[ 37.855445][ T26] audit: type=1800 audit(1555452391.853:26): pid=7680 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 37.881286][ T26] audit: type=1800 audit(1555452391.863:27): pid=7680 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 37.902858][ T26] audit: type=1800 audit(1555452391.863:28): pid=7680 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 38.852110][ T26] audit: type=1800 audit(1555452392.883:29): pid=7680 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.53' (ECDSA) to the list of known hosts. syzkaller login: [ 53.619288][ T7833] IPVS: ftp: loaded support on port[0] = 21 [ 53.672658][ T7833] chnl_net:caif_netlink_parms(): no params data found [ 53.702936][ T7833] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.711779][ T7833] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.719903][ T7833] device bridge_slave_0 entered promiscuous mode [ 53.728185][ T7833] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.735432][ T7833] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.743189][ T7833] device bridge_slave_1 entered promiscuous mode [ 53.759187][ T7833] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 53.769557][ T7833] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 53.787394][ T7833] team0: Port device team_slave_0 added [ 53.794402][ T7833] team0: Port device team_slave_1 added [ 53.855372][ T7833] device hsr_slave_0 entered promiscuous mode [ 53.893414][ T7833] device hsr_slave_1 entered promiscuous mode [ 53.940368][ T7833] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.947796][ T7833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.955884][ T7833] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.963298][ T7833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.996631][ T7833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.008316][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.029429][ T3480] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.038439][ T3480] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.047398][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 54.060234][ T7833] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.070710][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.079241][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.086509][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.097658][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.106525][ T3480] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.113643][ T3480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.131817][ T7833] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.143323][ T7833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.156704][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.165951][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.174937][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.184209][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready executing program [ 54.192538][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.200542][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.218706][ T7833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.231235][ T7833] ------------[ cut here ]------------ [ 54.236927][ T7833] hsr_addr_subst_dest: Unknown node [ 54.242563][ T7833] WARNING: CPU: 0 PID: 7833 at net/hsr/hsr_framereg.c:313 hsr_addr_subst_dest+0x382/0x460 [ 54.252630][ T7833] Kernel panic - not syncing: panic_on_warn set ... [ 54.259349][ T7833] CPU: 0 PID: 7833 Comm: syz-executor819 Not tainted 5.1.0-rc4+ #169 [ 54.267508][ T7833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 54.277571][ T7833] Call Trace: [ 54.280873][ T7833] dump_stack+0x172/0x1f0 [ 54.285200][ T7833] ? hsr_addr_subst_dest+0x300/0x460 [ 54.290486][ T7833] panic+0x2cb/0x65c [ 54.294416][ T7833] ? __warn_printk+0xf3/0xf3 [ 54.299007][ T7833] ? hsr_addr_subst_dest+0x382/0x460 [ 54.304384][ T7833] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 54.310629][ T7833] ? __warn.cold+0x5/0x45 [ 54.314958][ T7833] ? __warn+0xe8/0x1d0 [ 54.319370][ T7833] ? hsr_addr_subst_dest+0x382/0x460 [ 54.324654][ T7833] __warn.cold+0x20/0x45 [ 54.328924][ T7833] ? vprintk_emit+0x1ce/0x6d0 [ 