[ 35.585283] audit: type=1800 audit(1546152909.890:26): pid=7575 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 35.636342] audit: type=1800 audit(1546152909.890:27): pid=7575 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 35.659645] audit: type=1800 audit(1546152909.890:28): pid=7575 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 36.380701] audit: type=1800 audit(1546152910.710:29): pid=7575 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.69' (ECDSA) to the list of known hosts. syzkaller login: [ 43.580215] IPVS: ftp: loaded support on port[0] = 21 [ 43.634194] chnl_net:caif_netlink_parms(): no params data found [ 43.665934] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.673317] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.680462] device bridge_slave_0 entered promiscuous mode [ 43.687413] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.693856] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.700758] device bridge_slave_1 entered promiscuous mode [ 43.716133] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 43.725201] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 43.741466] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 43.748856] team0: Port device team_slave_0 added [ 43.754122] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 43.761351] team0: Port device team_slave_1 added [ 43.766498] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 43.773900] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 43.830954] device hsr_slave_0 entered promiscuous mode [ 43.898747] device hsr_slave_1 entered promiscuous mode [ 43.978870] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 43.985751] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 43.999035] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.005460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.012406] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.018767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.050926] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 44.056995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.065018] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 44.073974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.092705] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.100065] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.107185] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 44.117583] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 44.124149] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.132619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.140442] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.146765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.159014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.166586] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.172978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.184148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.193173] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.202730] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.215434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.226250] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 44.237706] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 44.244170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready executing program [ 44.251550] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.264508] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 44.274281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.285138] ------------[ cut here ]------------ [ 44.289990] HSR: VLAN not yet supported [ 44.290455] WARNING: CPU: 1 PID: 7727 at net/hsr/hsr_forward.c:336 hsr_forward_skb+0x2196/0x28a0 [ 44.303314] Kernel panic - not syncing: panic_on_warn set ... [ 44.309183] CPU: 1 PID: 7727 Comm: syz-executor457 Not tainted 4.20.0+ #299 [ 44.316268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 44.325602] Call Trace: [ 44.328178] dump_stack+0x1d3/0x2c6 [ 44.331792] ? dump_stack_print_info.cold.1+0x20/0x20 [ 44.336972] panic+0x2ad/0x55f [ 44.340145] ? add_taint.cold.5+0x16/0x16 [ 44.344275] ? __warn.cold.8+0x5/0x52 [ 44.348063] ? __warn+0xe8/0x1d0 [ 44.351418] ? hsr_forward_skb+0x2196/0x28a0 [ 44.355809] __warn.cold.8+0x20/0x52 [ 44.359501] ? rcu_softirq_qs+0x20/0x20 [ 44.363460] ? hsr_forward_skb+0x2196/0x28a0 [ 44.367849] report_bug+0x254/0x2d0 [ 44.371461] do_error_trap+0x11b/0x200 [ 44.375334] do_invalid_op+0x36/0x40 [ 44.379025] ? hsr_forward_skb+0x2196/0x28a0 [ 44.383412] invalid_op+0x14/0x20 [ 44.386848] RIP: 0010:hsr_forward_skb+0x2196/0x28a0 [ 44.391844] Code: e7 e8 9e 2a ff ff e9 8f f3 ff ff 48 89 85 b0 fe ff ff e8 8d d5 95 f9 48 c7 c7 a0 0e fa 88 c6 05 25 bc 4a 02 01 e8 0a 1b 5f f9 <0f> 0b 48 8b 85 a8 fe ff ff 48 b9 00 00 00 00 00 fc ff df 48 89 c2 [ 44.410737] RSP: 0018:ffff88808e0a6ad8 EFLAGS: 00010286 [ 44.416081] RAX: 0000000000000000 RBX: ffff88809097f000 RCX: 0000000000000000 [ 44.423330] RDX: 0000000000000000 RSI: ffffffff81683f55 RDI: 0000000000000006 [ 44.430586] RBP: ffff88808e0a6c68 R08: ffff88808f55c100 R09: 0000000000000000 [ 44.437832] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 44.445082] R13: ffff88809aa80180 R14: ffff88809097f0b6 R15: ffff88808e0a6c40 [ 44.452343] ? vprintk_func+0x85/0x181 [ 44.456220] ? hsr_forward_skb+0x2196/0x28a0 [ 44.460626] ? rcu_read_unlock_special+0x370/0x370 [ 44.465537] ? find_held_lock+0x36/0x1c0 [ 44.469582] ? hsr_del_port+0x480/0x480 [ 44.473539] ? rcu_read_unlock+0x5e/0xa0 [ 44.477580] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 44.482579] ? hsr_netdev_notify+0x1070/0x1070 [ 