[ 59.803757][ T26] audit: type=1800 audit(1559634708.770:29): pid=8927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 59.851302][ T26] audit: type=1800 audit(1559634708.780:30): pid=8927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.86' (ECDSA) to the list of known hosts. syzkaller login: [ 69.154409][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 69.154424][ T26] audit: type=1400 audit(1559634718.120:36): avc: denied { map } for pid=9116 comm="syz-executor873" path="/root/syz-executor873260973" dev="sda1" ino=16484 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 69.207817][ T9117] IPVS: ftp: loaded support on port[0] = 21 [ 69.264156][ T9117] chnl_net:caif_netlink_parms(): no params data found [ 69.292102][ T9117] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.301307][ T9117] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.309393][ T9117] device bridge_slave_0 entered promiscuous mode [ 69.317781][ T9117] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.325311][ T9117] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.333085][ T9117] device bridge_slave_1 entered promiscuous mode [ 69.350460][ T9117] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 69.363259][ T9117] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 69.382239][ T9117] team0: Port device team_slave_0 added [ 69.389693][ T9117] team0: Port device team_slave_1 added [ 69.436989][ T9117] device hsr_slave_0 entered promiscuous mode [ 69.515549][ T9117] device hsr_slave_1 entered promiscuous mode [ 69.583109][ T9117] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.591243][ T9117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.599273][ T9117] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.606438][ T9117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.642628][ T9117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.654499][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.665730][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.674433][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.683901][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 69.696906][ T9117] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.708155][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.718343][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.725927][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.746086][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.754806][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.762084][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.770733][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.780450][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.790669][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.800789][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.813928][ T9120] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.823543][ T9117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready executing program [ 69.843840][ T9117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.882793][ T9117] ------------[ cut here ]------------ [ 69.888678][ T9117] hsr_addr_subst_dest: Unknown node [ 69.894549][ T9117] WARNING: CPU: 1 PID: 9117 at net/hsr/hsr_framereg.c:294 hsr_addr_subst_dest+0x382/0x460 [ 69.904724][ T9117] Kernel panic - not syncing: panic_on_warn set ... [ 69.911896][ T9117] CPU: 1 PID: 9117 Comm: syz-executor873 Not tainted 5.2.0-rc3+ #12 [ 69.920466][ T9117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.930885][ T9117] Call Trace: [ 69.934256][ T9117] dump_stack+0x172/0x1f0 [ 69.938628][ T9117] ? hsr_addr_subst_dest+0x380/0x460 [ 69.943908][ T9117] panic+0x2cb/0x744 [ 69.947801][ T9117] ? __warn_printk+0xf3/0xf3 [ 69.952389][ T9117] ? hsr_addr_subst_dest+0x382/0x460 [ 69.958110][ T9117] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 69.964352][ T9117] ? __warn.cold+0x5/0x4d [ 69.968676][ T9117] ? __warn+0xe8/0x1d0 [ 69.972741][ T9117] ? hsr_addr_subst_dest+0x382/0x460 [ 69.978083][ T9117] __warn.cold+0x20/0x4d [ 69.982319][ T9117] ? vprintk_emit+0x1ea/0x700 [ 69.986992][ T9117] ? hsr_addr_subst_dest+0x382/0x460 [ 69.992307][ T9117] report_bug+0x263/0x2b0 [ 69.996724][ T9117] do_error_trap+0x11b/0x200 [ 70.001397][ T9117] do_invalid_op+0x37/0x50 [ 70.006027][ T9117] ? hsr_addr_subst_dest+0x382/0x460 [ 70.011489][ T9117] invalid_op+0x14/0x20 [ 70.015645][ T9117] RIP: 0010:hsr_addr_subst_dest+0x382/0x460 [ 70.021668][ T9117] Code: 89 de e8 11 89 5e fa 84 db 75 d3 e8 c8 87 5e fa 48 c7 c6 e0 95 21 88 48 c7 c7 a0 95 21 88 c6 05 26 a4 6a 02 01 e8 0c cb 30 fa <0f> 0b eb b0 e8 a5 87 5e fa 0f b6 1d 12 a4 6a 02 31 ff 89 de e8 d5 [ 70.041501][ T9117] RSP: 0018:ffff8880967c75e0 EFLAGS: 00010286 [ 70.048044][ T9117] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 70.056009][ T9117] RDX: 0000000000000000 RSI: ffffffff815ac936 RDI: ffffed1012cf8eae [ 70.064185][ T9117] RBP: ffff8880967c7620 R08: ffff88808dd98680 R09: ffffed1015d240f1 [ 70.072495][ T9117] R10: ffffed1015d240f0 R11: ffff8880ae920787 R12: ffff888091357020 [ 70.080468][ T9117] R13: 00000000aaaaaaaa R14: 00000000aa537ffd R15: 00000000000024aa [ 70.088539][ T9117] ? vprintk_func+0x86/0x189 [ 70.093258][ T9117] hsr_forward_skb+0x138b/0x1d30 [ 70.098413][ T9117] hsr_dev_xmit+0x72/0xa0 [ 70.103061][ T9117] dev_hard_start_xmit+0x18a/0x950 [ 70.115383][ T9117] __dev_queue_xmit+0x2a8e/0x36b0 [ 70.120532][ T9117] ? __might_fault+0x12b/0x1e0 [ 70.125291][ T9117] ? find_held_lock+0x35/0x130 [ 70.130295][ T9117] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 70.135790][ T9117] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 70.144090][ T9117] ? iov_iter_advance+0x295/0xf70 [ 70.151710][ T9117] dev_queue_xmit+0x18/0x20 [ 70.156221][ T9117] ? dev_queue_xmit+0x18/0x20 [ 70.161168][ T9117] pppoe_sendmsg+0x654/0x7e0 [ 70.165842][ T9117] ? ether_setup+0x2d0/0x2d0 [ 70.170565][ T9117] ? pppoe_getname+0x120/0x120 [ 70.175321][ T9117] ? tomoyo_socket_sendmsg+0x26/0x30 [ 70.180603][ T9117] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 70.187204][ T9117] ? security_socket_sendmsg+0x8d/0xc0 [ 70.192791][ T9117] ? pppoe_getname+0x120/0x120 [ 70.197551][ T9117] sock_sendmsg+0xd7/0x130 [ 70.202139][ T9117] ___sys_sendmsg+0x3e2/0x920 [ 70.206815][ T9117] ? copy_msghdr_from_user+0x430/0x430 [ 70.212269][ T9117] ? mark_held_locks+0xf0/0xf0 [ 70.217043][ T9117] ? reacquire_held_locks+0xfa/0x520 [ 70.222447][ T9117] ? release_sock+0x156/0x1c0 [ 70.227158][ T9117] ? find_held_lock+0x35/0x130 [ 70.232006][ T9117] ? release_sock+0x156/0x1c0 [ 70.236835][ T9117] ? __local_bh_enable_ip+0x15a/0x270 [ 70.245297][ T9117] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 70.252002][ T9117] ? __fget_light+0x1a9/0x230 [ 70.256674][ T9117] ? __fdget+0x1b/0x20 [ 70.260736][ T9117] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 70.267190][ T9117] ? sockfd_lookup_light+0xcb/0x180 [ 70.273017][ T9117] __sys_sendmmsg+0x1bf/0x4d0 [ 70.277702][ T9117] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 70.283173][ T9117] ? __sys_connect+0x12d/0x330 [ 70.288151][ T9117] ? __ia32_sys_accept+0xb0/0xb0 [ 70.293527][ T9117] ? kasan_check_write+0x14/0x20 [ 70.298459][ T9117] ? up_read+0xc4/0x200 [ 70.302841][ T9117] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 70.308666][ T9117] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 70.314255][ T9117] ? do_syscall_64+0x26/0x680 [ 70.318930][ T9117] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 70.325123][ T9117] ? do_syscall_64+0x26/0x680 [ 70.329900][ T9117] __x64_sys_sendmmsg+0x9d/0x100 [ 70.334831][ T9117] do_syscall_64+0xfd/0x680 [ 70.339429][ T9117] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 70.345308][ T9117] RIP: 0033:0x441a39 [ 70.349340][ T9117] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 bb 10 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 70.369219][ T9117] RSP: 002b:00007ffe452a9a58 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 70.377895][ T9117] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000441a39 [ 70.386077][ T9117] RDX: 0000000000000003 RSI: 00000000200035c0 RDI: 0000000000000003 [ 70.394550][ T9117] RBP: 00000000004a90d0 R08: 0000000001bbbbbb R09: 0000000001bbbbbb [ 70.402521][ T9117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000402f80 [ 70.410637][ T9117] R13: 0000000000403010 R14: 0000000000000000 R15: 0000000000000000 [ 70.421480][ T9117] Kernel Offset: disabled [ 70.425898][ T9117] Rebooting in 86400 seconds..