[ 37.847767] audit: type=1800 audit(1546146091.498:26): pid=7797 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 37.885115] audit: type=1800 audit(1546146091.498:27): pid=7797 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 37.905293] audit: type=1800 audit(1546146091.498:28): pid=7797 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 38.433704] startpar (7797) used greatest stack depth: 15736 bytes left Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.125' (ECDSA) to the list of known hosts. syzkaller login: [ 62.658678] IPVS: ftp: loaded support on port[0] = 21 [ 62.716702] chnl_net:caif_netlink_parms(): no params data found [ 62.749218] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.757129] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.764480] device bridge_slave_0 entered promiscuous mode [ 62.771597] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.778346] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.785455] device bridge_slave_1 entered promiscuous mode [ 62.802431] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 62.811432] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 62.827952] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 62.835722] team0: Port device team_slave_0 added [ 62.841039] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 62.848319] team0: Port device team_slave_1 added [ 62.853536] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 62.860783] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 62.924474] device hsr_slave_0 entered promiscuous mode [ 62.962401] device hsr_slave_1 entered promiscuous mode [ 63.002700] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 63.009557] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 63.023399] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.029809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.036890] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.043371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.075463] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 63.081538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.090987] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 63.099596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.119879] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.127151] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.135441] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 63.145597] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 63.151664] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.160761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.168754] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.175255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.194138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.201839] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.208263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.215949] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.223950] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.231948] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.243260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.253864] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.265525] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready executing program [ 63.271550] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.279623] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.294367] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 63.304304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.318522] ------------[ cut here ]------------ [ 63.323439] HSR: VLAN not yet supported [ 63.323780] WARNING: CPU: 0 PID: 7951 at net/hsr/hsr_forward.c:336 hsr_forward_skb+0x2196/0x28a0 [ 63.336735] Kernel panic - not syncing: panic_on_warn set ... [ 63.342643] CPU: 0 PID: 7951 Comm: syz-executor207 Not tainted 4.20.0+ #363 [ 63.349861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 63.359203] Call Trace: [ 63.361786] dump_stack+0x1d3/0x2c6 [ 63.365408] ? dump_stack_print_info.cold.1+0x20/0x20 [ 63.370591] panic+0x2ad/0x55f [ 63.373769] ? add_taint.cold.5+0x16/0x16 [ 63.378059] ? __warn.cold.8+0x5/0x52 [ 63.381850] ? __warn+0xe8/0x1d0 [ 63.385212] ? hsr_forward_skb+0x2196/0x28a0 [ 63.389604] __warn.cold.8+0x20/0x52 [ 63.393312] ? rcu_softirq_qs+0x20/0x20 [ 63.397276] ? hsr_forward_skb+0x2196/0x28a0 [ 63.401672] report_bug+0x254/0x2d0 [ 63.405288] do_error_trap+0x11b/0x200 [ 63.409163] do_invalid_op+0x36/0x40 [ 63.412876] ? hsr_forward_skb+0x2196/0x28a0 [ 63.417283] invalid_op+0x14/0x20 [ 63.420724] RIP: 0010:hsr_forward_skb+0x2196/0x28a0 [ 63.425725] Code: e7 e8 9e 2a ff ff e9 8f f3 ff ff 48 89 85 b0 fe ff ff e8 bd 9f 91 f9 48 c7 c7 e0 cd f9 88 c6 05 a6 98 46 02 01 e8 fa 2a 5b f9 <0f> 0b 48 8b 85 a8 fe ff ff 48 b9 00 00 00 00 00 fc ff df 48 89 c2 [ 63.444614] RSP: 0018:ffff8880a8916b28 EFLAGS: 00010282 [ 63.449960] RAX: 0000000000000000 RBX: ffff8880905d1540 RCX: 0000000000000000 [ 63.457260] RDX: 0000000000000000 RSI: ffffffff81683015 RDI: 0000000000000006 [ 63.464675] RBP: ffff8880a8916cb8 R08: ffff888090982100 R09: 0000000000000000 [ 63.471931] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 63.479188] R13: ffff8880939f4e00 R14: ffff8880905d15f6 R15: ffff8880a8916c90 [ 63.486459] ? vprintk_func+0x85/0x181 [ 63.490334] ? hsr_forward_skb+0x2196/0x28a0 [ 63.494729] ? rcu_read_unlock_special+0x370/0x370 [ 63.499642] ? find_held_lock+0x36/0x1c0 [ 63.503787] ? hsr_del_port+0x480/0x480 [ 63.507753] ? rcu_read_unlock+0x5e/0xa0 [ 63.511800] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 63.516806] ? hsr_netdev_notify+0x1070/0x1070 [ 63.521380] ? __lock_is_held+0xb5/0x140 [ 63.525437] hsr_dev_xmit+0x71/0xa0 [ 63.529055] dev_hard_start_xmit+0x286/0xc80 [ 63.533472] ? dev_direct_xmit+0x6a0/0x6a0 [ 63.537704] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 63.543227] ? netif_skb_features+0x681/0xb50 [ 63.547706] ? skb_flow_dissect_tunnel_info+0xd80/0xd80 [ 63.553083] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 63.558615] ? validate_xmit_xfrm+0x41c/0xef0 [ 63.563106] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 63.568645] ? validate_xmit_skb+0x849/0xf70 [ 63.573080] ? netif_skb_features+0xb50/0xb50 [ 63.577576] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 63.583099] ? check_preemption_disabled+0x48/0x280 [ 63.588098] ? check_preemption_disabled+0x48/0x280 [ 63.593126] __dev_queue_xmit+0x2f62/0x3ac0 [ 63.597562] ? kasan_kmalloc+0xc7/0xe0 [ 63.601443] ? netdev_pick_tx+0x300/0x300 [ 63.605626] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 63.611163] ? __alloc_skb+0x4bd/0x760 [ 63.615037] ? print_usage_bug+0xc0/0xc0 [ 63.619094] ? skb_scrub_packet+0x440/0x440 [ 63.623403] ? mark_held_locks+0x130/0x130 [ 63.627619] ? find_held_lock+0x36/0x1c0 [ 63.631672] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 63.637197] ? refcount_add_not_zero_checked+0x21e/0x330 [ 63.642631] ? refcount_dec_if_one+0x180/0x180 [ 63.647201] ? alloc_skb_with_frags+0x508/0x7c0 [ 63.651852] ? pagevec_lru_move_fn+0x259/0x350 [ 63.656421] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 63.661863] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 63.667385] ? refcount_add_checked+0x2f/0x70 [ 63.671868] ? skb_set_owner_w+0x21d/0x320 [ 63.676089] ? sock_alloc_send_pskb+0x7bb/0xab0 [ 63.680749] ? __lru_cache_add+0x2ff/0x4e0 [ 63.684979] ? sock_wmalloc+0x1f0/0x1f0 [ 63.688942] ? dev_get_by_index+0xf0/0x1c0 [ 63.693174] ? lock_downgrade+0x900/0x900 [ 63.697320] ? check_preemption_disabled+0x48/0x280 [ 63.702322] ? kasan_check_read+0x11/0x20 [ 63.706458] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 63.711721] ? mark_held_locks+0x130/0x130 [ 63.715943] ? rcu_read_unlock_special+0x370/0x370 [ 