[ 61.320779][ T26] audit: type=1800 audit(1562288436.531:24): pid=8815 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="sudo" dev="sda1" ino=2454 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 62.076803][ T26] audit: type=1800 audit(1562288437.421:25): pid=8815 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 62.122688][ T26] audit: type=1800 audit(1562288437.421:26): pid=8815 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.51' (ECDSA) to the list of known hosts. 2019/07/05 01:00:47 parsed 1 programs 2019/07/05 01:00:49 executed programs: 0 syzkaller login: [ 73.735427][ T8986] IPVS: ftp: loaded support on port[0] = 21 [ 73.802121][ T8986] chnl_net:caif_netlink_parms(): no params data found [ 73.831096][ T8986] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.839334][ T8986] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.847214][ T8986] device bridge_slave_0 entered promiscuous mode [ 73.855287][ T8986] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.862381][ T8986] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.870247][ T8986] device bridge_slave_1 entered promiscuous mode [ 73.887280][ T8986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.898057][ T8986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.918341][ T8986] team0: Port device team_slave_0 added [ 73.926186][ T8986] team0: Port device team_slave_1 added [ 73.985166][ T8986] device hsr_slave_0 entered promiscuous mode [ 74.042961][ T8986] device hsr_slave_1 entered promiscuous mode [ 74.100907][ T8986] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.108105][ T8986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.116074][ T8986] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.123149][ T8986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.157612][ T8986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.171079][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.191494][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.199979][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.209145][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 74.220433][ T8986] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.230578][ T3494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.239305][ T3494] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.246398][ T3494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.264059][ T3494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.272440][ T3494] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.279569][ T3494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.291169][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.300367][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.311591][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.327237][ T8986] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.339169][ T8986] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.351736][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.360439][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.369810][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.387917][ T8986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.505119][ T8998] ------------[ cut here ]------------ [ 74.510666][ T8998] hsr_addr_subst_dest: Unknown node [ 74.516410][ T8998] WARNING: CPU: 1 PID: 8998 at net/hsr/hsr_framereg.c:294 hsr_addr_subst_dest+0x382/0x460 [ 74.526292][ T8998] Kernel panic - not syncing: panic_on_warn set ... [ 74.532870][ T8998] CPU: 1 PID: 8998 Comm: syz-executor.0 Not tainted 5.2.0-rc7-next-20190703 #28 [ 74.541875][ T8998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 74.551916][ T8998] Call Trace: [ 74.555196][ T8998] dump_stack+0x172/0x1f0 [ 74.559517][ T8998] ? hsr_addr_subst_dest+0x330/0x460 [ 74.564787][ T8998] panic+0x2dc/0x755 [ 74.568666][ T8998] ? add_taint.cold+0x16/0x16 [ 74.573333][ T8998] ? kasan_check_write+0x14/0x20 [ 74.578258][ T8998] ? __warn.cold+0x5/0x4c [ 74.582583][ T8998] ? __warn+0xe7/0x1e0 [ 74.586641][ T8998] ? hsr_addr_subst_dest+0x382/0x460 [ 74.591908][ T8998] __warn.cold+0x20/0x4c [ 74.596149][ T8998] ? vprintk_emit+0x1ea/0x700 [ 74.600829][ T8998] ? hsr_addr_subst_dest+0x382/0x460 [ 74.606102][ T8998] report_bug+0x263/0x2b0 [ 74.610417][ T8998] do_error_trap+0x11b/0x200 [ 74.615007][ T8998] do_invalid_op+0x37/0x50 [ 74.619423][ T8998] ? hsr_addr_subst_dest+0x382/0x460 [ 74.624692][ T8998] invalid_op+0x14/0x20 [ 74.628828][ T8998] RIP: 0010:hsr_addr_subst_dest+0x382/0x460 [ 74.634701][ T8998] Code: 