e0 [ 55.996889][ T8140] ? tipc_sk_mcast_rcv+0x1020/0x1020 [ 56.002152][ T8140] ? __local_bh_enable_ip+0x15a/0x270 [ 56.007541][ T8140] ? lockdep_hardirqs_on+0x418/0x5d0 [ 56.012832][ T8140] ? __release_sock+0xca/0x3a0 [ 56.017806][ T8140] ? trace_hardirqs_on+0x67/0x230 [ 56.022820][ T8140] ? __release_sock+0xca/0x3a0 [ 56.027589][ T8140] ? __local_bh_enable_ip+0x15a/0x270 [ 56.032946][ T8140] __release_sock+0x12e/0x3a0 [ 56.037620][ T8140] release_sock+0x59/0x1c0 [ 56.042019][ T8140] tipc_release+0x9ea/0x14d0 [ 56.046592][ T8140] __sock_release+0xd3/0x2b0 [ 56.051535][ T8140] ? __sock_release+0x2b0/0x2b0 [ 56.056385][ T8140] sock_close+0x1b/0x30 [ 56.060525][ T8140] __fput+0x2e5/0x8d0 [ 56.064487][ T8140] ____fput+0x16/0x20 [ 56.068473][ T8140] task_work_run+0x14a/0x1c0 [ 56.073047][ T8140] exit_to_usermode_loop+0x273/0x2c0 [ 56.078311][ T8140] do_syscall_64+0x52d/0x610 [ 56.082883][ T8140] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 56.088855][ T8140] RIP: 0033:0x411fc1 [ 56.092743][ T8140] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 e4 1a 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 56.112519][ T8140] RSP: 002b:00007fff4533b920 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 56.120942][ T8140] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000411fc1 [ 56.129682][ T8140] RDX: 0000000000000000 RSI: 0000000000740900 RDI: 0000000000000005 [ 56.137910][ T8140] RBP: 0000000000000000 R08: 00000000007408f8 R09: 000000000000d9da [ 56.145863][ T8140] R10: 00007fff4533b840 R11: 0000000000000293 R12: 0000000000000001 [ 56.153818][ T8140] R13: 00007fff4533b960 R14: 0000000000000000 R15: 00007fff4533b970 [ 56.162033][ T8140] Modules linked in: [ 56.167857][ T8140] ---[ end trace 234951273c42853b ]--- [ 56.173367][ T8140] RIP: 0010:tipc_mcast_filter_msg+0x70/0x17a0 [ 56.179709][ T8140] Code: 4c 39 e0 b8 00 00 00 00 4c 0f 44 e0 e8 e9 cc a2 fa 48 b8 00 00 00 00 00 fc ff df 49 8d bc 24 c8 00 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 43 13 00 00 49 8b 9c 24 c8 00 00 00 48 b8 00 00 [ 56.199935][ T8140] RSP: 0018:ffff888085acf958 EFLAGS: 00010202 [ 56.206301][ T8140] RAX: dffffc0000000000 RBX: ffff888085acfab8 RCX: ffffffff86d5f8e4 [ 56.214696][ T8140] RDX: 0000000000000019 RSI: ffffffff86cd9747 RDI: 00000000000000c8 [ 56.222730][ T8140] RBP: ffff888085acf9c0 R08: ffff8880a06ae240 R09: ffffed1015d05bc8 [ 56.231140][ T8140] R10: ffffed1015d05bc7 R11: ffff8880ae82de3b R12: 0000000000000000 [ 56.239708][ T8140] R13: 0000000000000009 R14: ffff888095b80040 R15: ffff8880a08c86c0 [ 56.248270][ T8140] FS: 00000000012aa940(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 56.258481][ T8140] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.265124][ T8140] CR2: 0000000000c0fe80 CR3: 000000009f1e4000 CR4: 00000000001406f0 [ 56.273162][ T8140] Kernel panic - not syncing: Fatal exception [ 56.280165][ T8140] Kernel Offset: disabled [ 56.284487][ T8140] Rebooting in 86400 seconds..