[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 44.845024][ T26] audit: type=1800 audit(1561786715.092:25): pid=8008 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 44.882850][ T26] audit: type=1800 audit(1561786715.092:26): pid=8008 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 44.919771][ T26] audit: type=1800 audit(1561786715.102:27): pid=8008 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.17' (ECDSA) to the list of known hosts. 2019/06/29 05:38:47 parsed 1 programs 2019/06/29 05:38:49 executed programs: 0 syzkaller login: [ 58.973525][ T8175] IPVS: ftp: loaded support on port[0] = 21 [ 59.028128][ T8175] chnl_net:caif_netlink_parms(): no params data found [ 59.051742][ T8175] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.059675][ T8175] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.067658][ T8175] device bridge_slave_0 entered promiscuous mode [ 59.075723][ T8175] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.083832][ T8175] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.091390][ T8175] device bridge_slave_1 entered promiscuous mode [ 59.107711][ T8175] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 59.117514][ T8175] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 59.133999][ T8175] team0: Port device team_slave_0 added [ 59.140803][ T8175] team0: Port device team_slave_1 added [ 59.215164][ T8175] device hsr_slave_0 entered promiscuous mode [ 59.283034][ T8175] device hsr_slave_1 entered promiscuous mode [ 59.359990][ T8175] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.367260][ T8175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.375008][ T8175] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.382088][ T8175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.412667][ T8175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.425926][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.436330][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.444689][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.452897][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 59.464614][ T8175] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.475307][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.483867][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.491004][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.512299][ T8175] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.523215][ T8175] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.535993][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.545069][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.552123][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.560504][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.570151][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.578621][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.587062][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.597354][ T2651] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.604949][ T2651] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.619284][ T8175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.715309][ T8188] ------------[ cut here ]------------ [ 59.720918][ T8188] hsr_addr_subst_dest: Unknown node [ 59.726545][ T8188] WARNING: CPU: 1 PID: 8188 at net/hsr/hsr_framereg.c:294 hsr_addr_subst_dest+0x33e/0x4b0 [ 59.738032][ T8188] Kernel panic - not syncing: panic_on_warn set ... [ 59.744605][ T8188] CPU: 1 PID: 8188 Comm: syz-executor.0 Not tainted 5.2.0-rc6+ #9 [ 59.752388][ T8188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.762458][ T8188] Call Trace: [ 59.765753][ T8188] dump_stack+0x1d8/0x2f8 [ 59.770081][ T8188] panic+0x28a/0x7c9 [ 59.773983][ T8188] ? trace_lock_acquire+0x11c/0x190 [ 59.779172][ T8188] ? __warn+0x126/0x220 [ 59.783334][ T8188] ? nmi_panic+0x97/0x97 [ 59.787568][ T8188] ? hsr_addr_subst_dest+0x33e/0x4b0 [ 59.792840][ T8188] ? is_valid_bugaddr+0x81/0x100 [ 59.797756][ T8188] __warn+0x216/0x220 [ 59.801718][ T8188] ? hsr_addr_subst_dest+0x33e/0x4b0 [ 59.806997][ T8188] report_bug+0x190/0x290 [ 59.811693][ T8188] ? hsr_addr_subst_dest+0x33e/0x4b0 [ 