[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 57.497797][ T26] audit: type=1800 audit(1574824270.975:25): pid=8710 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 57.519778][ T26] audit: type=1800 audit(1574824270.985:26): pid=8710 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 57.561476][ T26] audit: type=1800 audit(1574824270.985:27): pid=8710 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.101' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 67.976298][ T8863] tipc: Started in network mode [ 67.981424][ T8863] tipc: Own node identity ff000000000000000000000000000001, cluster identity 4711 [ 67.990839][ T8863] tipc: New replicast peer: fe80:0000:0000:0000:dd00:0000:0000:00bb [ 67.999455][ T8863] check_preemption_disabled: 3 callbacks suppressed [ 67.999466][ T8863] BUG: using smp_processor_id() in preemptible [00000000] code: syz-executor580/8863 [ 68.015662][ T8863] caller is dst_cache_get+0x3d/0xb0 [ 68.020889][ T8863] CPU: 1 PID: 8863 Comm: syz-executor580 Not tainted 5.4.0-syzkaller #0 [ 68.029190][ T8863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 68.039257][ T8863] Call Trace: [ 68.042532][ T8863] dump_stack+0x197/0x210 [ 68.046863][ T8863] debug_smp_processor_id.cold+0x87/0x9d [ 68.052490][ T8863] dst_cache_get+0x3d/0xb0 [ 68.056925][ T8863] tipc_udp_xmit.isra.0+0xc4/0xb80 [ 68.062059][ T8863] ? kasan_kmalloc+0x9/0x10 [ 68.066553][ T8863] ? tipc_udp_addr2str+0x170/0x170 [ 68.071644][ T8863] ? __copy_skb_header+0x2e8/0x560 [ 68.076752][ T8863] ? skb_ts_finish+0xb0/0xb0 [ 68.081329][ T8863] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 68.086867][ T8863] ? skb_copy_header+0x21/0x2b0 [ 68.091713][ T8863] ? __pskb_copy_fclone+0x516/0xc90 [ 68.096975][ T8863] ? rcu_read_lock_held+0x9c/0xb0 [ 68.101978][ T8863] ? rcu_read_lock_held_common+0x130/0x130 [ 68.107762][ T8863] tipc_udp_send_msg+0x29a/0x490 [ 68.112769][ T8863] tipc_bearer_xmit_skb+0x219/0x480 [ 68.117950][ T8863] ? tipc_bearer_mtu+0x4f0/0x4f0 [ 68.122865][ T8863] ? tipc_disc_create+0x729/0xae0 [ 68.127868][ T8863] tipc_enable_bearer+0xb1d/0xd90 [ 68.132885][ T8863] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 68.138756][ T8863] ? tipc_bearer_xmit_skb+0x480/0x480 [ 68.144107][ T8863] ? nla_memcpy+0xb0/0xb0 [ 68.148445][ T8863] __tipc_nl_bearer_enable+0x2de/0x3a0 [ 68.153882][ T8863] ? __tipc_nl_bearer_enable+0x2de/0x3a0 [ 68.159491][ T8863] ? tipc_nl_bearer_disable+0x40/0x40 [ 68.164932][ T8863] ? nla_memcpy+0xb0/0xb0 [ 68.169244][ T8863] ? __nla_parse+0x43/0x60 [ 68.173644][ T8863] tipc_nl_bearer_enable+0x23/0x40 [ 68.178743][ T8863] genl_rcv_msg+0x67d/0xea0 [ 68.183254][ T8863] ? genl_family_rcv_msg_attrs_parse+0x300/0x300 [ 68.189585][ T8863] ? __kasan_check_read+0x11/0x20 [ 68.194598][ T8863] ? __lock_acquire+0x8a0/0x4a00 [ 68.199522][ T8863] ? find_held_lock+0x35/0x130 [ 68.204311][ T8863] netlink_rcv_skb+0x177/0x450 [ 68.209054][ T8863] ? genl_family_rcv_msg_attrs_parse+0x300/0x300 [ 68.215359][ T8863] ? netlink_ack+0xb50/0xb50 [ 68.219927][ T8863] ? __kasan_check_write+0x14/0x20 [ 68.225020][ T8863] ? netlink_deliver_tap+0x254/0xbf0 [ 68.230285][ T8863] genl_rcv+0x29/0x40 [ 68.234247][ T8863] netlink_unicast+0x531/0x710 [ 68.239056][ T8863] ? netlink_attachskb+0x7c0/0x7c0 [ 68.244181][ T8863] ? _copy_from_iter_full+0x25d/0x8c0 [ 68.249567][ T8863] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 68.255275][ T8863] ? __check_object_size+0x3d/0x437 [ 68.260471][ T8863] netlink_sendmsg+0x8a5/0xd60 [ 68.265241][ T8863] ? netlink_unicast+0x710/0x710 [ 68.270171][ T8863] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 68.275703][ T8863] ? apparmor_socket_sendmsg+0x2a/0x30 [ 68.281146][ T8863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 68.287367][ T8863] ? security_socket_sendmsg+0x8d/0xc0 [ 68.292807][ T8863] ? netlink_unicast+0x710/0x710 [ 68.297726][ T8863] sock_sendmsg+0xd7/0x130 [ 68.302131][ T8863] ___sys_sendmsg+0x803/0x920 [ 68.306787][ T8863] ? copy_msghdr_from_user+0x440/0x440 [ 68.312235][ T8863] ? lock_downgrade+0x920/0x920 [ 68.317063][ T8863] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 68.322847][ T8863] ? lockdep_hardirqs_on+0x421/0x5e0 [ 68.328131][ T8863] ? __kasan_check_read+0x11/0x20 [ 68.333144][ T8863] ? mark_lock+0xc2/0x1220 [ 68.337541][ T8863] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 68.343327][ T8863] ? __kasan_check_read+0x11/0x20 [ 68.348338][ T8863] ? __lock_acquire+0x16f2/0x4a00 [ 68.353354][ T8863] ? debug_object_deactivate+0x320/0x320 [ 68.358980][ T8863] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 68.365127][ T8863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 68.371353][ T8863] ? __fget_light+0x1a9/0x230 [ 68.376019][ T8863] ? __fdget+0x1b/0x20 [ 68.380077][ T8863] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 68.386299][ T8863] __sys_sendmsg+0x105/0x1d0 [ 68.390868][ T8863] ? __sys_sendmsg_sock+0xd0/0xd0 [ 68.395874][ T8863] ? lockdep_hardirqs_on+0x421/0x5e0 [ 68.401155][ T8863] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 68.406676][ T8863] ? do_syscall_64+0x26/0x760 [ 68.411484][ T8863] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 68.417538][ T8863] ? do_syscall_64+0x26/0x760 [ 68.422228][ T8863] __x64_sys_sendmsg+0x78/0xb0 [ 68.427001][ T8863] do_syscall_64+0xfa/0x760 [ 68.431510][ T8863] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 68.437446][ T8863] RIP: 0033:0x4441f9 [ 68.441332][ T8863] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 1b d8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 68.461387][ T8863] RSP: 002b:00007ffe6016cbc8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.471903][ T8863] RAX: ffffffffffffffda RBX: 00000000004002e0 RCX: 0000000