[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 62.908401][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 62.908411][ T26] audit: type=1800 audit(1567362874.782:29): pid=9605 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 62.934774][ T26] audit: type=1800 audit(1567362874.782:30): pid=9605 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.12' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 79.831541][ T9754] Started in network mode [ 79.836065][ T9754] Own node identity ff030000000000000000000000000001, cluster identity 4711 [ 79.844950][ T9754] BUG: using smp_processor_id() in preemptible [00000000] code: syz-executor525/9754 [ 79.854469][ T9754] caller is dst_cache_get+0x3d/0xb0 [ 79.859650][ T9754] CPU: 1 PID: 9754 Comm: syz-executor525 Not tainted 5.3.0-rc6+ #122 [ 79.867693][ T9754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 79.877734][ T9754] Call Trace: [ 79.881019][ T9754] dump_stack+0x172/0x1f0 [ 79.885345][ T9754] debug_smp_processor_id.cold+0x87/0x9d [ 79.890955][ T9754] dst_cache_get+0x3d/0xb0 [ 79.895348][ T9754] tipc_udp_xmit.isra.0+0xc4/0xb80 [ 79.900563][ T9754] ? tipc_udp_addr2str+0x170/0x170 [ 79.905669][ T9754] ? lock_downgrade+0x920/0x920 [ 79.910507][ T9754] ? memcpy+0x46/0x50 [ 79.914491][ T9754] ? __copy_skb_header+0x2e8/0x550 [ 79.919640][ T9754] ? bearer_get+0x16e/0x350 [ 79.924137][ T9754] ? __kasan_check_read+0x11/0x20 [ 79.929159][ T9754] ? mark_held_locks+0xf0/0xf0 [ 79.933912][ T9754] ? lock_downgrade+0x920/0x920 [ 79.938742][ T9754] tipc_udp_send_msg+0x3ea/0x490 [ 79.943671][ T9754] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 79.949942][ T9754] tipc_bearer_xmit_skb+0x17e/0x370 [ 79.955124][ T9754] tipc_enable_bearer+0xacf/0xd30 [ 79.960138][ T9754] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 79.966025][ T9754] ? tipc_bearer_xmit_skb+0x370/0x370 [ 79.971377][ T9754] ? nla_memcpy+0xb0/0xb0 [ 79.975700][ T9754] __tipc_nl_bearer_enable+0x2de/0x3a0 [ 79.981146][ T9754] ? __tipc_nl_bearer_enable+0x2de/0x3a0 [ 79.986860][ T9754] ? tipc_nl_bearer_disable+0x40/0x40 [ 79.992339][ T9754] ? nla_memcpy+0xb0/0xb0 [ 79.996653][ T9754] ? lock_acquire+0x190/0x410 [ 80.001309][ T9754] tipc_nl_bearer_enable+0x23/0x40 [ 80.006399][ T9754] genl_family_rcv_msg+0x74b/0xf90 [ 80.011556][ T9754] ? genl_unregister_family+0x7b0/0x7b0 [ 80.017091][ T9754] ? __alloc_skb+0x10b/0x5e0 [ 80.021673][ T9754] ? netlink_sendmsg+0x972/0xd60 [ 80.026600][ T9754] ? sock_sendmsg+0xd7/0x130 [ 80.031181][ T9754] ? ___sys_sendmsg+0x803/0x920 [ 80.036009][ T9754] ? __ia32_compat_sys_sendmsg+0x7a/0xb0 [ 80.041630][ T9754] ? __netlink_lookup+0x3fa/0x7b0 [ 80.046690][ T9754] ? __kasan_check_read+0x11/0x20 [ 80.051758][ T9754] genl_rcv_msg+0xca/0x170 [ 80.056156][ T9754] netlink_rcv_skb+0x177/0x450 [ 80.060907][ T9754] ? genl_family_rcv_msg+0xf90/0xf90 [ 80.066175][ T9754] ? netlink_ack+0xb30/0xb30 [ 80.070750][ T9754] ? __kasan_check_write+0x14/0x20 [ 80.075853][ T9754] ? netlink_deliver_tap+0x254/0xbf0 [ 80.081115][ T9754] genl_rcv+0x29/0x40 [ 80.085087][ T9754] netlink_unicast+0x531/0x710 [ 80.089842][ T9754] ? netlink_attachskb+0x7c0/0x7c0 [ 80.094935][ T9754] ? _copy_from_iter_full+0x25d/0x8a0 [ 80.100334][ T9754] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 80.106048][ T9754] ? __check_object_size+0x3d/0x437 [ 80.111234][ T9754] netlink_sendmsg+0x8a5/0xd60 [ 80.115992][ T9754] ? netlink_unicast+0x710/0x710 [ 80.120967][ T9754] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 80.126498][ T9754] ? apparmor_socket_sendmsg+0x2a/0x30 [ 80.131986][ T9754] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 80.138210][ T9754] ? security_socket_sendmsg+0x8d/0xc0 [ 80.143649][ T9754] ? netlink_unicast+0x710/0x710 [ 80.148656][ T9754] sock_sendmsg+0xd7/0x130 [ 80.153079][ T9754] ___sys_sendmsg+0x803/0x920 [ 80.157739][ T9754] ? copy_msghdr_from_user+0x440/0x440 [ 80.163183][ T9754] ? __kasan_check_write+0x14/0x20 [ 80.168271][ T9754] ? lock_downgrade+0x920/0x920 [ 80.173118][ T9754] ? debug_object_active_state+0x105/0x350 [ 80.178959][ T9754] ? trace_hardirqs_on+0x67/0x240 [ 80.183969][ T9754] ? __kasan_check_read+0x11/0x20 [ 80.188975][ T9754] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 80.194781][ T9754] ? debug_object_active_state+0x28a/0x350 [ 80.200583][ T9754] ? debug_object_deactivate+0x320/0x320 [ 80.206199][ T9754] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 80.212428][ T9754] ? __fget_light+0x1a9/0x230 [ 80.217085][ T9754] ? __fdget+0x1b/0x20 [ 80.221136][ T9754] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 80.227357][ T9754] __sys_sendmsg+0x105/0x1d0 [ 80.231944][ T9754] ? __sys_sendmsg_sock+0xd0/0xd0 [ 80.236951][ T9754] ? task_work_run+0x63/0x1c0 [ 80.241701][ T9754] ? switch_fpu_return+0x1fa/0x4f0 [ 80.246879][ T9754] ? kernel_fpu_begin+0x2f0/0x2f0 [ 80.251895][ T9754] ? entry_SYSENTER_compat+0x68/0x7f [ 80.257175][ T9754] __ia32_compat_sys_sendmsg+0x7a/0xb0 [ 80.262620][ T9754] do_fast_syscall_32+0x27b/0xdb3 [ 80.267624][ T9754] entry_SYSENTER_compat+0x70/0x7f [ 80.272831][ T9754] RIP: 0023:0xf7f46a29 [ 80.277029][ T9754] Code: b8 80 96 98 00 eb cc 8b 04 24 c3 8b 1c 24 c3 8b 34 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 80.296714][ T9754] RSP: 002b:00000000ffee64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000172 [ 80.305124][ T9754] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000000 [ 80.313081][ T9754] RDX: 0000000000000000 RSI: 00000000080ef080 RDI: 00000000ffee6510 [ 80.321104][ T9754] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 80.329064][ T9754] R10: 0000000000000000 R11: 0000