[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 71.873516][ T24] kauditd_printk_skb: 5 callbacks suppressed [ 71.873529][ T24] audit: type=1800 audit(1561786901.128:29): pid=8772 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 71.900498][ T24] audit: type=1800 audit(1561786901.138:30): pid=8772 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.10' (ECDSA) to the list of known hosts. 2019/06/29 05:41:53 parsed 1 programs 2019/06/29 05:41:55 executed programs: 0 syzkaller login: [ 85.783105][ T8942] IPVS: ftp: loaded support on port[0] = 21 [ 85.849468][ T8942] chnl_net:caif_netlink_parms(): no params data found [ 85.879147][ T8942] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.887268][ T8942] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.896084][ T8942] device bridge_slave_0 entered promiscuous mode [ 85.904365][ T8942] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.911679][ T8942] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.919653][ T8942] device bridge_slave_1 entered promiscuous mode [ 85.938012][ T8942] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 85.948052][ T8942] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 85.966121][ T8942] team0: Port device team_slave_0 added [ 85.973344][ T8942] team0: Port device team_slave_1 added [ 86.056735][ T8942] device hsr_slave_0 entered promiscuous mode [ 86.125039][ T8942] device hsr_slave_1 entered promiscuous mode [ 86.173140][ T8942] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.180511][ T8942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.188471][ T8942] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.195856][ T8942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.231295][ T8942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.244413][ T2815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.267002][ T2815] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.276981][ T2815] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.285761][ T2815] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 86.297818][ T8942] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.308781][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.318006][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.325158][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.338550][ T8947] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.347115][ T8947] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.354267][ T8947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.376608][ T8945] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.386244][ T8945] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.395052][ T8945] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.403851][ T8945] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.415977][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.426698][ T8942] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.446308][ T8942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.556363][ T8955] ------------[ cut here ]------------ [ 86.562033][ T8955] hsr_addr_subst_dest: Unknown node [ 86.568087][ T8955] WARNING: CPU: 1 PID: 8955 at net/hsr/hsr_framereg.c:294 hsr_addr_subst_dest+0x382/0x460 [ 86.578007][ T8955] Kernel panic - not syncing: panic_on_warn set ... [ 86.584605][ T8955] CPU: 1 PID: 8955 Comm: syz-executor.0 Not tainted 5.2.0-rc6+ #43 [ 86.592535][ T8955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 86.602622][ T8955] Call Trace: [ 86.605924][ T8955] dump_stack+0x172/0x1f0 [ 86.610302][ T8955] ? hsr_addr_subst_dest+0x320/0x460 [ 86.615612][ T8955] panic+0x2cb/0x744 [ 86.619519][ T8955] ? __warn_printk+0xf3/0xf3 [ 86.624130][ T8955] ? hsr_addr_subst_dest+0x382/0x460 [ 86.629440][ T8955] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 86.635699][ T8955] ? __warn.cold+0x5/0x4d [ 86.640080][ T8955] ? __warn+0xe8/0x1d0 [ 86.644193][ T8955] ? hsr_addr_subst_dest+0x382/0x460 [ 86.649498][ T8955] __warn.cold+0x20/0x4d [ 86.653745][ T8955] ? vprintk_emit+0x1ea/0x700 [ 86.658426][ T8955] ? hsr_addr_subst_dest+0x382/0x460 [ 86.663771][ T8955] report_bug+0x263/0x2b0 [ 86.668111][ T8955] do_error_trap+0x11b/0x200 [ 86.672710][ T8955] do_invalid_op+0x37/0x50 [ 86.677215][ T8955] ? hsr_addr_subst_dest+0x382/0x460 [ 86.682532][ T8955] invalid_op+0x14/0x20 [ 