[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 37.955142][ T26] audit: type=1800 audit(1555532396.580:25): pid=7590 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 37.975722][ T26] audit: type=1800 audit(1555532396.610:26): pid=7590 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 38.012662][ T26] audit: type=1800 audit(1555532396.610:27): pid=7590 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.168' (ECDSA) to the list of known hosts. syzkaller login: [ 52.488527][ T7743] IPVS: ftp: loaded support on port[0] = 21 [ 52.543040][ T7743] chnl_net:caif_netlink_parms(): no params data found [ 52.574610][ T7743] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.582329][ T7743] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.590482][ T7743] device bridge_slave_0 entered promiscuous mode [ 52.598802][ T7743] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.606312][ T7743] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.614128][ T7743] device bridge_slave_1 entered promiscuous mode [ 52.634223][ T7743] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 52.644086][ T7743] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 52.664299][ T7743] team0: Port device team_slave_0 added [ 52.671301][ T7743] team0: Port device team_slave_1 added [ 52.751887][ T7743] device hsr_slave_0 entered promiscuous mode [ 52.820649][ T7743] device hsr_slave_1 entered promiscuous mode [ 52.897476][ T7743] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.904878][ T7743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.912804][ T7743] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.919969][ T7743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.952806][ T7743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.964810][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.974788][ T2597] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.993769][ T2597] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.002816][ T2597] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 53.014506][ T7743] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.024739][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.033386][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.040483][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.061788][ T7745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.070641][ T7745] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.077868][ T7745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.086050][ T7745] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.094551][ T7745] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.103697][ T7745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready executing program [ 53.114158][ T7745] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.122090][ T7745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.133695][ T7743] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.150360][ T7743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.165047][ T7743] ------------[ cut here ]------------ [ 53.170661][ T7743] hsr_addr_subst_dest: Unknown node [ 53.176203][ T7743] WARNING: CPU: 1 PID: 7743 at net/hsr/hsr_framereg.c:294 hsr_addr_subst_dest+0x382/0x460 [ 53.186093][ T7743] Kernel panic - not syncing: panic_on_warn set ... [ 53.192684][ T7743] CPU: 1 PID: 7743 Comm: syz-executor303 Not tainted 5.1.0-rc4+ #142 [ 53.200741][ T7743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.210803][ T7743] Call Trace: [ 53.214091][ T7743] dump_stack+0x172/0x1f0 [ 53.218424][ T7743] ? hsr_addr_subst_dest+0x310/0x460 [ 53.223704][ T7743] panic+0x2cb/0x65c [ 53.227611][ T7743] ? __warn_printk+0xf3/0xf3 [ 53.232200][ T7743] ? hsr_addr_subst_dest+0x382/0x460 [ 53.237490][ T7743] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 53.243745][ T7743] ? __warn.cold+0x5/0x45 [ 53.256676][ T7743] ? __warn+0xe8/0x1d0 [ 53.260761][ T7743] ? hsr_addr_subst_dest+0x382/0x460 [ 53.267099][ T7743] __warn.cold+0x20/0x45 [ 53.271354][ T7743] ? vprintk_emit+0x1ce/0x6d0 [ 53.276060][ T7743] ? hsr_addr_subst_dest+0x382/0x460 [ 53.281376][ T7743] report_bug+0x263/0x2b0 [ 53.285702][ T7743] do_error_trap+0x11b/0x200 [ 53.290390][ T7743] do_invalid_op+0x37/0x50 [ 53.294813][ T7743] ? hsr_addr_subst_dest+0x382/0x460 [ 53.300117][ T7743] invalid_op+0x14/0x20 [ 53.304261][ T7743] RIP: 0010:hsr_addr_subst_dest+0x382/0x460 [ 53.310136][ T7743] Code: 89 de e8 11 36 65 fa 84 db 75 d3 e8 c8 34 65 fa 48 c7 c6 80 96 19 88 48 c7 c7 40 96 19 88 c6 05 7a 95 4f 02 01 e8 5c e1 37 fa <0f> 0b eb b0 e8 a5 34 65 fa 0f b6 1d 66 95 4f 02 31 ff 89 de e8 d5 [ 53.329732][ T7743] RSP: 0018:ffff88808b3a75e0 EFLAGS: 00010286 [ 53.335789][ T7743] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 53.343748][ T7743] RDX: 0000000000000000 RSI: ffffffff815affc6 RDI: ffffed1011674eae [ 53.351726][ T7743] RBP: ffff88808b3a7620 R08: ffff88808d0b2100 R09: ffffed1015d23ef1 [ 53.359709][ T7743] R10: ffffed1015d23ef0 R11: ffff8880ae91f787 R12: ffff88808ab0d660 [ 53.367674][ T7743] R13: 00000000aaaaaaaa R14: 0000000089da9e6f R15: 000000000000aaaa [ 53.375678][ T7743] ? vprintk_func+0x86/0x189 [ 53.380282][ T7743] hsr_forward_skb+0x138b/0x1d30 [ 53.385226][ T7743] hsr_dev_xmit+0x72/0xa0 [ 53.389560][ T7743] dev_hard_start_xmit+0x18f/0x960 [ 53.394670][ T7743] __dev_queue_xmit+0x2a9d/0x36c0 [ 53.399681][ T7743] ? __might_fault+0x12b/0x1e0 [ 53.404430][ T7743] ? find_held_lock+0x35/0x130 [ 53.409193][ T7743] ? netdev_core_pick_tx+0x300/0x300 [ 53.414463][ T7743] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 53.420685][ T7743] ? iov_iter_advance+0x295/0xf70 [ 53.425701][ T7743] dev_queue_xmit+0x18/0x20 [ 53.430208][ T7743] ? dev_queue_xmit+0x18/0x20 [ 53.434876][ T7743] pppoe_sendmsg+0x657/0x7e0 [ 53.439494][ T7743] ? ether_setup+0x2d0/0x2d0 [ 53.444078][ T7743] ? pppoe_getname+0x120/0x120 [ 53.448842][ T7743] ? apparmor_socket_sendmsg+0x2a/0x30 [ 53.454325][ T7743] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 53.460581][ T7743] ? security_socket_sendmsg+0x93/0xc0 [ 53.466029][ T7743] ? pppoe_getname+0x120/0x120 [ 53.470785][ T7743] sock_sendmsg+0xdd/0x130 [ 53.475209][ T7743] ___sys_sendmsg+0x3e2/0x930 [ 53.479886][ T7743] ? copy_msghdr_from_user+0x430/0x430 [ 53.485368][ T7743] ? __lock_acquire+0x548/0x3fb0 [ 53.490326][ T7743] ? mark_held_locks+0xf0/0xf0 [ 53.495109][ T7743] ? kasan_check_read+0x11/0x20 [ 53.500102][ T7743] ? __lock_acquire+0x242a/0x3fb0 [ 53.505269][ T7743] ? __might_fault+0x12b/0x1e0 [ 53.510056][ T7743] ? find_held_lock+0x35/0x130 [ 53.515284][ T7743] ? __might_fault+0x12b/0x1e0 [ 53.520044][ T7743] ? lock_downgrade+0x880/0x880 [ 53.524904][ T7743] ? ___might_sleep+0x163/0x280 [ 53.529755][ T7743] __sys_sendmmsg+0x1bf/0x4d0 [ 53.534459][ T7743] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 53.539481][ T7743] ? __sys_connect+0x12d/0x330 [ 53.544239][ T7743] ? __ia32_sys_accept+0xb0/0xb0 [ 53.549211][ T7743] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 53.554695][ T7743] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 53.560172][ T7743] ? do_syscall_64+0x26/0x610 [ 53.564846][ T7743] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 53.571003][ T7743] ? do_syscall_64+0x26/0x610 [ 53.575681][ T7743] __x64_sys_sendmmsg+0x9d/0x100 [ 53.580633][ T7743] do_syscall_64+0x103/0x610 [ 53.585230][ T7743] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 53.591107][ T7743] RIP: 0033:0x441929 [ 53.595027][ T7743] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 bb 10 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 53.614726][ T7743] RSP: 002b:00007ffd6a43cde8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 53.623134][ T7743] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000441929 [ 53.631101][ T7743] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000003 [ 53.639085][ T7743] RBP: 00000000004a8fd0 R08: 0000000001bbbbbb R09: 0000000001bbbbbb [ 53.647075][ T7743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000402e70 [ 53.655086][ T7743] R13: 0000000000402f00 R14: 0000000000000000 R15: 0000000000000000 [ 53.664423][ T7743] Kernel Offset: disabled [ 53.668823][ T7743] Rebooting in 86400 seconds..