[ 75.147674][ T27] audit: type=1800 audit(1565452430.294:29): pid=10410 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.89' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 82.499599][T10562] Started in network mode [ 82.504283][T10562] Own node identity ff030000000000000000000000000001, cluster identity 4711 [ 82.513130][T10562] check_preemption_disabled: 1 callbacks suppressed [ 82.513138][T10562] BUG: using smp_processor_id() in preemptible [00000000] code: syz-executor175/10562 [ 82.529432][T10562] caller is dst_cache_get+0x3d/0xb0 [ 82.534755][T10562] CPU: 1 PID: 10562 Comm: syz-executor175 Not tainted 5.3.0-rc3+ #123 [ 82.549435][T10562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 82.559481][T10562] Call Trace: [ 82.562771][T10562] dump_stack+0x172/0x1f0 [ 82.567096][T10562] debug_smp_processor_id.cold+0x87/0x9d [ 82.572722][T10562] dst_cache_get+0x3d/0xb0 [ 82.577185][T10562] tipc_udp_xmit.isra.0+0xc4/0xb80 [ 82.582300][T10562] ? tipc_udp_addr2str+0x170/0x170 [ 82.587407][T10562] ? lock_downgrade+0x920/0x920 [ 82.592254][T10562] ? memcpy+0x46/0x50 [ 82.596241][T10562] ? __copy_skb_header+0x2e8/0x550 [ 82.601347][T10562] ? bearer_get+0x16e/0x350 [ 82.605845][T10562] ? __kasan_check_read+0x11/0x20 [ 82.610862][T10562] ? mark_held_locks+0xf0/0xf0 [ 82.615646][T10562] ? lock_downgrade+0x920/0x920 [ 82.620491][T10562] tipc_udp_send_msg+0x3ea/0x490 [ 82.625423][T10562] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 82.631659][T10562] tipc_bearer_xmit_skb+0x17e/0x370 [ 82.636851][T10562] tipc_enable_bearer+0xacf/0xd30 [ 82.641870][T10562] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 82.647779][T10562] ? tipc_bearer_xmit_skb+0x370/0x370 [ 82.653163][T10562] ? nla_memcpy+0xb0/0xb0 [ 82.657487][T10562] __tipc_nl_bearer_enable+0x2de/0x3a0 [ 82.662942][T10562] ? __tipc_nl_bearer_enable+0x2de/0x3a0 [ 82.668568][T10562] ? tipc_nl_bearer_disable+0x40/0x40 [ 82.673944][T10562] ? nla_memcpy+0xb0/0xb0 [ 82.678261][T10562] ? lock_acquire+0x190/0x410 [ 82.682928][T10562] tipc_nl_bearer_enable+0x23/0x40 [ 82.688040][T10562] genl_family_rcv_msg+0x74b/0xf90 [ 82.693175][T10562] ? genl_unregister_family+0x7b0/0x7b0 [ 82.698814][T10562] ? __alloc_skb+0x10b/0x5e0 [ 82.703405][T10562] ? netlink_sendmsg+0x972/0xd60 [ 82.708368][T10562] ? sock_sendmsg+0xd7/0x130 [ 82.712993][T10562] ? ___sys_sendmsg+0x803/0x920 [ 82.717860][T10562] ? __x64_sys_sendmsg+0x78/0xb0 [ 82.722796][T10562] ? __netlink_lookup+0x3fa/0x7b0 [ 82.727822][T10562] ? __kasan_check_read+0x11/0x20 [ 82.732846][T10562] genl_rcv_msg+0xca/0x170 [ 82.737282][T10562] netlink_rcv_skb+0x177/0x450 [ 82.742044][T10562] ? genl_family_rcv_msg+0xf90/0xf90 [ 82.747327][T10562] ? netlink_ack+0xb30/0xb30 [ 82.751911][T10562] ? __kasan_check_write+0x14/0x20 [ 82.757041][T10562] ? netlink_deliver_tap+0x254/0xbf0 [ 82.762412][T10562] genl_rcv+0x29/0x40 [ 82.766393][T10562] netlink_unicast+0x531/0x710 [ 82.771156][T10562] ? netlink_attachskb+0x7c0/0x7c0 [ 82.776294][T10562] ? _copy_from_iter_full+0x25d/0x8a0 [ 82.781668][T10562] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 82.787415][T10562] ? __check_object_size+0x3d/0x43c [ 82.792612][T10562] netlink_sendmsg+0x8a5/0xd60 [ 82.797380][T10562] ? netlink_unicast+0x710/0x710 [ 82.802313][T10562] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 82.807861][T10562] ? apparmor_socket_sendmsg+0x2a/0x30 [ 82.813323][T10562] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 82.819575][T10562] ? security_socket_sendmsg+0x8d/0xc0 [ 82.825035][T10562] ? netlink_unicast+0x710/0x710 [ 82.829976][T10562] sock_sendmsg+0xd7/0x130 [ 82.834407][T10562] ___sys_sendmsg+0x803/0x920 [ 82.839085][T10562] ? copy_msghdr_from_user+0x440/0x440 [ 82.844545][T10562] ? __kasan_check_write+0x14/0x20 [ 82.849655][T10562] ? lock_downgrade+0x920/0x920 [ 82.854505][T10562] ? debug_object_active_state+0x105/0x350 [ 82.860308][T10562] ? trace_hardirqs_on+0x67/0x240 [ 82.865340][T10562] ? __kasan_check_read+0x11/0x20 [ 82.870376][T10562] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 82.876185][T10562] ? debug_object_active_state+0x28a/0x350 [ 82.881997][T10562] ? debug_object_deactivate+0x320/0x320 [ 82.887633][T10562] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 82.893875][T10562] ? __fget_light+0x1a9/0x230 [ 82.898662][T10562] ? __fdget+0x1b/0x20 [ 82.902771][T10562] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 82.909022][T10562] __sys_sendmsg+0x105/0x1d0 [ 82.913617][T10562] ? __sys_sendmsg_sock+0xd0/0xd0 [ 82.918633][T10562] ? task_work_run+0x63/0x1c0 [ 82.923354][T10562] ? switch_fpu_return+0x1fa/0x4f0 [ 82.928567][T10562] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 82.934639][T10562] __x64_sys_sendmsg+0x78/0xb0 [ 82.939437][T10562] do_syscall_64+0xfd/0x6a0 [ 82.943940][T10562] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 82.949850][T10562] RIP: 0033:0x444359 [ 82.953736][T10562] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 1b d8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 82.973337][T10562] RSP: 002b:00007fff8a812918 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 82.981753][T10562] RAX: ffffffffffffffda RBX: 00000000004002e0 RCX: 0000000000444359 [ 82.989742][T10562] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 82.997710][T10562] RBP: 00000000006ce018 R08