[ 37.165646][ T26] audit: type=1800 audit(1555432375.700:28): pid=7624 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 37.888617][ T26] audit: type=1800 audit(1555432376.500:29): pid=7624 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 37.909605][ T26] audit: type=1800 audit(1555432376.500:30): pid=7624 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 [....] startpar: service(s) returned failure: rsyslog ...[?25l[?1c7[FAIL8[?25h[?0c failed! Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.160' (ECDSA) to the list of known hosts. syzkaller login: [ 49.665903][ T7798] IPVS: ftp: loaded support on port[0] = 21 [ 49.720544][ T7798] chnl_net:caif_netlink_parms(): no params data found [ 49.750708][ T7798] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.758061][ T7798] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.766019][ T7798] device bridge_slave_0 entered promiscuous mode [ 49.774198][ T7798] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.781414][ T7798] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.789302][ T7798] device bridge_slave_1 entered promiscuous mode [ 49.805082][ T7798] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 49.815082][ T7798] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 49.833262][ T7798] team0: Port device team_slave_0 added [ 49.840124][ T7798] team0: Port device team_slave_1 added [ 49.920930][ T7798] device hsr_slave_0 entered promiscuous mode [ 49.990163][ T7798] device hsr_slave_1 entered promiscuous mode [ 50.066504][ T7798] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.073835][ T7798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.081724][ T7798] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.088784][ T7798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.123050][ T7798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.134595][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.155242][ T3482] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.163697][ T3482] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.174360][ T3482] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 50.185989][ T7798] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.196787][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.205483][ T2967] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.212655][ T2967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.230422][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.238876][ T7800] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.246001][ T7800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.254282][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.263714][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.277701][ T7798] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 50.289256][ T7798] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.302436][ T7802] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.311079][ T7802] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.319642][ T7802] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready executing program [ 50.327961][ T7802] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.343171][ T7798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.357497][ T7798] ------------[ cut here ]------------ [ 50.363110][ T7798] hsr_addr_subst_dest: Unknown node [ 50.368695][ T7798] WARNING: CPU: 0 PID: 7798 at net/hsr/hsr_framereg.c:294 hsr_addr_subst_dest+0x382/0x460 [ 50.378671][ T7798] Kernel panic - not syncing: panic_on_warn set ... [ 50.385251][ T7798] CPU: 0 PID: 7798 Comm: syz-executor728 Not tainted 5.1.0-rc5-next-20190416 #26 [ 50.394349][ T7798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.404499][ T7798] Call Trace: [ 50.407794][ T7798] dump_stack+0x172/0x1f0 [ 50.412117][ T7798] ? hsr_addr_subst_dest+0x360/0x460 [ 50.417495][ T7798] panic+0x2cb/0x72b [ 50.421385][ T7798] ? __warn_printk+0xf3/0xf3 [ 50.425967][ T7798] ? hsr_addr_subst_dest+0x382/0x460 [ 50.431240][ T7798] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 50.437870][ T7798] ? __warn.cold+0x5/0x46 [ 50.442233][ T7798] ? __warn+0xe8/0x1d0 [ 50.446314][ T7798] ? hsr_addr_subst_dest+0x382/0x460 [ 50.451631][ T7798] __warn.cold+0x20/0x46 [ 50.455876][ T7798] ? vprintk_emit+0x1ea/0x700 [ 50.460542][ T7798] ? hsr_addr_subst_dest+0x382/0x460 [ 50.465828][ T7798] report_bug+0x263/0x2b0 [ 50.470144][ T7798] do_error_trap+0x11b/0x200 [ 50.474873][ T7798] do_invalid_op+0x37/0x50 [ 50.479281][ T7798] ? hsr_addr_subst_dest+0x382/0x460 [ 50.484826][ T7798] invalid_op+0x14/0x20 [ 50.489173][ T7798] RIP: 0010:hsr_addr_subst_dest+0x382/0x460 [ 50.495060][ T7798] Code: 89 de e8 e1 bc 5e fa 84 db 75 d3 e8 98 bb 5e fa 48 c7 c6 60 e0 1a 88 48 c7 c7 20 e0 1a 88 c6 05 b9 fe 49 02 01 e8 8c 3b 31 fa <0f> 0b eb b0 e8 75 bb 5e fa 0f b6 1d a5 fe 49 02 31 ff 89 de e8 a5 [ 50.514902][ T7798] RSP: 0018:ffff8880a65df5e0 EFLAGS: 00010286 [ 50.520986][ T7798] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 50.528954][ T7798] RDX: 0000000000000000 RSI: ffffffff815af6b6 RDI: ffffed1014cbbeae [ 50.536923][ T7798] RBP: ffff8880a65df620 R08: ffff888092ca6580 R09: ffffed1015d03ef9 [ 50.544879][ T7798] R10: ffffed1015d03ef8 R11: ffff8880ae81f7c7 R12: ffff888093d510a0 [ 50.552833][ T7798] R13: 0000000000000000 R14: 000000000c8af3bf R15: 0000000000000000 [ 50.560802][ T7798] ? vprintk_func+0x86/0x189 [ 50.565392][ T7798] hsr_forward_skb+0x138b/0x1d30 [ 50.570321][ T7798] hsr_dev_xmit+0x72/0xa0 [ 50.574633][ T7798] dev_hard_start_xmit+0x18f/0x960 [ 50.579739][ T7798] __dev_queue_xmit+0x2a9d/0x36c0 [ 50.584747][ T7798] ? __might_fault+0x12b/0x1e0 [ 50.589488][ T7798] ? find_held_lock+0x35/0x130 [ 50.594241][ T7798] ? netdev_core_pick_tx+0x300/0x300 [ 50.599517][ T7798] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 50.605743][ T7798] ? iov_iter_advance+0x295/0xf70 [ 50.610770][ T7798] dev_queue_xmit+0x18/0x20 [ 50.615260][ T7798] ? dev_queue_xmit+0x18/0x20 [ 50.619922][ T7798] pppoe_sendmsg+0x657/0x7e0 [ 50.624537][ T7798] ? ether_setup+0x2d0/0x2d0 [ 50.629132][ T7798] ? pppoe_getname+0x120/0x120 [ 50.633892][ T7798] ? apparmor_socket_sendmsg+0x2a/0x30 [ 50.639646][ T7798] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 50.645889][ T7798] ? security_socket_sendmsg+0x93/0xc0 [ 50.651344][ T7798] ? pppoe_getname+0x120/0x120 [ 50.656145][ T7798] sock_sendmsg+0xdd/0x130 [ 50.660588][ T7798] ___sys_sendmsg+0x3e2/0x930 [ 50.665343][ T7798] ? copy_msghdr_from_user+0x430/0x430 [ 50.670838][ T7798] ? __lock_acquire+0x548/0x3fb0 [ 50.675780][ T7798] ? mark_held_locks+0xf0/0xf0 [ 50.680560][ T7798] ? kasan_check_read+0x11/0x20 [ 50.685396][ T7798] ? __lock_acquire+0x242a/0x3fb0 [ 50.690423][ T7798] ? __might_fault+0x12b/0x1e0 [ 50.695181][ T7798] ? find_held_lock+0x35/0x130 [ 50.699931][ T7798] ? __might_fault+0x12b/0x1e0 [ 50.704691][ T7798] ? lock_downgrade+0x880/0x880 [ 50.709800][ T7798] ? ___might_sleep+0x163/0x280 [ 50.714640][ T7798] __sys_sendmmsg+0x1bf/0x4d0 [ 50.719322][ T7798] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 50.724343][ T7798] ? __sys_connect+0x12d/0x330 [ 50.729151][ T7798] ? __ia32_sys_accept+0xb0/0xb0 [ 50.734127][ T7798] ? kasan_check_write+0x14/0x20 [ 50.739065][ T7798] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 50.744524][ T7798] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 50.749967][ T7798] ? do_syscall_64+0x26/0x610 [ 50.754637][ T7798] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 50.760702][ T7798] ? do_syscall_64+0x26/0x610 [ 50.765375][ T7798] __x64_sys_sendmmsg+0x9d/0x100 [ 50.770301][ T7798] do_syscall_64+0x103/0x610 [ 50.774886][ T7798] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 50.780763][ T7798] RIP: 0033:0x441929 [ 50.784647][ T7798] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 bb 10 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 50.804284][ T7798] RSP: 002b:00007ffea057e1b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 50.812697][ T7798] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000441929 [ 50.820654][ T7798] RDX: 0400000000000191 RSI: 000000002000d180 RDI: 0000000000000003 [ 50.828796][ T7798] RBP: 00000000004a8fd0 R08: 0000000001bbbbbb R09: 0000000001bbbbbb [ 50.836757][ T7798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000402e70 [ 50.844716][ T7798] R13: 0000000000402f00 R14: 0000000000000000 R15: 0000000000000000 [ 50.853621][ T7798] Kernel Offset: disabled [ 50.858076][ T7798] Rebooting in 86400 seconds..