[   39.528610][   T26] audit: type=1800 audit(1555433186.063:26): pid=7713 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0
[   39.549920][   T26] audit: type=1800 audit(1555433186.063:27): pid=7713 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0
[   39.577615][   T26] audit: type=1800 audit(1555433186.063:28): pid=7713 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.
[   40.297780][   T26] audit: type=1800 audit(1555433186.853:29): pid=7713 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.1.34' (ECDSA) to the list of known hosts.
syzkaller login: [   50.184998][ T7866] IPVS: ftp: loaded support on port[0] = 21
[   50.236660][ T7866] chnl_net:caif_netlink_parms(): no params data found
[   50.266776][ T7866] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.274332][ T7866] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.282310][ T7866] device bridge_slave_0 entered promiscuous mode
[   50.290419][ T7866] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.297686][ T7866] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.305270][ T7866] device bridge_slave_1 entered promiscuous mode
[   50.322023][ T7866] bond0: Enslaving bond_slave_0 as an active interface with an up link
[   50.332038][ T7866] bond0: Enslaving bond_slave_1 as an active interface with an up link
[   50.349672][ T7866] team0: Port device team_slave_0 added
[   50.356820][ T7866] team0: Port device team_slave_1 added
[   50.408200][ T7866] device hsr_slave_0 entered promiscuous mode
[   50.476274][ T7866] device hsr_slave_1 entered promiscuous mode
[   50.533498][ T7866] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.540716][ T7866] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.548570][ T7866] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.555632][ T7866] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.584893][ T7866] 8021q: adding VLAN 0 to HW filter on device bond0
[   50.598287][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   50.608942][ T3756] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.617743][ T3756] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.625655][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[   50.637801][ T7866] 8021q: adding VLAN 0 to HW filter on device team0
[   50.648260][ T2996] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   50.656941][ T2996] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.663986][ T2996] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.687694][ T7868] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   50.696821][ T7868] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.704026][ T7868] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.712224][ T7868] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   50.721259][ T7868] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   50.729774][ T7868] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
executing program
[   50.737997][ T7868] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   50.747252][ T7868] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   50.757582][ T7866] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   50.775323][ T7866] 8021q: adding VLAN 0 to HW filter on device batadv0
[   50.788055][ T7866] ------------[ cut here ]------------
[   50.793699][ T7866] hsr_addr_subst_dest: Unknown node
[   50.799428][ T7866] WARNING: CPU: 0 PID: 7866 at net/hsr/hsr_framereg.c:294 hsr_addr_subst_dest+0x382/0x460
[   50.809316][ T7866] Kernel panic - not syncing: panic_on_warn set ...
[   50.815893][ T7866] CPU: 0 PID: 7866 Comm: syz-executor792 Not tainted 5.1.0-rc4+ #140
[   50.823956][ T7866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   50.833999][ T7866] Call Trace:
[   50.837277][ T7866]  dump_stack+0x172/0x1f0
[   50.841607][ T7866]  ? hsr_addr_subst_dest+0x310/0x460
[   50.846904][ T7866]  panic+0x2cb/0x65c
[   50.850831][ T7866]  ? __warn_printk+0xf3/0xf3
[   50.855413][ T7866]  ? hsr_addr_subst_dest+0x382/0x460
[   50.860702][ T7866]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[   50.866971][ T7866]  ? __warn.cold+0x5/0x45
[   50.871295][ T7866]  ? __warn+0xe8/0x1d0
[   50.875365][ T7866]  ? hsr_addr_subst_dest+0x382/0x460
[   50.880640][ T7866]  __warn.cold+0x20/0x45
[   50.884863][ T7866]  ? vprintk_emit+0x1ce/0x6d0