89 de e8 c1 f5 48 fa 84 db 75 d3 e8 78 f4 48 fa 48 c7 c6 c0 2b 45 88 48 c7 c7 80 2b 45 88 c6 05 d2 48 76 02 01 e8 e6 6c 1a fa <0f> 0b eb b0 e8 55 f4 48 fa 0f b6 1d be 48 76 02 31 ff 89 de e8 85 [ 74.654312][ T8998] RSP: 0018:ffff88809794f470 EFLAGS: 00010286 [ 74.660377][ T8998] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 74.668332][ T8998] RDX: 0000000000000000 RSI: ffffffff815c0c96 RDI: ffffed1012f29e80 [ 74.676308][ T8998] RBP: ffff88809794f4b0 R08: ffff888086370080 R09: 0000000000000000 [ 74.684267][ T8998] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88809ce10fa0 [ 74.692215][ T8998] R13: 0000000000000000 R14: 0000000047eef7b7 R15: 0000000000005e6f [ 74.700183][ T8998] ? vprintk_func+0x86/0x189 [ 74.704764][ T8998] hsr_forward_skb+0x138b/0x1d30 [ 74.709690][ T8998] hsr_dev_xmit+0x72/0xa0 [ 74.714005][ T8998] dev_hard_start_xmit+0x1a3/0x9c0 [ 74.719106][ T8998] __dev_queue_xmit+0x2b15/0x3650 [ 74.724119][ T8998] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 74.729388][ T8998] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 74.735161][ T8998] ? _copy_from_iter+0x2a0/0xbe0 [ 74.740103][ T8998] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 74.746329][ T8998] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 74.752567][ T8998] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 74.758797][ T8998] ? packet_parse_headers.isra.0+0x350/0x4a0 [ 74.764766][ T8998] ? packet_parse_headers.isra.0+0x12c/0x4a0 [ 74.770732][ T8998] ? packet_release+0xcb0/0xcb0 [ 74.775569][ T8998] dev_queue_xmit+0x18/0x20 [ 74.780053][ T8998] ? dev_queue_xmit+0x18/0x20 [ 74.784719][ T8998] packet_sendmsg+0x24c1/0x6250 [ 74.789561][ T8998] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 74.795261][ T8998] ? rw_copy_check_uvector+0x2ce/0x390 [ 74.800739][ T8998] ? ___might_sleep+0x270/0x280 [ 74.805584][ T8998] ? packet_notifier+0x880/0x880 [ 74.810597][ T8998] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 74.816127][ T8998] ? apparmor_socket_sendmsg+0x2a/0x30 [ 74.821578][ T8998] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 74.827819][ T8998] ? security_socket_sendmsg+0x8d/0xc0 [ 74.833274][ T8998] ? packet_notifier+0x880/0x880 [ 74.838203][ T8998] sock_sendmsg+0xd7/0x130 [ 74.842604][ T8998] ___sys_sendmsg+0x3e2/0x920 [ 74.847282][ T8998] ? copy_msghdr_from_user+0x440/0x440 [ 74.852731][ T8998] ? lock_downgrade+0x920/0x920 [ 74.857603][ T8998] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 74.863832][ T8998] ? kasan_check_read+0x11/0x20 [ 74.868669][ T8998] ? __fget+0x384/0x560 [ 74.872827][ T8998] ? ksys_dup3+0x3e0/0x3e0 [ 74.877240][ T8998] ? __lock_acquire+0x1700/0x4c20 [ 74.882252][ T8998] ? kasan_check_read+0x11/0x20 [ 74.887082][ T8998] ? mark_lock+0xc0/0x11e0 [ 74.891482][ T8998] ? __fget_light+0x1a9/0x230 [ 74.896161][ T8998] ? __fdget+0x1b/0x20 [ 74.900231][ T8998] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 74.906473][ T8998] ? sockfd_lookup_light+0xcb/0x180 [ 74.911957][ T8998] __sys_sendmmsg+0x1bf/0x4d0 [ 74.916638][ T8998] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 74.921651][ T8998] ? _copy_to_user+0x118/0x160 [ 74.926411][ T8998] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 74.932650][ T8998] ? put_timespec64+0xda/0x140 [ 74.937394][ T8998] ? nsecs_to_jiffies+0x30/0x30 [ 74.942240][ T8998] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 74.947687][ T8998] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 74.953128][ T8998] ? do_syscall_64+0x26/0x6a0 [ 74.957792][ T8998] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 74.963844][ T8998] ? do_syscall_64+0x26/0x6a0 [ 74.968507][ T8998] __x64_sys_sendmmsg+0x9d/0x100 [ 74.973431][ T8998] do_syscall_64+0xfd/0x6a0 [ 74.977919][ T8998] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 74.983792][ T8998] RIP: 0033:0x4597c9 [ 74.987669][ T8998] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 75.007253][ T8998] RSP: 002b:00007f1acd7bfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 75.015643][ T8998] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000004597c9 [ 75.023605][ T8998] RDX: 0000000000000001 RSI: 0000000020004e80 RDI: 0000000000000003 [ 75.031555][ T8998] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 75.039526][ T8998] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1acd7c06d4 [ 75.047494][ T8998] R13: 00000000004c6df8 R14: 00000000004dc140 R15: 00000000ffffffff [ 75.056518][ T8998] Kernel Offset: disabled [ 75.060912][ T8998] Rebooting in 86400 seconds..