[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 28.791384] kauditd_printk_skb: 8 callbacks suppressed [ 28.791395] audit: type=1800 audit(1544833003.086:29): pid=5891 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 28.821200] audit: type=1800 audit(1544833003.086:30): pid=5891 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 34.785655] sshd (6030) used greatest stack depth: 15744 bytes left Warning: Permanently added '10.128.0.114' (ECDSA) to the list of known hosts. net.ipv6.conf.syz_tun.accept_dad = 0 [ 49.460853] IPVS: ftp: loaded support on port[0] = 21 net.ipv6.conf.syz_tun.router_solicitations = 0 [ 49.722667] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.729573] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.736617] device bridge_slave_0 entered promiscuous mode [ 49.755594] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.762277] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.769781] device bridge_slave_1 entered promiscuous mode [ 49.787866] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 49.806486] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 49.858118] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 49.879197] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 49.955612] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 49.963139] team0: Port device team_slave_0 added [ 49.980877] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 49.988323] team0: Port device team_slave_1 added [ 50.005347] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.024944] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.043957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.063015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready RTNETLINK answers: Operation not supported RTNETLINK answers: No buffer space available RTNETLINK answers: Operation not supported [ 50.210771] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.217399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.224164] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.230707] bridge0: port 1(bridge_slave_0) entered forwarding state RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument [ 50.757160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.810422] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 50.862077] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 50.868501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.875580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.928648] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.227237] kasan: CONFIG_KASAN_INLINE enabled [ 51.232024] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 51.239451] WARNING: CPU: 0 PID: -2035180937 at kernel/rcu/tree_plugin.h:438 __rcu_read_unlock+0x266/0x2e0 [ 51.249222] Kernel panic - not syncing: panic_on_warn set ... [ 51.255105] CPU: 0 PID: -2035180937 Comm: L Not tainted 4.20.0-rc6+ #344 [ 51.262524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 51.271956] Call Trace: [ 51.274519] [ 51.276740] dump_stack+0x244/0x39d [ 51.280637] ? dump_stack_print_info.cold.1+0x20/0x20 [ 51.286537] panic+0x2ad/0x55c [ 51.289817] ? add_taint.cold.5+0x16/0x16 [ 51.294412] ? __warn.cold.8+0x5/0x45 [ 51.298242] ? __warn+0xe8/0x1d0 [ 51.301858] ? __rcu_read_unlock+0x266/0x2e0 [ 51.306592] __warn.cold.8+0x20/0x45 [ 51.310435] ? __rcu_read_unlock+0x266/0x2e0 [ 51.315009] report_bug+0x254/0x2d0 [ 51.319001] do_error_trap+0x11b/0x200 [ 51.323299] do_invalid_op+0x36/0x40 [ 51.327291] invalid_op+0x14/0x20 [ 51.330743] RIP: 0010:__rcu_read_unlock+0x266/0x2e0 [ 51.335741] Code: 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 0f b6 04 02 84 c0 74 04 3c 03 7e 6f 41 c7 84 24 70 03 00 00 00 00 00 00 e9 5a fe ff ff <0f> 0b e9 da fe ff ff 4c 89 f7 e8 1b 14 59 00 e9 2a fe ff ff 4c 89 [ 51.354744] RSP: 0018:ffff8881dae075e8 EFLAGS: 00010006 [ 51.360086] RAX: dffffc0000000000 RBX: 1ffff1103b5c0ebe RCX: ffffffff8153f599 [ 51.367339] RDX: 1ffff1103b5c0eca RSI: ffffffff8153f5bb