[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 65.228309][ T26] audit: type=1800 audit(1567362827.395:25): pid=8770 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 65.278958][ T26] audit: type=1800 audit(1567362827.395:26): pid=8770 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 65.309692][ T26] audit: type=1800 audit(1567362827.405:27): pid=8770 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.104' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 75.010776][ T8922] Started in network mode [ 75.016288][ T8922] Own node identity ff030000000000000000000000000001, cluster identity 4711 [ 75.029436][ T8922] check_preemption_disabled: 3 callbacks suppressed [ 75.029448][ T8922] BUG: using smp_processor_id() in preemptible [00000000] code: syz-executor098/8922 [ 75.053283][ T8922] caller is dst_cache_get+0x3d/0xb0 [ 75.058849][ T8922] CPU: 0 PID: 8922 Comm: syz-executor098 Not tainted 5.3.0-rc6+ #153 [ 75.068435][ T8922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 75.079721][ T8922] Call Trace: [ 75.083097][ T8922] dump_stack+0x172/0x1f0 [ 75.087425][ T8922] debug_smp_processor_id.cold+0x87/0x9d [ 75.093159][ T8922] dst_cache_get+0x3d/0xb0 [ 75.097948][ T8922] tipc_udp_xmit.isra.0+0xc4/0xb80 [ 75.103080][ T8922] ? tipc_udp_addr2str+0x170/0x170 [ 75.108211][ T8922] ? __kasan_check_read+0x11/0x20 [ 75.113332][ T8922] ? __lock_acquire+0x8a2/0x4c30 [ 75.119629][ T8922] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 75.125800][ T8922] ? bearer_get+0x16e/0x350 [ 75.130733][ T8922] ? find_held_lock+0x35/0x130 [ 75.136108][ T8922] ? bearer_get+0x16e/0x350 [ 75.140830][ T8922] tipc_udp_send_msg+0x3ea/0x490 [ 75.146082][ T8922] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 75.153198][ T8922] tipc_bearer_xmit_skb+0x17e/0x370 [ 75.159104][ T8922] tipc_enable_bearer+0xacf/0xd30 [ 75.164143][ T8922] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 75.170067][ T8922] ? tipc_bearer_xmit_skb+0x370/0x370 [ 75.175439][ T8922] ? nla_memcpy+0xb0/0xb0 [ 75.179773][ T8922] __tipc_nl_bearer_enable+0x2de/0x3a0 [ 75.185310][ T8922] ? __tipc_nl_bearer_enable+0x2de/0x3a0 [ 75.191217][ T8922] ? tipc_nl_bearer_disable+0x40/0x40 [ 75.196854][ T8922] ? nla_memcpy+0xb0/0xb0 [ 75.201178][ T8922] ? lock_acquire+0x190/0x410 [ 75.206201][ T8922] tipc_nl_bearer_enable+0x23/0x40 [ 75.211704][ T8922] genl_family_rcv_msg+0x74b/0xf90 [ 75.216847][ T8922] ? genl_unregister_family+0x7b0/0x7b0 [ 75.222399][ T8922] ? __kasan_check_read+0x11/0x20 [ 75.227436][ T8922] ? __lock_acquire+0x1702/0x4c30 [ 75.232470][ T8922] genl_rcv_msg+0xca/0x170 [ 75.236886][ T8922] netlink_rcv_skb+0x177/0x450 [ 75.241996][ T8922] ? genl_family_rcv_msg+0xf90/0xf90 [ 75.247441][ T8922] ? netlink_ack+0xb30/0xb30 [ 75.253074][ T8922] ? __kasan_check_write+0x14/0x20 [ 75.258191][ T8922] ? netlink_deliver_tap+0x254/0xbf0 [ 75.264227][ T8922] genl_rcv+0x29/0x40 [ 75.268218][ T8922] netlink_unicast+0x531/0x710 [ 75.273045][ T8922] ? netlink_attachskb+0x7c0/0x7c0 [ 75.278340][ T8922] ? _copy_from_iter_full+0x25d/0x8a0 [ 75.297072][ T8922] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 75.302960][ T8922] ? __check_object_size+0x3d/0x437 [ 75.308338][ T8922] netlink_sendmsg+0x8a5/0xd60 [ 75.313367][ T8922] ? netlink_unicast+0x710/0x710 [ 75.318941][ T8922] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 75.324803][ T8922] ? apparmor_socket_sendmsg+0x2a/0x30 [ 75.330437][ T8922] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 75.336944][ T8922] ? security_socket_sendmsg+0x8d/0xc0 [ 75.342403][ T8922] ? netlink_unicast+0x710/0x710 [ 75.347467][ T8922] sock_sendmsg+0xd7/0x130 [ 75.351914][ T8922] ___sys_sendmsg+0x803/0x920 [ 75.357089][ T8922] ? copy_msghdr_from_user+0x440/0x440 [ 75.363071][ T8922] ? lock_downgrade+0x920/0x920 [ 75.368104][ T8922] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 75.373908][ T8922] ? lockdep_hardirqs_on+0x418/0x5d0 [ 75.379203][ T8922] ? __kasan_check_read+0x11/0x20 [ 75.384345][ T8922] ? mark_lock+0xc0/0x11e0 [ 75.389633][ T8922] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 75.395560][ T8922] ? __kasan_check_read+0x11/0x20 [ 75.400847][ T8922] ? __lock_acquire+0x1702/0x4c30 [ 75.405867][ T8922] ? debug_object_deactivate+0x320/0x320 [ 75.411512][ T8922] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 75.418092][ T8922] ? __fget_light+0x1a9/0x230 [ 75.423036][ T8922] ? __fdget+0x1b/0x20 [ 75.427365][ T8922] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 75.433614][ T8922] __sys_sendmsg+0x105/0x1d0 [ 75.438292][ T8922] ? __sys_sendmsg_sock+0xd0/0xd0 [ 75.446438][ T8922] ? lockdep_hardirqs_on+0x418/0x5d0 [ 75.452084][ T8922] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 75.457737][ T8922] ? do_syscall_64+0x26/0x6a0 [ 75.462585][ T8922] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 75.468737][ T8922] ? do_syscall_64+0x26/0x6a0 [ 75.473773][ T8922] __x64_sys_sendmsg+0x78/0xb0 [ 75.479012][ T8922] do_syscall_64+0xfd/0x6a0 [ 75.483655][ T8922] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 75.489662][ T8922] RIP: 0033:0x444359 [ 75.493761][ T8922] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 1b d8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 75.514053][ T8922] RSP: 002b:00007ffed2371d68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.522573][ T8922] RAX: ffffffffffffffda RBX: 00000000004002e0 RCX: 0000000000444359 [ 75.530802][ T8922] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 75.538856][ T8922] RBP: 00000000006ce018 R08: 0000000000000044 R09: 00000000004002e0 [ 75.546908][ T8922] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000402000 [ 75.554881][ T8922] R13: 0000000000402090 R14: 0000000000000000 R15: 0000000000000000 [