[ 71.582171][ T27] audit: type=1800 audit(1582352840.875:24): pid=9669 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="sudo" dev="sda1" ino=2454 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 72.194901][ T27] audit: type=1800 audit(1582352841.615:25): pid=9669 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 72.215034][ T27] audit: type=1800 audit(1582352841.615:26): pid=9669 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.15.194' (ECDSA) to the list of known hosts. 2020/02/22 06:42:56 parsed 1 programs 2020/02/22 06:42:58 executed programs: 0 syzkaller login: [ 1008.777387][ T9840] IPVS: ftp: loaded support on port[0] = 21 [ 1008.836848][ T9840] chnl_net:caif_netlink_parms(): no params data found [ 1008.876022][ T9840] bridge0: port 1(bridge_slave_0) entered blocking state [ 1008.884155][ T9840] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.892074][ T9840] device bridge_slave_0 entered promiscuous mode [ 1008.900662][ T9840] bridge0: port 2(bridge_slave_1) entered blocking state [ 1008.908006][ T9840] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.915918][ T9840] device bridge_slave_1 entered promiscuous mode [ 1008.934056][ T9840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1008.945026][ T9840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1008.964353][ T9840] team0: Port device team_slave_0 added [ 1008.971780][ T9840] team0: Port device team_slave_1 added [ 1008.986703][ T9840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1008.994391][ T9840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1009.021165][ T9840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1009.034199][ T9840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1009.041150][ T9840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1009.068165][ T9840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1009.125917][ T9840] device hsr_slave_0 entered promiscuous mode [ 1009.163200][ T9840] device hsr_slave_1 entered promiscuous mode [ 1009.299076][ T9840] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1009.356104][ T9840] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1009.405892][ T9840] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1009.505105][ T9840] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1009.568791][ T9840] bridge0: port 2(bridge_slave_1) entered blocking state [ 1009.576139][ T9840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1009.584158][ T9840] bridge0: port 1(bridge_slave_0) entered blocking state [ 1009.591718][ T9840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1009.637882][ T9840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1009.652017][ T9845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1009.673441][ T9845] bridge0: port 1(bridge_slave_0) entered disabled state [ 1009.692397][ T9845] bridge0: port 2(bridge_slave_1) entered disabled state [ 1009.700741][ T9845] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1009.714078][ T9840] 8021q: adding VLAN 0 to HW filter on device team0 [ 1009.736802][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1009.745289][ T3535] bridge0: port 1(bridge_slave_0) entered blocking state [ 1009.752526][ T3535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1009.774498][ T9845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1009.783659][ T9845] bridge0: port 2(bridge_slave_1) entered blocking state [ 1009.790713][ T9845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1009.799330][ T9845] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1009.808459][ T9845] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1009.824344][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1009.833123][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1009.846788][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1009.855349][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1009.866859][ T9840] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1009.887166][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1009.894854][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1009.908649][ T9840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1009.931769][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1009.941368][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1009.962698][ T9840] device veth0_vlan entered promiscuous mode [ 1009.969703][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1009.979169][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1009.989380][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1009.997326][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1010.009630][ T9840] device veth1_vlan entered promiscuous mode [ 