[   50.889528][ T7866]  ? hsr_addr_subst_dest+0x382/0x460
[   50.894808][ T7866]  report_bug+0x263/0x2b0
[   50.899133][ T7866]  do_error_trap+0x11b/0x200
[   50.903734][ T7866]  do_invalid_op+0x37/0x50
[   50.908134][ T7866]  ? hsr_addr_subst_dest+0x382/0x460
[   50.913399][ T7866]  invalid_op+0x14/0x20
[   50.917553][ T7866] RIP: 0010:hsr_addr_subst_dest+0x382/0x460
[   50.923427][ T7866] Code: 89 de e8 11 36 65 fa 84 db 75 d3 e8 c8 34 65 fa 48 c7 c6 80 96 19 88 48 c7 c7 40 96 19 88 c6 05 7a 95 4f 02 01 e8 5c e1 37 fa <0f> 0b eb b0 e8 a5 34 65 fa 0f b6 1d 66 95 4f 02 31 ff 89 de e8 d5
[   50.943020][ T7866] RSP: 0018:ffff888087b275e0 EFLAGS: 00010286
[   50.949091][ T7866] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[   50.957050][ T7866] RDX: 0000000000000000 RSI: ffffffff815affc6 RDI: ffffed1010f64eae
[   50.965028][ T7866] RBP: ffff888087b27620 R08: ffff888093c56180 R09: ffff888093c56a20
[   50.972986][ T7866] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88809df24fa0
[   50.980940][ T7866] R13: 0000000000000000 R14: 00000000b92bfcce R15: 0000000000000000
[   50.988910][ T7866]  ? vprintk_func+0x86/0x189
[   50.993513][ T7866]  hsr_forward_skb+0x138b/0x1d30
[   50.998442][ T7866]  hsr_dev_xmit+0x72/0xa0
[   51.002776][ T7866]  dev_hard_start_xmit+0x18f/0x960
[   51.007919][ T7866]  __dev_queue_xmit+0x2a9d/0x36c0
[   51.012938][ T7866]  ? __might_fault+0x12b/0x1e0
[   51.017684][ T7866]  ? find_held_lock+0x35/0x130
[   51.022433][ T7866]  ? netdev_core_pick_tx+0x300/0x300
[   51.027756][ T7866]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[   51.033985][ T7866]  ? iov_iter_advance+0x295/0xf70
[   51.039003][ T7866]  dev_queue_xmit+0x18/0x20
[   51.043504][ T7866]  ? dev_queue_xmit+0x18/0x20
[   51.048163][ T7866]  pppoe_sendmsg+0x657/0x7e0
[   51.053008][ T7866]  ? ether_setup+0x2d0/0x2d0
[   51.057582][ T7866]  ? pppoe_getname+0x120/0x120
[   51.062328][ T7866]  ? apparmor_socket_sendmsg+0x2a/0x30
[   51.067794][ T7866]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[   51.074039][ T7866]  ? security_socket_sendmsg+0x93/0xc0
[   51.079482][ T7866]  ? pppoe_getname+0x120/0x120
[   51.084241][ T7866]  sock_sendmsg+0xdd/0x130
[   51.088657][ T7866]  ___sys_sendmsg+0x3e2/0x930
[   51.093319][ T7866]  ? copy_msghdr_from_user+0x430/0x430
[   51.098787][ T7866]  ? __lock_acquire+0x548/0x3fb0
[   51.103704][ T7866]  ? mark_held_locks+0xf0/0xf0
[   51.108467][ T7866]  ? kasan_check_read+0x11/0x20
[   51.113305][ T7866]  ? __lock_acquire+0x242a/0x3fb0
[   51.118322][ T7866]  ? __might_fault+0x12b/0x1e0
[   51.123074][ T7866]  ? find_held_lock+0x35/0x130
[   51.127853][ T7866]  ? __might_fault+0x12b/0x1e0
[   51.132810][ T7866]  ? lock_downgrade+0x880/0x880
[   51.137673][ T7866]  ? ___might_sleep+0x163/0x280
[   51.142521][ T7866]  __sys_sendmmsg+0x1bf/0x4d0
[   51.147208][ T7866]  ? __ia32_sys_sendmsg+0xb0/0xb0
[   51.152264][ T7866]  ? __sys_connect+0x12d/0x330
[   51.157019][ T7866]  ? __ia32_sys_accept+0xb0/0xb0
[   51.162059][ T7866]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[   51.167525][ T7866]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[   51.172994][ T7866]  ? do_syscall_64+0x26/0x610
[   51.177680][ T7866]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[   51.183727][ T7866]  ? do_syscall_64+0x26/0x610
[   51.188401][ T7866]  __x64_sys_sendmmsg+0x9d/0x100
[   51.193327][ T7866]  do_syscall_64+0x103/0x610
[   51.197911][ T7866]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[   51.203783][ T7866] RIP: 0033:0x441929
[   51.207687][ T7866] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 bb 10 fc ff c3 66 2e 0f 1f 84 00 00 00 00
[   51.227288][ T7866] RSP: 002b:00007ffe121b80f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   51.235726][ T7866] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000441929
[   51.243704][ T7866] RDX: 0400000000000191 RSI: 000000002000d180 RDI: 0000000000000003
[   51.251667][ T7866] RBP: 00000000004a8fd0 R08: 0000000001bbbbbb R09: 0000000001bbbbbb
[   51.259633][ T7866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000402e70
[   51.267600][ T7866] R13: 0000000000402f00 R14: 0000000000000000 R15: 0000000000000000
[   51.276525][ T7866] Kernel Offset: disabled
[   51.280923][ T7866] Rebooting in 86400 seconds..