59.817016][ T8188] do_error_trap+0xd7/0x450 [ 59.821529][ T8188] do_invalid_op+0x36/0x40 [ 59.825938][ T8188] ? hsr_addr_subst_dest+0x33e/0x4b0 [ 59.831244][ T8188] invalid_op+0x14/0x20 [ 59.835400][ T8188] RIP: 0010:hsr_addr_subst_dest+0x33e/0x4b0 [ 59.841273][ T8188] Code: 4c 01 01 0f 84 08 ff ff ff e8 5e d4 e8 f9 c6 05 79 f8 4c 01 01 48 c7 c7 d1 80 81 88 48 c7 c6 bd 80 81 88 31 c0 e8 42 a6 ba f9 <0f> 0b e9 e5 fe ff ff e8 36 d4 e8 f9 80 3d 51 f8 4c 01 01 0f 84 ce [ 59.861324][ T8188] RSP: 0018:ffff888091d571e8 EFLAGS: 00010246 [ 59.867377][ T8188] RAX: 11bbc206737c8a00 RBX: dffffc0000000000 RCX: ffff8880935da080 [ 59.875377][ T8188] RDX: 0000000000000000 RSI: 0000000080000200 RDI: 0000000000000000 [ 59.883534][ T8188] RBP: ffff888091d57240 R08: ffffffff815e87e4 R09: fffffbfff115a4cf [ 59.891511][ T8188] R10: fffffbfff115a4cf R11: 1ffffffff115a4ce R12: 0000000047eef7b7 [ 59.899488][ T8188] R13: ffff8880965d9120 R14: ffff888094284d94 R15: ffff8880965d9120 [ 59.907470][ T8188] ? vprintk_emit+0x2d4/0x3a0 [ 59.912166][ T8188] ? hsr_addr_subst_dest+0x33e/0x4b0 [ 59.917475][ T8188] hsr_forward_skb+0xb36/0x2040 [ 59.922335][ T8188] hsr_dev_xmit+0x77/0x90 [ 59.926654][ T8188] dev_hard_start_xmit+0x1c1/0x3e0 [ 59.931789][ T8188] __dev_queue_xmit+0x1e8f/0x3090 [ 59.936819][ T8188] ? dev_queue_xmit+0x20/0x20 [ 59.941497][ T8188] ? __virt_addr_valid+0x159/0x1f0 [ 59.946605][ T8188] ? __phys_addr_symbol+0x2f/0x70 [ 59.951638][ T8188] ? skb_copy_datagram_from_iter+0x5b4/0x6a0 [ 59.957630][ T8188] dev_queue_xmit+0x17/0x20 [ 59.962126][ T8188] packet_sendmsg+0x4d9c/0x6710 [ 59.966978][ T8188] ? _copy_from_user+0xe0/0x120 [ 59.971819][ T8188] ? rw_copy_check_uvector+0x2e4/0x310 [ 59.977277][ T8188] ? import_iovec+0x17e/0x340 [ 59.981935][ T8188] ? __might_fault+0xf9/0x160 [ 59.986597][ T8188] ? smack_socket_sendmsg+0x16e/0x530 [ 59.991969][ T8188] ? tomoyo_socket_sendmsg_permission+0x26d/0x3a0 [ 59.998389][ T8188] ? compat_packet_setsockopt+0x160/0x160 [ 60.004097][ T8188] ? copy_msghdr_from_user+0x433/0x690 [ 60.009642][ T8188] ? tomoyo_socket_sendmsg+0x25/0x30 [ 60.014911][ T8188] ? security_socket_sendmsg+0xa0/0xd0 [ 60.020367][ T8188] ? compat_packet_setsockopt+0x160/0x160 [ 60.026089][ T8188] ___sys_sendmsg+0x66b/0x9a0 [ 60.030778][ T8188] ? __sys_sendmsg+0x250/0x250 [ 60.035640][ T8188] ? rcu_lock_release+0xd/0x30 [ 60.040437][ T8188] ? rcu_lock_release+0x26/0x30 [ 60.045292][ T8188] ? __fget+0x4fe/0x540 [ 60.049464][ T8188] ? fget_many+0x30/0x30 [ 60.053719][ T8188] ? __fdget+0x17c/0x200 [ 60.057964][ T8188] __sys_sendmmsg+0x2ac/0x520 [ 60.062653][ T8188] ? __ia32_sys_sendmsg+0x290/0x290 [ 60.067844][ T8188] ? _copy_to_user+0xca/0xf0 [ 60.072432][ T8188] ? put_timespec64+0x106/0x150 [ 60.077473][ T8188] ? ktime_get_raw+0xf0/0xf0 [ 60.082165][ T8188] ? check_preemption_disabled+0xb7/0x280 [ 60.087907][ T8188] ? get_timespec64+0x250/0x250 [ 60.092757][ T8188] ? debug_smp_processor_id+0x1c/0x20 [ 60.098161][ T8188] ? fpregs_assert_state_consistent+0xaa/0xe0 [ 60.104251][ T8188] ? prepare_exit_to_usermode+0x1e1/0x4f0 [ 60.109961][ T8188] ? __x64_sys_clock_gettime+0x1c5/0x220 [ 60.115670][ T8188] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 60.121113][ T8188] ? trace_irq_disable_rcuidle+0x23/0x1c0 [ 60.126824][ T8188] __x64_sys_sendmmsg+0xa0/0xb0 [ 60.131664][ T8188] do_syscall_64+0xfe/0x140 [ 60.136157][ T8188] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 60.142064][ T8188] RIP: 0033:0x459519 [ 60.145951][ T8188] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 60.165550][ T8188] RSP: 002b:00007f3693d94c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 60.173950][ T8188] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000459519 [ 60.181912][ T8188] RDX: 0000000000000001 RSI: 0000000020004e80 RDI: 0000000000000003 [ 60.189881][ T8188] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 60.197839][ T8188] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3693d956d4 [ 60.205810][ T8188] R13: 00000000004c6af9 R14: 00000000004dbd80 R15: 00000000ffffffff [ 60.214983][ T8188] Kernel Offset: disabled [ 60.219364][ T8188] Rebooting in 86400 seconds..