[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 56.583866][ T26] audit: type=1800 audit(1574817648.205:25): pid=8686 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 56.648858][ T26] audit: type=1800 audit(1574817648.215:26): pid=8686 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 56.678495][ T26] audit: type=1800 audit(1574817648.215:27): pid=8686 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.231' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 68.343938][ T8841] tipc: Started in network mode [ 68.349145][ T8841] tipc: Own node identity ff000000000000000000000000000001, cluster identity 4711 [ 68.358893][ T8841] tipc: New replicast peer: fe80:0000:0000:0000:dd00:0000:0000:00bb [ 68.367206][ T8841] check_preemption_disabled: 3 callbacks suppressed [ 68.367217][ T8841] BUG: using smp_processor_id() in preemptible [00000000] code: syz-executor151/8841 [ 68.383607][ T8841] caller is dst_cache_get+0x3d/0xb0 [ 68.389043][ T8841] CPU: 1 PID: 8841 Comm: syz-executor151 Not tainted 5.4.0-syzkaller #0 [ 68.397384][ T8841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 68.407422][ T8841] Call Trace: [ 68.410837][ T8841] dump_stack+0x197/0x210 [ 68.415152][ T8841] debug_smp_processor_id.cold+0x87/0x9d [ 68.420771][ T8841] dst_cache_get+0x3d/0xb0 [ 68.425170][ T8841] tipc_udp_xmit.isra.0+0xc4/0xb80 [ 68.430263][ T8841] ? kasan_kmalloc+0x9/0x10 [ 68.434749][ T8841] ? tipc_udp_addr2str+0x170/0x170 [ 68.439839][ T8841] ? __copy_skb_header+0x2e8/0x560 [ 68.444931][ T8841] ? skb_ts_finish+0xb0/0xb0 [ 68.449504][ T8841] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 68.455052][ T8841] ? skb_copy_header+0x21/0x2b0 [ 68.459970][ T8841] ? __pskb_copy_fclone+0x516/0xc90 [ 68.465183][ T8841] ? rcu_read_lock_held+0x9c/0xb0 [ 68.470228][ T8841] ? rcu_read_lock_held_common+0x130/0x130 [ 68.476031][ T8841] tipc_udp_send_msg+0x29a/0x490 [ 68.480966][ T8841] tipc_bearer_xmit_skb+0x219/0x480 [ 68.486147][ T8841] ? tipc_bearer_mtu+0x4f0/0x4f0 [ 68.491078][ T8841] ? tipc_disc_create+0x729/0xae0 [ 68.496089][ T8841] tipc_enable_bearer+0xb1d/0xd90 [ 68.501097][ T8841] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 68.506991][ T8841] ? tipc_bearer_xmit_skb+0x480/0x480 [ 68.512350][ T8841] ? nla_memcpy+0xb0/0xb0 [ 68.516693][ T8841] __tipc_nl_bearer_enable+0x2de/0x3a0 [ 68.522138][ T8841] ? __tipc_nl_bearer_enable+0x2de/0x3a0 [ 68.527754][ T8841] ? tipc_nl_bearer_disable+0x40/0x40 [ 68.533975][ T8841] ? nla_memcpy+0xb0/0xb0 [ 68.538339][ T8841] ? __nla_parse+0x43/0x60 [ 68.542744][ T8841] tipc_nl_bearer_enable+0x23/0x40 [ 68.547835][ T8841] genl_rcv_msg+0x67d/0xea0 [ 68.552366][ T8841] ? genl_family_rcv_msg_attrs_parse+0x300/0x300 [ 68.558691][ T8841] ? __kasan_check_read+0x11/0x20 [ 68.563722][ T8841] ? __lock_acquire+0x8a0/0x4a00 [ 68.568658][ T8841] ? find_held_lock+0x35/0x130 [ 68.574195][ T8841] netlink_rcv_skb+0x177/0x450 [ 68.578965][ T8841] ? genl_family_rcv_msg_attrs_parse+0x300/0x300 [ 68.585335][ T8841] ? netlink_ack+0xb50/0xb50 [ 68.590020][ T8841] ? __kasan_check_write+0x14/0x20 [ 68.595119][ T8841] ? netlink_deliver_tap+0x254/0xbf0 [ 68.600388][ T8841] genl_rcv+0x29/0x40 [ 68.605316][ T8841] netlink_unicast+0x531/0x710 [ 68.610078][ T8841] ? netlink_attachskb+0x7c0/0x7c0 [ 68.615170][ T8841] ? _copy_from_iter_full+0x25d/0x8c0 [ 68.620523][ T8841] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 68.626313][ T8841] ? __check_object_size+0x3d/0x437 [ 68.631497][ T8841] netlink_sendmsg+0x8a5/0xd60 [ 68.636246][ T8841] ? netlink_unicast+0x710/0x710 [ 68.641263][ T8841] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 68.646787][ T8841] ? apparmor_socket_sendmsg+0x2a/0x30 [ 68.652234][ T8841] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 68.658453][ T8841] ? security_socket_sendmsg+0x8d/0xc0 [ 68.663903][ T8841] ? netlink_unicast+0x710/0x710 [ 68.668837][ T8841] sock_sendmsg+0xd7/0x130 [ 68.673236][ T8841] ___sys_sendmsg+0x803/0x920 [ 68.677900][ T8841] ? copy_msghdr_from_user+0x440/0x440 [ 68.684054][ T8841] ? lock_downgrade+0x920/0x920 [ 68.688887][ T8841] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 68.694717][ T8841] ? lockdep_hardirqs_on+0x421/0x5e0 [ 68.700000][ T8841] ? __kasan_check_read+0x11/0x20 [ 68.705015][ T8841] ? mark_lock+0xc2/0x1220 [ 68.709638][ T8841] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 68.715447][ T8841] ? __kasan_check_read+0x11/0x20 [ 68.720468][ T8841] ? __lock_acquire+0x16f2/0x4a00 [ 68.725493][ T8841] ? debug_object_deactivate+0x320/0x320 [ 68.731220][ T8841] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 68.737478][ T8841] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 68.743908][ T8841] ? __fget_light+0x1a9/0x230 [ 68.748576][ T8841] ? __fdget+0x1b/0x20 [ 68.752747][ T8841] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 68.759079][ T8841] __sys_sendmsg+0x105/0x1d0 [ 68.763686][ T8841] ? __sys_sendmsg_sock+0xd0/0xd0 [ 68.768832][ T8841] ? lockdep_hardirqs_on+0x421/0x5e0 [ 68.774110][ T8841] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 68.779549][ T8841] ? do_syscall_64+0x26/0x760 [ 68.784209][ T8841] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 68.790252][ T8841] ? do_syscall_64+0x26/0x760 [ 68.794911][ T8841] __x64_sys_sendmsg+0x78/0xb0 [ 68.799660][ T8841] do_syscall_64+0xfa/0x760 [ 68.804177][ T8841] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 68.810066][ T8841] RIP: 0033:0x4441f9 [ 68.813959][ T8841] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 1b d8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 68.833819][ T8841] RSP: 002b:00007fff88164ac8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.842223][ T8841] RAX: ffffffffffffffda RB