63.720863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 63.726384] ? skb_copy_datagram_from_iter+0x445/0x650 [ 63.731645] ? memcpy+0x45/0x50 [ 63.734913] dev_queue_xmit+0x17/0x20 [ 63.738695] ? dev_queue_xmit+0x17/0x20 [ 63.742652] packet_sendmsg+0x298a/0x6ad0 [ 63.746784] ? __lock_acquire+0x62f/0x4c20 [ 63.751003] ? __this_cpu_preempt_check+0x1c/0x20 [ 63.755835] ? mark_held_locks+0x130/0x130 [ 63.760062] ? packet_getname+0x5f0/0x5f0 [ 63.764201] ? aa_profile_af_perm+0x410/0x410 [ 63.768691] ? ___might_sleep+0x1ed/0x300 [ 63.772829] ? lock_downgrade+0x900/0x900 [ 63.776973] ? cpu_cgroup_can_attach+0x80/0x170 [ 63.781625] ? lock_release+0xa00/0xa00 [ 63.785582] ? arch_local_save_flags+0x40/0x40 [ 63.790156] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 63.795073] ? aa_sk_perm+0x22b/0x8e0 [ 63.798859] ? import_iovec+0x178/0x2d0 [ 63.802819] ? aa_af_perm+0x5a0/0x5a0 [ 63.806609] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 63.812151] ? aa_sock_msg_perm.isra.14+0xba/0x160 [ 63.817193] ? apparmor_socket_sendmsg+0x29/0x30 [ 63.821945] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 63.827475] ? security_socket_sendmsg+0x94/0xc0 [ 63.832233] ? packet_getname+0x5f0/0x5f0 [ 63.836388] sock_sendmsg+0xd5/0x120 [ 63.840089] ___sys_sendmsg+0x51d/0x930 [ 63.844063] ? copy_msghdr_from_user+0x580/0x580 [ 63.848803] ? _copy_to_user+0xc8/0x110 [ 63.852784] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 63.858313] ? sock_do_ioctl+0x110/0x420 [ 63.862364] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 63.867883] ? __fget_light+0x2e9/0x430 [ 63.871839] ? fget_raw+0x20/0x20 [ 63.875287] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 63.880467] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 63.885986] ? sockfd_lookup_light+0xc5/0x160 [ 63.890465] __sys_sendmmsg+0x246/0x6d0 [ 63.894433] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 63.898787] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 63.904320] ? do_vfs_ioctl+0x201/0x1790 [ 63.908369] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 63.913636] ? ioctl_preallocate+0x300/0x300 [ 63.918029] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 63.923559] ? __fget_light+0x2e9/0x430 [ 63.927526] ? do_syscall_64+0x9a/0x820 [ 63.931485] ? do_syscall_64+0x9a/0x820 [ 63.935502] ? lockdep_hardirqs_on+0x421/0x5c0 [ 63.940094] ? trace_hardirqs_on+0xbd/0x310 [ 63.944403] ? security_file_ioctl+0x94/0xc0 [ 63.948861] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 63.954222] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 63.959774] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 63.965306] __x64_sys_sendmmsg+0x9d/0x100 [ 63.969534] do_syscall_64+0x1b9/0x820 [ 63.973410] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 63.978760] ? syscall_return_slowpath+0x5e0/0x5e0 [ 63.983677] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 63.988508] ? trace_hardirqs_on_caller+0x310/0x310 [ 63.993511] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 63.998513] ? prepare_exit_to_usermode+0x291/0x3b0 [ 64.003521] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 64.008357] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 64.013531] RIP: 0033:0x4418a9 [ 64.016711] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 bb 10 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 64.035594] RSP: 002b:00007ffc4dd1e5b8 EFLAGS: 00000213 ORIG_RAX: 0000000000000133 [ 64.043293] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00000000004418a9 [ 64.050545] RDX: 0000000000000300 RSI: 0000000020008a80 RDI: 0000000000000003 [ 64.057904] RBP: 0000000000000003 R08: 0000000001bbbbbb R09: 0000000001bbbbbb [ 64.065157] R10: 0000000000000000 R11: 0000000000000213 R12: 00007ffc4dd1e600 [ 64.072418] R13: 00007ffc4dd1e5f0 R14: 0000000000000000 R15: 0000000000000000 [ 64.080719] Kernel Offset: disabled [ 64.084425] Rebooting in 86400 seconds..