[ 60.375937][ T27] audit: type=1800 audit(1566267195.270:21): pid=9565 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2419 res=0 [ 60.396775][ T27] audit: type=1800 audit(1566267195.270:22): pid=9565 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="motd" dev="sda1" ino=2447 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [ 61.549366][ T9631] sshd (9631) used greatest stack depth: 23456 bytes left [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.231' (ECDSA) to the list of known hosts. 2019/08/20 02:13:25 parsed 1 programs 2019/08/20 02:13:27 executed programs: 0 syzkaller login: [ 72.603018][ T9732] IPVS: ftp: loaded support on port[0] = 21 [ 72.648823][ T9732] chnl_net:caif_netlink_parms(): no params data found [ 72.669745][ T9732] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.676940][ T9732] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.684712][ T9732] device bridge_slave_0 entered promiscuous mode [ 72.692021][ T9732] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.699058][ T9732] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.706638][ T9732] device bridge_slave_1 entered promiscuous mode [ 72.719531][ T9732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.729894][ T9732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.745635][ T9732] team0: Port device team_slave_0 added [ 72.752475][ T9732] team0: Port device team_slave_1 added [ 72.831624][ T9732] device hsr_slave_0 entered promiscuous mode [ 72.880376][ T9732] device hsr_slave_1 entered promiscuous mode [ 72.925901][ T9732] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.932988][ T9732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.940324][ T9732] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.947354][ T9732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.970887][ T9732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.981728][ T9734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.989636][ T9734] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.997547][ T9734] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.005072][ T9734] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 73.014889][ T9732] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.023771][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.032124][ T2911] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.039140][ T2911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.057566][ T9732] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.068227][ T9732] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.080885][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.089214][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.096269][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.104052][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.112461][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.120987][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.129031][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.137513][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.145031][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.158246][ T9732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.749301][T10299] ------------[ cut here ]------------ [ 75.755368][T10299] WARNING: CPU: 1 PID: 10299 at include/net/sock.h:666 smc_unhash_sk.cold+0x11/0x18 [ 75.764728][T10299] Kernel panic - not syncing: panic_on_warn set ... [ 75.771291][T10299] CPU: 1 PID: 10299 Comm: syz-executor.0 Not tainted 5.3.0-rc3+ #168 [ 75.779323][T10299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 75.789351][T10299] Call Trace: [ 75.792624][T10299] dump_stack+0x172/0x1f0 [ 75.797016][T10299] ? smc_listen_work+0x1580/0x15a3 [ 75.802102][T10299] panic+0x2dc/0x755 [ 75.805966][T10299] ? add_taint.cold+0x16/0x16 [ 75.810620][T10299] ? __kasan_check_write+0x14/0x20 [ 75.815705][T10299] ? __warn.cold+0x5/0x4c [ 75.820179][T10299] ? __warn+0xe7/0x1e0 [ 75.824222][T10299] ? smc_unhash_sk.cold+0x11/0x18 [ 75.829216][T10299] __warn.cold+0x20/0x4c [ 75.833431][T10299] ? wake_up_klogd+0x99/0xd0 [ 75.837994][T10299] ? smc_unhash_sk.cold+0x11/0x18 [ 75.842990][T10299] report_bug+0x263/0x2b0 [ 75.847292][T10299] do_error_trap+0x11b/0x200 [ 75.851857][T10299] do_invalid_op+0x37/0x50 [ 75.856246][T10299] ? smc_unhash_sk.cold+0x11/0x18 [ 75.861240][T10299] invalid_op+0x23/0x30 [ 75.865371][T10299] RIP: 0010:smc_unhash_sk.cold+0x11/0x18 [ 75.870976][T10299] Code: 89 ff e8 0f 7a a6 fa e9 d7 f8 ff ff 4c 89 ff e8 02 7a a6 fa e9 57 fa ff ff e8 48 61 6c fa 48 c7 c7 e0 37 42 88 e8 10 01 56 fa <0f> 0b e9 ad 43 ff ff e8 30 61 6c fa 48 c7 c7 e0 37 42 88 e8 f8 00 [ 75.890552][T10299] RSP: 0018:ffff888089ae7ad0 EFLAGS: 00010282 [ 75.896589][T10299] RAX: 0000000000000024 RBX: ffff8880a0bd9400 RCX: 0000000000000000 [ 75.904537][T10299] RDX: 0000000000000000 RSI: ffffffff815c3b96 RDI: ffffed101135cf4c [ 75.912479][T10299] RBP: ffff888089ae7b00 R08: 0000000000000024 R09: fffffbfff11b42c5 [ 75.920421][T10299] R10: fffffbfff11b42c4 R11: ffffffff88da1623 R12: ffff8880a0bd9480 [ 75.928362][T10299] R13: ffffffff8999e040 R14: ffff8880a0bd9428 R15: 0000000000000001 [ 75.936318][T10299] ? vprintk_func+0x86/0x189 [ 75.940892][T10299] __smc_release+0x202/0x450 [ 75.945466][T10299] smc_release+0x10c/0x380 [ 75.949866][T10299] __sock_release+0xce/0x280 [ 75.954431][T10299] sock_close+0x1e/0x30 [ 75.958563][T10299] __fput+0x2ff/0x890 [ 75.962520][T10299] ? __sock_release+0x280/0x280 [ 75.967344][T10299] ____fput+0x16/0x20 [ 75.971301][T10299] task_work_run+0x145/0x1c0 [ 75.975866][T10299] get_signal+0x2078/0x2500 [ 75.980363][T10299] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 75.986582][T10299] ? debug_smp_processor_id+0x3c/0x214 [ 75.992016][T10299] ? kick_process+0xef/0x180 [ 75.996581][T10299] do_signal+0x87/0x1700 [ 76.000799][T10299] ? fput+0x1b/0x20 [ 76.004586][T10299] ? __sys_connect+0x12d/0x330 [ 76.009319][T10299] ? setup_sigcontext+0x7d0/0x7d0 [ 76.014314][T10299] ? put_timespec64+0xda/0x140 [ 76.019056][T10299] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 76.025279][T10299] ? trace_hardirqs_on+0x67/0x240 [ 76.030276][T10299] exit_to_usermode_loop+0x286/0x380 [ 76.035534][T10299] do_syscall_64+0x5a9/0x6a0 [ 76.040102][T10299] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 76.045978][T10299] RIP: 0033:0x459829 [ 76.049848][T10299] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 76.069424][T10299] RSP: 002b:00007f105c4d1c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 76.077807][T10299] RAX: ffffffffffffff8d RBX: 0000000000000003 RCX: 0000000000459829 [ 76.085749][T10299] RDX: 0000000000000010 RSI: 0000000020000080 RDI: 0000000000000003 [ 76.093691][T10299] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 76.101638][T10299] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f105c4d26d4 [ 76.109579][T10299] R13: 00000000004bfd64 R14: 00000000004d1b60 R15: 00000000ffffffff [ 76.118711][T10299] Kernel Offset: disabled [ 76.123035][T10299] Rebooting in 86400 seconds..