1010.031983][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1010.041066][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1010.049659][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1010.058381][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1010.070109][ T9840] device veth0_macvtap entered promiscuous mode [ 1010.080598][ T9840] device veth1_macvtap entered promiscuous mode [ 1010.097441][ T9840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1010.105883][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1010.114894][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1010.123270][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1010.132037][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1010.143614][ T9840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1010.153014][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1010.161657][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1010.478264][ T9863] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 1010.486240][ T9863] #PF: supervisor instruction fetch in kernel mode [ 1010.492822][ T9863] #PF: error_code(0x0010) - not-present page [ 1010.498796][ T9863] PGD 923ca067 P4D 923ca067 PUD 92283067 PMD 0 [ 1010.505092][ T9863] Oops: 0010 [#1] PREEMPT SMP KASAN [ 1010.510401][ T9863] CPU: 1 PID: 9863 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0 [ 1010.518968][ T9863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1010.529138][ T9863] RIP: 0010:0x0 [ 1010.532677][ T9863] Code: Bad RIP value. [ 1010.536730][ T9863] RSP: 0018:ffffc90006a8fd70 EFLAGS: 00010246 [ 1010.542871][ T9863] RAX: dffffc0000000000 RBX: ffff888091854080 RCX: ffffffff86bae892 [ 1010.550830][ T9863] RDX: 1ffffffff18811b8 RSI: 0000000000000000 RDI: ffff8880942b2080 [ 1010.560355][ T9863] RBP: ffffc90006a8fda0 R08: ffff8880a8ee0100 R09: ffffed101285641d [ 1010.568757][ T9863] R10: ffffed101285641c R11: ffff8880942b20e7 R12: ffff8880942b2080 [ 1010.576907][ T9863] R13: ffffffff8c408dc0 R14: ffff888091854098 R15: 0000000000000000 [ 1010.584877][ T9863] FS: 0000000001201940(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 1010.593796][ T9863] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1010.600496][ T9863] CR2: ffffffffffffffd6 CR3: 00000000a5ff2000 CR4: 00000000001406e0 [ 1010.608596][ T9863] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1010.616564][ T9863] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1010.624519][ T9863] Call Trace: [ 1010.627924][ T9863] inet_release+0xed/0x200 [ 1010.632617][ T9863] __sock_release+0xce/0x280 [ 1010.637221][ T9863] sock_close+0x1e/0x30 [ 1010.641426][ T9863] __fput+0x2ff/0x890 [ 1010.645400][ T9863] ? __sock_release+0x280/0x280 [ 1010.650412][ T9863] ____fput+0x16/0x20 [ 1010.654459][ T9863] task_work_run+0x145/0x1c0 [ 1010.659419][ T9863] exit_to_usermode_loop+0x316/0x380 [ 1010.664732][ T9863] do_syscall_64+0x676/0x790 [ 1010.669413][ T9863] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1010.675474][ T9863] RIP: 0033:0x415fc1 [ 1010.679356][ T9863] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1010.699947][ T9863] RSP: 002b:00007ffe4a987720 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1010.708353][ T9863] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000415fc1 [ 1010.716318][ T9863] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1010.724446][ T9863] RBP: 0000000000000000 R08: 01ffffffffffffff R09: 01ffffffffffffff [ 1010.732421][ T9863] R10: 00007ffe4a987800 R11: 0000000000000293 R12: 000000000076bfc0 [ 1010.740424][ T9863] R13: 0000000000770bc8 R14: 00000000000f6b3d R15: 000000000076bfcc [ 1010.748414][ T9863] Modules linked in: [ 1010.752311][ T9863] CR2: 0000000000000000 [ 1010.758474][ T9863] ---[ end trace 770cb13c715fd971 ]--- [ 1010.764483][ T9863] RIP: 0010:0x0 [ 1010.767954][ T9863] Code: Bad RIP value. [ 1010.772010][ T9863] RSP: 0018:ffffc90006a8fd70 EFLAGS: 00010246 [ 1010.778722][ T9863] RAX: dffffc0000000000 RBX: ffff888091854080 RCX: ffffffff86bae892 [ 1010.786838][ T9863] RDX: 1ffffffff18811b8 RSI: 0000000000000000 RDI: ffff8880942b2080 [ 1010.795244][ T9863] RBP: ffffc90006a8fda0 R08: ffff8880a8ee0100 R09: ffffed101285641d [ 1010.803557][ T9863] R10: ffffed101285641c R11: ffff8880942b20e7 R12: ffff8880942b2080 [ 1010.811539][ T9863] R13: ffffffff8c408dc0 R14: ffff888091854098 R15: 0000000000000000 [ 1010.819868][ T9863] FS: 0000000001201940(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 1010.828984][ T9863] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1010.835830][ T9863] CR2: ffffffffffffffd6 CR3: 00000000a5ff2000 CR4: 00000000001406e0 [ 1010.843845][ T9863] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1010.851822][ T9863] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1010.859886][ T9863] Kernel panic - not syncing: Fatal exception [ 1010.867591][ T9863] Kernel Offset: disabled [ 1010.871963][ T9863] Rebooting in 86400 seconds..