44.487146] ? __lock_is_held+0xb5/0x140 [ 44.491200] hsr_dev_xmit+0x71/0xa0 [ 44.494816] dev_hard_start_xmit+0x286/0xc80 [ 44.499218] ? dev_direct_xmit+0x6a0/0x6a0 [ 44.503437] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 44.508957] ? netif_skb_features+0x681/0xb50 [ 44.513432] ? skb_flow_dissect_tunnel_info+0xd80/0xd80 [ 44.518779] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 44.524301] ? validate_xmit_xfrm+0x41c/0xef0 [ 44.528781] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 44.534303] ? validate_xmit_skb+0x849/0xf70 [ 44.538697] ? netif_skb_features+0xb50/0xb50 [ 44.543177] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 44.548703] ? check_preemption_disabled+0x48/0x280 [ 44.553701] ? check_preemption_disabled+0x48/0x280 [ 44.558705] __dev_queue_xmit+0x2f62/0x3ac0 [ 44.563022] ? kasan_kmalloc+0xcb/0xd0 [ 44.566897] ? netdev_pick_tx+0x300/0x300 [ 44.571044] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 44.576567] ? __alloc_skb+0x4bd/0x760 [ 44.580448] ? skb_scrub_packet+0x440/0x440 [ 44.584753] ? mark_held_locks+0x130/0x130 [ 44.588982] ? find_held_lock+0x36/0x1c0 [ 44.593026] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 44.598547] ? refcount_add_not_zero_checked+0x21e/0x330 [ 44.603978] ? refcount_dec_if_one+0x180/0x180 [ 44.608543] ? alloc_skb_with_frags+0x508/0x7c0 [ 44.613200] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 44.618296] ? lockdep_hardirqs_on+0x421/0x5c0 [ 44.622869] ? print_usage_bug+0xc0/0xc0 [ 44.626916] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 44.632434] ? refcount_add_checked+0x2f/0x70 [ 44.636907] ? skb_set_owner_w+0x21d/0x320 [ 44.641125] ? sock_alloc_send_pskb+0x7bb/0xab0 [ 44.645781] ? sock_wmalloc+0x1f0/0x1f0 [ 44.649764] ? dev_get_by_index+0xf0/0x1c0 [ 44.653993] ? lock_downgrade+0x900/0x900 [ 44.658123] ? check_preemption_disabled+0x48/0x280 [ 44.663123] ? kasan_check_read+0x11/0x20 [ 44.667272] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 44.672527] ? mark_held_locks+0x130/0x130 [ 44.677303] ? rcu_read_unlock_special+0x370/0x370 [ 44.682226] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 44.687742] ? skb_copy_datagram_from_iter+0x445/0x650 [ 44.692999] ? memcpy+0x45/0x50 [ 44.696263] dev_queue_xmit+0x17/0x20 [ 44.700043] ? dev_queue_xmit+0x17/0x20 [ 44.704001] packet_sendmsg+0x298a/0x6ad0 [ 44.708130] ? mem_cgroup_usage+0x460/0x460 [ 44.712451] ? mark_held_locks+0x130/0x130 [ 44.716675] ? packet_getname+0x5f0/0x5f0 [ 44.720817] ? find_held_lock+0x36/0x1c0 [ 44.724864] ? aa_profile_af_perm+0x410/0x410 [ 44.729347] ? ___might_sleep+0x1ed/0x300 [ 44.733475] ? finish_task_switch+0x360/0x910 [ 44.737954] ? usercopy_warn+0x110/0x110 [ 44.742005] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 44.747293] ? aa_sk_perm+0x22b/0x8e0 [ 44.751075] ? compat_import_iovec+0x178/0x2c6 [ 44.755641] ? aa_af_perm+0x5a0/0x5a0 [ 44.759440] ? move_addr_to_kernel.part.18+0xc6/0x100 [ 44.764614] ? aa_sock_msg_perm.isra.14+0xba/0x160 [ 44.769527] ? apparmor_socket_sendmsg+0x29/0x30 [ 44.774265] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 44.779781] ? security_socket_sendmsg+0x94/0xc0 [ 44.784517] ? packet_getname+0x5f0/0x5f0 [ 44.788646] sock_sendmsg+0xd5/0x120 [ 44.792340] ___sys_sendmsg+0x51d/0x930 [ 44.796296] ? copy_msghdr_from_user+0x580/0x580 [ 44.801031] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 44.806549] ? sock_do_ioctl+0x110/0x420 [ 44.810593] ? do_recvmmsg+0xb90/0xb90 [ 44.814459] ? pud_val+0x51/0x100 [ 44.817893] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 44.823409] ? __fget_light+0x2e9/0x430 [ 44.827363] ? fget_raw+0x20/0x20 [ 44.830808] ? compat_sock_ioctl+0x1c8/0x1fe0 [ 44.835293] ? print_usage_bug+0xc0/0xc0 [ 44.839340] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 44.844857] ? sockfd_lookup_light+0xc5/0x160 [ 44.849335] __sys_sendmmsg+0x3af/0x6d0 [ 44.853293] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 44.857592] ? lock_downgrade+0x900/0x900 [ 44.861744] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 44.867270] ? do_fast_syscall_32+0x150/0xfb2 [ 44.871748] ? do_fast_syscall_32+0x150/0xfb2 [ 44.876223] ? lockdep_hardirqs_on+0x421/0x5c0 [ 44.880786] ? trace_hardirqs_on+0xbd/0x310 [ 44.885095] ? entry_SYSENTER_compat+0x70/0x7f [ 44.889658] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 44.895087] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 44.900609] __ia32_compat_sys_sendmmsg+0x9f/0x100 [ 44.905520] do_fast_syscall_32+0x34d/0xfb2 [ 44.909825] ? do_int80_syscall_32+0x890/0x890 [ 44.914388] ? entry_SYSENTER_compat+0x68/0x7f [ 44.918953] ? trace_hardirqs_off_caller+0xbb/0x310 [ 44.923951] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 44.928773] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 44.933602] ? trace_hardirqs_on_caller+0x310/0x310 [ 44.938601] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 44.943597] ? prepare_exit_to_usermode+0x291/0x3b0 [ 44.948597] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 44.953424] entry_SYSENTER_compat+0x70/0x7f [ 44.957811] RIP: 0023:0xf7f85849 [ 44.961167] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 44.980052] RSP: 002b:00000000ffd471ac EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 44.987738] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020008a80 [ 44.995002] RDX: 0000000000000300 RSI: 0000000000000000 RDI: 0000000000000003 [ 45.002252] RBP: 0000000000008933 R08: 0000000000000000 R09: 0000000000000000 [ 45.009504] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 45.016752] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 45.025234] Kernel Offset: disabled [ 45.028908] Rebooting in 86400 seconds..