86.686695][ T8955] RIP: 0010:hsr_addr_subst_dest+0x382/0x460 [ 86.692676][ T8955] Code: 89 de e8 11 f2 5d fa 84 db 75 d3 e8 c8 f0 5d fa 48 c7 c6 60 9f 21 88 48 c7 c7 20 9f 21 88 c6 05 86 fb 69 02 01 e8 cc 29 30 fa <0f> 0b eb b0 e8 a5 f0 5d fa 0f b6 1d 72 fb 69 02 31 ff 89 de e8 d5 [ 86.712300][ T8955] RSP: 0018:ffff88809802f470 EFLAGS: 00010286 [ 86.718364][ T8955] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 86.726368][ T8955] RDX: 0000000000000000 RSI: ffffffff815adb06 RDI: ffffed1013005e80 [ 86.734371][ T8955] RBP: ffff88809802f4b0 R08: ffff88808cade080 R09: 0000000000000000 [ 86.742347][ T8955] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88808bb0d5e0 [ 86.750344][ T8955] R13: 0000000000000000 R14: 0000000047eef7b7 R15: 0000000000005e6f [ 86.758341][ T8955] ? vprintk_func+0x86/0x189 [ 86.762944][ T8955] hsr_forward_skb+0x138b/0x1d30 [ 86.767896][ T8955] hsr_dev_xmit+0x72/0xa0 [ 86.772255][ T8955] dev_hard_start_xmit+0x18a/0x950 [ 86.777397][ T8955] __dev_queue_xmit+0x2a8e/0x36b0 [ 86.782435][ T8955] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 86.787729][ T8955] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 86.793462][ T8955] ? _copy_from_iter+0x2e0/0xbf0 [ 86.798409][ T8955] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 86.804692][ T8955] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 86.811053][ T8955] ? packet_parse_headers.isra.0+0x350/0x4a0 [ 86.817043][ T8955] ? packet_parse_headers.isra.0+0x12c/0x4a0 [ 86.823040][ T8955] ? packet_mm_open+0xc0/0xc0 [ 86.827769][ T8955] dev_queue_xmit+0x18/0x20 [ 86.832295][ T8955] ? dev_queue_xmit+0x18/0x20 [ 86.836974][ T8955] packet_sendmsg+0x22d4/0x5f90 [ 86.841835][ T8955] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 86.847574][ T8955] ? rw_copy_check_uvector+0x2a6/0x330 [ 86.853043][ T8955] ? __might_sleep+0x10/0x190 [ 86.857729][ T8955] ? packet_notifier+0x840/0x840 [ 86.862687][ T8955] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 86.868686][ T8955] ? apparmor_socket_sendmsg+0x2a/0x30 [ 86.874195][ T8955] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 86.880445][ T8955] ? security_socket_sendmsg+0x8d/0xc0 [ 86.885917][ T8955] ? packet_notifier+0x840/0x840 [ 86.890879][ T8955] sock_sendmsg+0xd7/0x130 [ 86.895574][ T8955] ___sys_sendmsg+0x3e2/0x920 [ 86.900362][ T8955] ? copy_msghdr_from_user+0x430/0x430 [ 86.905834][ T8955] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 86.912079][ T8955] ? kasan_check_read+0x11/0x20 [ 86.916950][ T8955] ? __fget+0x381/0x550 [ 86.921107][ T8955] ? ksys_dup3+0x3e0/0x3e0 [ 86.925522][ T8955] ? __fget_light+0x1a9/0x230 [ 86.930194][ T8955] ? __fdget+0x1b/0x20 [ 86.934295][ T8955] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 86.940555][ T8955] ? sockfd_lookup_light+0xcb/0x180 [ 86.945792][ T8955] __sys_sendmmsg+0x1bf/0x4d0 [ 86.950497][ T8955] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 86.955527][ T8955] ? _copy_to_user+0xc9/0x120 [ 86.960294][ T8955] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 86.966555][ T8955] ? put_timespec64+0xda/0x140 [ 86.971323][ T8955] ? nsecs_to_jiffies+0x30/0x30 [ 86.976181][ T8955] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 86.981675][ T8955] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 86.987193][ T8955] ? do_syscall_64+0x26/0x680 [ 86.991902][ T8955] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 86.997990][ T8955] ? do_syscall_64+0x26/0x680 [ 87.002696][ T8955] __x64_sys_sendmmsg+0x9d/0x100 [ 87.007693][ T8955] do_syscall_64+0xfd/0x680 [ 87.012257][ T8955] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 87.018169][ T8955] RIP: 0033:0x459519 [ 87.022063][ T8955] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 87.041687][ T8955] RSP: 002b:00007fc40a611c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 87.050157][ T8955] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000459519 [ 87.058122][ T8955] RDX: 0000000000000001 RSI: 0000000020004e80 RDI: 0000000000000003 [ 87.066091][ T8955] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 87.074081][ T8955] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc40a6126d4 [ 87.082052][ T8955] R13: 00000000004c6af9 R14: 00000000004dbd80 R15: 00000000ffffffff [ 87.091660][ T8955] Kernel Offset: disabled [ 87.096109][ T8955] Rebooting in 86400 seconds..