54.333691][ T7833] ? hsr_addr_subst_dest+0x382/0x460 [ 54.339032][ T7833] report_bug+0x263/0x2b0 [ 54.343363][ T7833] do_error_trap+0x11b/0x200 [ 54.347948][ T7833] do_invalid_op+0x37/0x50 [ 54.352361][ T7833] ? hsr_addr_subst_dest+0x382/0x460 [ 54.357645][ T7833] invalid_op+0x14/0x20 [ 54.361799][ T7833] RIP: 0010:hsr_addr_subst_dest+0x382/0x460 [ 54.367996][ T7833] Code: 89 de e8 e1 18 6a fa 84 db 75 d3 e8 98 17 6a fa 48 c7 c6 c0 3a 19 88 48 c7 c7 80 3a 19 88 c6 05 b3 0c 54 02 01 e8 4c c4 3c fa <0f> 0b eb b0 e8 75 17 6a fa 0f b6 1d 9f 0c 54 02 31 ff 89 de e8 a5 [ 54.388182][ T7833] RSP: 0018:ffff88808bfa75f0 EFLAGS: 00010282 [ 54.394235][ T7833] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 54.402207][ T7833] RDX: 0000000000000000 RSI: ffffffff815affc6 RDI: ffffed10117f4eb0 [ 54.410179][ T7833] RBP: ffff88808bfa7630 R08: ffff8880920c04c0 R09: ffffed1015d05011 [ 54.418242][ T7833] R10: ffffed1015d05010 R11: ffff8880ae828087 R12: ffff888086dbcfe0 [ 54.426305][ T7833] R13: 0000000000000000 R14: 000000007cf1fd7e R15: 0000000000000000 [ 54.434351][ T7833] ? vprintk_func+0x86/0x189 [ 54.438981][ T7833] hsr_forward_skb+0x123c/0x1bd0 [ 54.444050][ T7833] hsr_dev_xmit+0x72/0xa0 [ 54.448378][ T7833] dev_hard_start_xmit+0x1b2/0x980 [ 54.453584][ T7833] __dev_queue_xmit+0x271d/0x3060 [ 54.458608][ T7833] ? __might_fault+0x12b/0x1e0 [ 54.463549][ T7833] ? find_held_lock+0x35/0x130 [ 54.468882][ T7833] ? netdev_pick_tx+0x300/0x300 [ 54.473785][ T7833] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 54.480047][ T7833] ? iov_iter_advance+0x295/0xf70 [ 54.485212][ T7833] dev_queue_xmit+0x18/0x20 [ 54.493281][ T7833] ? dev_queue_xmit+0x18/0x20 [ 54.497948][ T7833] pppoe_sendmsg+0x657/0x7e0 [ 54.502570][ T7833] ? ether_setup+0x2d0/0x2d0 [ 54.507162][ T7833] ? pppoe_getname+0x120/0x120 [ 54.511932][ T7833] ? apparmor_socket_sendmsg+0x2a/0x30 [ 54.517388][ T7833] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 54.523641][ T7833] ? security_socket_sendmsg+0x93/0xc0 [ 54.529321][ T7833] ? pppoe_getname+0x120/0x120 [ 54.534181][ T7833] sock_sendmsg+0xdd/0x130 [ 54.538604][ T7833] ___sys_sendmsg+0x3e2/0x930 [ 54.543383][ T7833] ? copy_msghdr_from_user+0x430/0x430 [ 54.548849][ T7833] ? __lock_acquire+0x548/0x3fb0 [ 54.553778][ T7833] ? mark_held_locks+0xf0/0xf0 [ 54.558578][ T7833] ? kasan_check_read+0x11/0x20 [ 54.563516][ T7833] ? __lock_acquire+0x242a/0x3fb0 [ 54.568573][ T7833] ? __might_fault+0x12b/0x1e0 [ 54.573370][ T7833] ? find_held_lock+0x35/0x130 [ 54.578145][ T7833] ? __might_fault+0x12b/0x1e0 [ 54.583437][ T7833] ? lock_downgrade+0x880/0x880 [ 54.588283][ T7833] ? ___might_sleep+0x163/0x280 [ 54.593270][ T7833] __sys_sendmmsg+0x1bf/0x4d0 [ 54.598014][ T7833] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 54.603094][ T7833] ? __sys_connect+0x12d/0x330 [ 54.607861][ T7833] ? __ia32_sys_accept+0xb0/0xb0 [ 54.612797][ T7833] ? kasan_check_write+0x14/0x20 [ 54.617867][ T7833] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 54.623330][ T7833] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 54.628786][ T7833] ? do_syscall_64+0x26/0x610 [ 54.633451][ T7833] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 54.639510][ T7833] ? do_syscall_64+0x26/0x610 [ 54.644183][ T7833] __x64_sys_sendmmsg+0x9d/0x100 [ 54.649188][ T7833] do_syscall_64+0x103/0x610 [ 54.653950][ T7833] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 54.659838][ T7833] RIP: 0033:0x441939 [ 54.663722][ T7833] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 bb 10 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 54.683449][ T7833] RSP: 002b:00007fff7c7decc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 54.692281][ T7833] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000441939 [ 54.700484][ T7833] RDX: 0400000000000191 RSI: 000000002000d180 RDI: 0000000000000003 [ 54.708986][ T7833] RBP: 00000000004a8fd0 R08: 0000000001bbbbbb R09: 0000000001bbbbbb [ 54.717037][ T7833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000402e80 [ 54.725001][ T7833] R13: 0000000000402f10 R14: 0000000000000000 R15: 0000000000000000 [ 54.733991][ T7833] Kernel Offset: disabled [ 54.738401][ T7833] Rebooting in 86400 seconds..