[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 58.814486][ T26] audit: type=1800 audit(1571953522.987:25): pid=8793 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 58.836516][ T26] audit: type=1800 audit(1571953522.987:26): pid=8793 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 58.888776][ T26] audit: type=1800 audit(1571953522.987:27): pid=8793 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.214' (ECDSA) to the list of known hosts. syzkaller login: [ 74.655245][ T8946] IPVS: ftp: loaded support on port[0] = 21 [ 74.720848][ T8946] chnl_net:caif_netlink_parms(): no params data found [ 74.751108][ T8946] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.759655][ T8946] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.767599][ T8946] device bridge_slave_0 entered promiscuous mode [ 74.775754][ T8946] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.783018][ T8946] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.791237][ T8946] device bridge_slave_1 entered promiscuous mode [ 74.809015][ T8946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.819441][ T8946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.839749][ T8946] team0: Port device team_slave_0 added [ 74.846913][ T8946] team0: Port device team_slave_1 added [ 74.908698][ T8946] device hsr_slave_0 entered promiscuous mode [ 74.976377][ T8946] device hsr_slave_1 entered promiscuous mode [ 75.034544][ T8946] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.042036][ T8946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.050418][ T8946] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.057520][ T8946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.091309][ T8946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.104486][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.124656][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.143793][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.152400][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 75.164150][ T8946] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.175657][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.184628][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.191854][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.204017][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.212858][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.220132][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.238030][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.247843][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.259381][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.274526][ T8946] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network executing program [ 75.287269][ T8946] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.300388][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.309411][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.318571][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.337674][ T8946] 8021q: adding VLAN 0 to HW filter on device batadv0 executing program executing program executing program executing program executing program executing program executing program [ 75.443896][ C1] kasan: CONFIG_KASAN_INLINE enabled [ 75.450418][ C1] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 75.458748][ C1] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 75.465689][ C1] CPU: 1 PID: 8962 Comm: syz-executor732 Not tainted 5.4.0-rc4-next-20191024 #0 [ 75.475097][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 75.485509][ C1] RIP: 0010:ip_sublist_rcv+0x5c0/0x940 [ 75.490958][ C1] Code: 0f 85 2f 01 00 00 e8 2f 76 5a fb 48 8b 85 00 ff ff ff 48 8d b8 e8 0e 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 64 03 00 00 48 8b 85 00 ff ff ff 4c 8b a0 e8 0e [ 75.510918][ C1] RSP: 0018:ffff8880ae9098e8 EFLAGS: 00010206 [ 75.516980][ C1] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff8618faa1 [ 75.524946][ C1] RDX: 00000000000001dd RSI: ffffffff8618f941 RDI: 0000000000000ee8 [ 75.533172][ C1] RBP: ffff8880ae909a10 R08: ffff8880a3a84200 R09: ffffed1015d26b7d [ 75.541138][ C1] R10: ffffed1015d26b7c R11: ffff8880ae935be3 R12: 0000000000000001 [ 75.549097][ C1] R13: ffff888095b60000 R14: ffff8880ae909a78 R15: ffff8880ae9099e8 [ 75.557065][ C1] FS: 0000000001067880(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 75.566139][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.572721][ C1] CR2: 0000000000000004 CR3: 0000000092a71000 CR4: 00000000001406e0 [ 75.580688][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 75.588748][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 75.596777][ C1] Call Trace: [ 75.600045][ C1] [ 75.602889][ C1] ? kmem_cache_free+0xab/0x320 [ 75.607726][ C1] ? ip_rcv_finish+0x2f0/0x2f0 [ 75.612573][ C1] ? kfree_skbmem+0xca/0x150 [ 75.617178][ C1] ? kfree_skb+0x10e/0x3c0 [ 75.621601][ C1] ? ip_rcv_core.isra.0+0x878/0xc80 [ 75.626803][ C1] ip_list_rcv+0x370/0x4ac [ 75.632249][ C1] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 75.638976][ C1] ? ip_rcv+0x3f0/0x3f0 [ 75.643128][ C1] ? ip_rcv+0x3f0/0x3f0 [ 75.647281][ C1] __netif_receive_skb_list_core+0x5fc/0x9d0 [ 75.653308][ C1] ? process_backlog+0x750/0x750 [ 75.658837][ C1] ? lock_acquire+0x20b/0x410 [ 75.663493][ C1] ? __kasan_check_read+0x11/0x20 [ 75.668503][ C1] netif_receive_skb_list_internal+0x7eb/0xe50 [ 75.674656][ C1] ? __netif_receive_skb_list_core+0x9d0/0x9d0 [ 75.680917][ C1] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 75.688230][ C1] ? dev_gro_receive+0x256/0x23a0 [ 75.693373][ C1] gro_normal_list.part.0+0x1e/0xb0 [ 75.698715][ C1] gro_normal_one+0x184/0x1d0 [ 75.703392][ C1] napi_gro_receive+0x5eb/0x770 [ 75.708255][ C1] gro_cell_poll+0x132/0x1f0 [ 75.712841][ C1] ? lockdep_hardirqs_on+0x19e/0x5e0 [ 75.719009][ C1] net_rx_action+0x508/0x1120 [ 75.723704][ C1] ? napi_busy_loop+0x970/0x970 [ 75.728546][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 75.734355][ C1] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 75.741469][ C1] ? tun_get_user+0x2e65/0x3f80 [ 75.746305][ C1] ? trace_hardirqs_on+0x67/0x240 [ 75.751312][ C1] __do_softirq+0x262/0x98c [ 75.755991][ C1] ? tun_get_user+0x2e65/0x3f80 [ 75.760869][ C1] do_softirq_own_stack+0x2a/0x40 [ 75.765971][ C1] [ 75.768914][ C1] do_softirq.part.0+0x11a/0x170 [ 75.773832][ C1] __local_bh_enable_ip+0x211/0x270 [ 75.779022][ C1] tun_get_user+0x2ea4/0x3f80 [ 75.783954][ C1] ? __kasan_check_read+0x11/0x20 [ 75.789053][ C1] ? tun_build_skb.isra.0+0x1380/0x1380 [ 75.794674][ C1] ? rcu_read_lock_held+0x9c/0xb0 [ 75.799701][ C1] ? __kasan_check_read+0x11/0x20 [ 75.804717][ C1] tun_chr_write_iter+0xbd/0x156 [ 75.809740][ C1] do_iter_readv_writev+0x5f8/0x8f0 [ 75.814947][ C1] ? no_seek_end_llseek_size+0x70/0x70 [ 75.821108][ C1] ? apparmor_file_permission+0x25/0x30 [ 75.827429][ C1] ? rw_verify_area+0x126/0x360 [ 75.832275][ C1] do_iter_write+0x184/0x610 [ 75.837377][ C1] vfs_writev+0x1b3/0x2f0 [ 75.841826][ C1] ? vfs_iter_write+0xb0/0xb0 [ 75.846489][ C1] ? __might_fault+0x1a1/0x1e0 [ 75.851238][ C1] ? __get_user_8+0x30/0x33 [ 75.856267][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 75.862603][ C1] ? __do_sys_perf_event_open+0xda/0x2b90 [ 75.868765][ C1] ? filename_create+0x274/0x4f0 [ 75.873692][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 75.880278][ C1] ? __fget_light+0x1a9/0x230 [ 75.884949][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 75.891258][ C1] do_writev+0x15b/0x330 [ 75.895503][ C1] ? vfs_writev+0x2f0/0x2f0 [ 75.899991][ C1] ? do_syscall_64+0x26/0x760 [ 75.904649][ C1] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 75.911318][ C1] ? do_syscall_64+0x26/0x760 [ 75.916428][ C1] __x64_sys_writev+0x75/0xb0 [ 75.921183][ C1] do_syscall_64+0xfa/0x760 [ 75.925689][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 75.931716][ C1] RIP: 0033:0x442d30 [ 75.935883][ C1] Code: 05 48 3d 01 f0 ff ff 0f 83 5d 09 fc ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 83 3d e1 92 29 00 00 75 14 b8 14 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 34 09 fc ff c3 48 83 ec 08 e8 ba 2b 00 00 [ 75.956732][ C1] RSP: 002b:00007ffc7c1b8c18 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 75.965751][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000442d30 [ 75.974068][ C1] RDX: 0000000000000001 RSI: 00007ffc7c1b8c60 RDI: 00000000000000f0 [ 75.982134][ C1] RBP: 0000000000012690 R08: 0000000000000000 R09: 00000000bb1414ac [ 75.990091][ C1] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc7c1b8c60 [ 75.998143][ C1] R13: 0000000000403b80 R14: 0000000000000000 R15: 0000000000000000 [ 76.006318][ C1] Modules linked in: [ 76.010365][ C1] ---[ end trace 3b95d77a6bc533ea ]--- [ 76.016065][ C1] RIP: 0010:ip_sublist_rcv+0x5c0/0x940 [ 76.021868][ C1] Code: 0f 85 2f 01 00 00 e8 2f 76 5a fb 48 8b 85 00 ff ff ff 48 8d b8 e8 0e 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 64 03 00 00 48 8b 85 00 ff ff ff 4c 8b a0 e8 0e [ 76.042646][ C1] RSP: 0018:ffff8880ae9098e8 EFLAGS: 00010206 [ 76.048943][ C1] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff8618faa1 [ 76.057391][ C1] RDX: 00000000000001dd RSI: ffffffff8618f941 RDI: 0000000000000ee8 [ 76.065450][ C1] RBP: ffff8880ae909a10 R08: ffff8880a3a84200 R09: ffffed1015d26b7d [ 76.073733][ C1] R10: ffffed1015d26b7c R11: ffff8880ae935be3 R12: 0000000000000001 [ 76.081797][ C1] R13: ffff888095b60000 R14: ffff8880ae909a78 R15: ffff8880ae9099e8 [ 76.090107][ C1] FS: 0000000001067880(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 76.099696][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.106326][ C1] CR2: 0000000000000004 CR3: 0000000092a71000 CR4: 00000000001406e0 [ 76.114609][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 76.123298][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 76.131473][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 76.140815][ C1] Kernel Offset: disabled [ 76.145167][ C1] Rebooting in 86400 seconds..