[ 36.249682] audit: type=1800 audit(1551900427.285:28): pid=7541 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 36.937771] audit: type=1800 audit(1551900428.055:29): pid=7541 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 36.957569] audit: type=1800 audit(1551900428.055:30): pid=7541 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 [....] startpar: service(s) returned failure: rsyslog ...[?25l[?1c7[FAIL8[?25h[?0c failed! Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.12' (ECDSA) to the list of known hosts. 2019/03/06 19:27:16 parsed 1 programs 2019/03/06 19:27:18 executed programs: 0 syzkaller login: [ 47.023100] IPVS: ftp: loaded support on port[0] = 21 [ 47.078016] chnl_net:caif_netlink_parms(): no params data found [ 47.106882] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.113453] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.120647] device bridge_slave_0 entered promiscuous mode [ 47.127878] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.134242] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.141401] device bridge_slave_1 entered promiscuous mode [ 47.155233] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 47.163917] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 47.180347] team0: Port device team_slave_0 added [ 47.186501] team0: Port device team_slave_1 added [ 47.236558] device hsr_slave_0 entered promiscuous mode [ 47.304620] device hsr_slave_1 entered promiscuous mode [ 47.382294] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.388768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.395643] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.401995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.431090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.442618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.451903] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.459389] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.466501] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 47.477347] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.487172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.495010] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.501340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.515037] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.522615] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.529021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.536872] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.544921] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.558852] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 47.568924] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.581093] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.589020] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.596866] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.604721] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.618722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.891129] kasan: CONFIG_KASAN_INLINE enabled [ 47.898142] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 47.905685] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 47.911952] CPU: 0 PID: 7771 Comm: syz-executor.0 Not tainted 5.0.0+ #8 [ 47.918822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 47.928179] RIP: 0010:kernfs_add_one+0x343/0x4d0 [ 47.932928] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 52 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 5b 70 48 8d 7b 08 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 1f 01 00 00 8b 5b 08 31 ff 83 [ 47.951817] RSP: 0018:ffff88809f85f858 EFLAGS: 00010202 [ 47.957212] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff8705eb68 [ 47.964480] RDX: 0000000000000001 RSI: ffffffff81d2fccb RDI: 0000000000000008 [ 47.971774] RBP: ffff88809f85f898 R08: 1ffffffff1151404 R09: fffffbfff1151405 [ 47.979043] R10: fffffbfff1151404 R11: ffffffff88a8a027 R12: ffff8880a78a89a0 [ 47.986314] R13: ffff8880a78a89a0 R14: 0000000000000000 R15: 0000000000000000 [ 47.993581] FS: 00007f92dcaaf700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 48.001808] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 48.007681] CR2: 0000000001d14000 CR3: 0000000097b9d000 CR4: 00000000001406f0 [ 48.014945] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 48.022205] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 48.029462] Call Trace: [ 48.032048] kernfs_create_dir_ns+0xff/0x160 [ 48.036451] sysfs_create_dir_ns+0x131/0x2a0 [ 48.040853] ? sysfs_create_mount_point+0xa0/0xa0 [ 48.045690] ? class_dir_child_ns_type+0xd/0x60 [ 48.050349] kobject_add_internal.cold+0xe5/0x5d4 [ 48.055186] kobject_add+0x150/0x1c0 [ 48.058890] ? kset_create_and_add+0x1a0/0x1a0 [ 48.063468] ? kasan_check_read+0x11/0x20 [ 48.067609] ? mutex_unlock+0xd/0x10 [ 48.071313] ? device_add+0x30f/0x1870 [ 48.075212] device_add+0x3d5/0x1870 [ 48.079014] ? device_initialize+0x440/0x440 [ 48.083416] ? get_device_parent.isra.0+0x570/0x570 [ 48.088462] hci_register_dev+0x304/0x880 [ 48.092608] __vhci_create_device+0x2d0/0x5a0 [ 48.097097] vhci_write+0x2d0/0x470 [ 48.100717] __vfs_write+0x613/0x8e0 [ 48.104452] ? kernel_read+0x120/0x120 [ 48.108331] ? common_file_perm+0x1d6/0x6f0 [ 48.112645] ? apparmor_file_permission+0x25/0x30 [ 48.117480] ? rw_verify_area+0x118/0x360 [ 48.121619] vfs_write+0x20c/0x580 [ 48.125153] ksys_write+0xea/0x1f0 [ 48.128684] ? __ia32_sys_read+0xb0/0xb0 [ 48.132761] ? do_syscall_64+0x26/0x610 [ 48.136778] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 48.142132] ? do_syscall_64+0x26/0x610 [ 48.146098] __x64_sys_write+0x73/0xb0 [ 48.149988] do_syscall_64+0x103/0x610 [ 48.153882] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 48.159064] RIP: 0033:0x457f29 [ 48.162260] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 48.181273] RSP: 002b:00007f92dcaaec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 48.188970] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457f29 [ 48.196230] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000004 [ 48.203755] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 48.211017] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f92dcaaf6d4 [ 48.218279] R13: 00000000004c6ff5 R14: 00000000004dc918 R15: 00000000ffffffff [ 48.225550] Modules linked in: [ 48.232264] ---[ end trace 5e80d209de7c4a62 ]--- [ 48.237207] RIP: 0010:kernfs_add_one+0x343/0x4d0 [ 48.241970] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 52 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 5b 70 48 8d 7b 08 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 1f 01 00 00 8b 5b 08 31 ff 83 [ 48.261305] RSP: 0018:ffff88809f85f858 EFLAGS: 00010202 [ 48.266880] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff8705eb68 [ 48.274233] RDX: 0000000000000001 RSI: ffffffff81d2fccb RDI: 0000000000000008 [ 48.281980] RBP: ffff88809f85f898 R08: 1ffffffff1151404 R09: fffffbfff1151405 [ 48.289837] R10: fffffbfff1151404 R11: ffffffff88a8a027 R12: ffff8880a78a89a0 [ 48.297480] R13: ffff8880a78a89a0 R14: 0000000000000000 R15: 0000000000000000 [ 48.304841] FS: 00007f92dcaaf700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 48.313281] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 48.319566] CR2: 0000000001d14000 CR3: 0000000097b9d000 CR4: 00000000001406f0 [ 48.326893] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 48.334296] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 48.341947] Kernel panic - not syncing: Fatal exception [ 48.348100] Kernel Offset: disabled [ 48.351752] Rebooting in 86400 seconds..