RDI: 0000000000000005 [ 51.374634] RBP: ffff8881dae076b8 R08: ffff8881bf1f4540 R09: ffffed103b5c3ef8 [ 51.381882] R10: ffffed103b5c3ef8 R11: ffff8881dae1f7c7 R12: 00000000fdb21501 [ 51.389138] R13: 1ffff1103b5c0eca R14: ffff8881bf1f48b0 R15: ffff8881dae07690 [ 51.397083] ? atomic_notifier_call_chain+0xa9/0x190 [ 51.402220] ? atomic_notifier_call_chain+0xcb/0x190 [ 51.407841] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 51.412784] ? module_enable_ro.part.69+0xe0/0xe0 [ 51.417808] ? lock_release+0xa00/0xa00 [ 51.421776] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 51.427537] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 51.432645] ? cmp_ex_search+0x8c/0xb0 [ 51.436962] atomic_notifier_call_chain+0xd0/0x190 [ 51.442117] notify_die+0x1bd/0x2d0 [ 51.446121] ? __atomic_notifier_call_chain+0x1a0/0x1a0 [ 51.451768] ? cpuacct_account_field+0x140/0x3d0 [ 51.456644] ? search_exception_tables+0x47/0x50 [ 51.461494] ? fixup_exception+0xb1/0xde [ 51.465993] do_general_protection+0x16d/0x2f0 [ 51.470909] general_protection+0x1e/0x30 [ 51.475045] RIP: 0010:cpuacct_account_field+0x140/0x3d0 [ 51.480650] Code: b6 97 08 00 85 c0 74 0d 80 3d 69 bb b2 08 00 0f 84 a4 01 00 00 49 8d 7e 10 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 4e 02 00 00 4d 8b 7e 10 49 81 ff 20 23 58 89 0f [ 51.499740] RSP: 0018:ffff8881dae078a8 EFLAGS: 00010002 [ 51.505086] RAX: dffffc0000000000 RBX: ffff8881dae07918 RCX: 0000000000000000 [ 51.512340] RDX: 000000000000000e RSI: 00000000ffff8881 RDI: 0000000000000072 [ 51.519592] RBP: ffff8881dae07940 R08: 0000000000000000 R09: 0000000000000000 [ 51.526852] R10: ffffed1037304851 R11: 0000000000000007 R12: 0000000000982e14 [ 51.534102] R13: dffffc0000000000 R14: 0000000000000062 R15: ffff8881bf1f4540 [ 51.542324] ? cpuacct_account_field+0x11a/0x3d0 [ 51.547260] ? cpuacct_charge+0x440/0x440 [ 51.551486] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 51.557062] ? check_preemption_disabled+0x48/0x280 [ 51.562583] account_system_index_time+0x1e8/0x5d0 [ 51.567757] ? account_guest_time+0x430/0x430 [ 51.572340] ? tick_do_update_jiffies64.part.17+0x18f/0x290 [ 51.578197] ? lock_downgrade+0x900/0x900 [ 51.582426] ? lock_downgrade+0x900/0x900 [ 51.586972] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 51.592626] ? check_preemption_disabled+0x48/0x280 [ 51.598088] irqtime_account_process_tick.isra.6+0x35b/0x490 [ 51.604321] account_process_tick+0x282/0x350 [ 51.609093] ? update_wall_time+0x10/0x20 [ 51.613733] update_process_times+0x21/0x70 [ 51.618234] tick_sched_handle+0x9f/0x180 [ 51.622564] tick_sched_timer+0x45/0x130 [ 51.626811] __hrtimer_run_queues+0x41c/0x10d0 [ 51.631822] ? tick_sched_do_timer+0x1a0/0x1a0 [ 51.636754] ? hrtimer_start_range_ns+0xe00/0xe00 [ 51.642116] ? pvclock_read_flags+0x160/0x160 [ 51.646767] ? trace_hardirqs_on+0x310/0x310 [ 51.651169] ? kvm_clock_read+0x18/0x30 [ 51.655321] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 51.660719] ? kvm_clock_read+0x18/0x30 [ 51.664766] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 51.669821] ? ktime_get_update_offsets_now+0x3b3/0x540 [ 51.675594] ? do_timer+0x50/0x50 [ 51.679122] ? rwlock_bug.part.2+0x90/0x90 [ 51.683357] ? trace_hardirqs_on+0x310/0x310 [ 51.687889] ? rcu_softirq_qs+0x20/0x20 [ 51.692550] hrtimer_interrupt+0x313/0x780 [ 51.697888] smp_apic_timer_interrupt+0x1a1/0x760 [ 51.702718] ? smp_reschedule_interrupt+0x109/0x650 [ 51.707816] ? smp_call_function_single_interrupt+0x650/0x650 [ 51.713776] ? interrupt_entry+0xb5/0xc0 [ 51.718276] ? trace_hardirqs_off_caller+0xbb/0x310 [ 51.723275] ? trace_hardirqs_off_caller+0xbb/0x310 [ 51.728361] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 51.733313] ? trace_hardirqs_on_caller+0x310/0x310 [ 51.738325] ? trace_hardirqs_on_caller+0x310/0x310 [ 51.744079] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 51.749435] apic_timer_interrupt+0xf/0x20 [ 51.753728] [ 51.756868] Kernel Offset: disabled [ 51.760597] Rebooting in 86400 seconds..