Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 39.115461] audit: type=1800 audit(1576535484.081:33): pid=7495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 39.136858] audit: type=1800 audit(1576535484.091:34): pid=7495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 41.662879] audit: type=1400 audit(1576535486.631:35): avc: denied { map } for pid=7673 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.110' (ECDSA) to the list of known hosts. [ 48.389488] audit: type=1400 audit(1576535493.361:36): avc: denied { map } for pid=7685 comm="syz-executor746" path="/root/syz-executor746210097" dev="sda1" ino=16483 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 48.409536] IPVS: ftp: loaded support on port[0] = 21 [ 48.445120] audit: type=1400 audit(1576535493.411:37): avc: denied { create } for pid=7686 comm="syz-executor746" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 48.470407] audit: type=1400 audit(1576535493.421:38): avc: denied { write } for pid=7686 comm="syz-executor746" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 48.494886] audit: type=1400 audit(1576535493.421:39): avc: denied { read } for pid=7686 comm="syz-executor746" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 48.544023] chnl_net:caif_netlink_parms(): no params data found [ 48.577402] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.584047] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.591397] device bridge_slave_0 entered promiscuous mode [ 48.599685] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.606351] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.614691] device bridge_slave_1 entered promiscuous mode [ 48.630895] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 48.640569] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 48.656676] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 48.664404] team0: Port device team_slave_0 added [ 48.670224] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 48.677525] team0: Port device team_slave_1 added [ 48.682920] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.691172] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.778565] device hsr_slave_0 entered promiscuous mode [ 48.825606] device hsr_slave_1 entered promiscuous mode [ 48.866178] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 48.873376] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 48.888132] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.894575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.901582] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.908006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.940730] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 48.948228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.957354] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 48.966487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.985410] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.992708] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.000770] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 49.011263] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 49.017736] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.038045] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.045908] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.052269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.076612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.084296] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.090719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.097971] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.105943] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.113577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.121228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.130063] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.139326] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 49.145529] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.159090] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 49.167439] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.174293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready executing program [ 49.188254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.199895] ------------[ cut here ]------------ [ 49.204790] hsr_addr_subst_dest: Unknown node [ 49.209875] WARNING: CPU: 1 PID: 7686 at net/hsr/hsr_framereg.c:313 hsr_addr_subst_dest+0x382/0x460 [ 49.219267] Kernel panic - not syncing: panic_on_warn set ... [ 49.219267] [ 49.226627] CPU: 1 PID: 7686 Comm: syz-executor746 Not tainted 4.19.89-syzkaller #0 [ 49.234407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 49.243846] Call Trace: [ 49.246445] dump_stack+0x197/0x210 [ 49.250115] panic+0x26a/0x50e [ 49.253306] ? __warn_printk+0xf3/0xf3 [ 49.257221] ? hsr_addr_subst_dest+0x382/0x460 [ 49.261796] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 49.267334] ? __warn.cold+0x5/0x53 [ 49.270961] ? __warn+0xe8/0x1d0 [ 49.274327] ? hsr_addr_subst_dest+0x382/0x460 [ 49.278948] __warn.cold+0x20/0x53 [ 49.282477] ? hsr_addr_subst_dest+0x382/0x460 [ 49.287045] report_bug+0x263/0x2b0 [ 49.290666] do_error_trap+0x204/0x360 [ 49.294542] ? math_error+0x340/0x340 [ 49.298355] ? vprintk_emit+0x1ce/0x6d0 [ 49.302366] ? error_entry+0x7c/0xe0 [ 49.306105] ? trace_hardirqs_off_caller+0x65/0x220 [ 49.311131] ? vprintk_default+0x28/0x30 [ 49.315211] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 49.320072] do_invalid_op+0x1b/0x20 [ 49.323790] invalid_op+0x14/0x20 [ 49.327323] RIP: 0010:hsr_addr_subst_dest+0x382/0x460 [ 49.332511] Code: 89 de e8 91 77 29 fa 84 db 75 d3 e8 48 76 29 fa 48 c7 c6 80 1d 68 88 48 c7 c7 40 1d 68 88 c6 05 02 c8 84 02 01 e8 4c 07 fd f9 <0f> 0b eb b0 e8 25 76 29 fa 0f b6 1d ee c7 84 02 31 ff 89 de e8 55 [ 49.351412] RSP: 0018:ffff888098cf7600 EFLAGS: 00010282 [ 49.356759] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 49.364036] RDX: 0000000000000000 RSI: ffffffff8155bac6 RDI: ffffed101319eeb2 [ 49.371316] RBP: ffff888098cf7640 R08: ffff888096d78540 R09: ffff888096d78de0 [ 49.378581] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88808d28ab60 [ 49.385847] R13: 0000000000000000 R14: 000000000fcafdff R15: 0000000000000000 [ 49.393136] ? vprintk_func+0x86/0x189 [ 49.397024] hsr_forward_skb+0x1276/0x1c10 [ 49.401265] hsr_dev_xmit+0x72/0xa0 [ 49.404904] dev_hard_start_xmit+0x1a5/0x970 [ 49.409317] ? check_preemption_disabled+0x48/0x290 [ 49.414349] __dev_queue_xmit+0x2704/0x2fe0 [ 49.418690] ? __might_fault+0x12b/0x1e0 [ 49.422753] ? netdev_pick_tx+0x300/0x300 [ 49.426890] ? lock_downgrade+0x880/0x880 [ 49.431049] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 49.436683] ? iov_iter_advance+0x261/0xe30 [ 49.441112] dev_queue_xmit+0x18/0x20 [ 49.444910] ? dev_queue_xmit+0x18/0x20 [ 49.448925] pppoe_sendmsg+0x654/0x7e0 [ 49.452804] ? ether_setup+0x2d0/0x2d0 [ 49.456723] ? pppoe_getname+0x120/0x120 [ 49.460786] ? selinux_socket_sendmsg+0x36/0x40 [ 49.465620] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 49.471148] ? security_socket_sendmsg+0x8d/0xc0 [ 49.475893] ? pppoe_getname+0x120/0x120 [ 49.479951] sock_sendmsg+0xd7/0x130 [ 49.483661] ___sys_sendmsg+0x3e2/0x920 [ 49.487627] ? copy_msghdr_from_user+0x430/0x430 [ 49.492377] ? mark_held_locks+0x100/0x100 [ 49.496604] ? reacquire_held_locks+0xb7/0x3e0 [ 49.501181] ? release_sock+0x156/0x1c0 [ 49.505142] ? find_held_lock+0x35/0x130 [ 49.509194] ? release_sock+0x156/0x1c0 [ 49.513156] ? __local_bh_enable_ip+0x15a/0x270 [ 49.517841] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 49.523382] ? __fget_light+0x1a9/0x230 [ 49.527351] ? __fdget+0x1b/0x20 [ 49.530708] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 49.536281] ? sockfd_lookup_light+0xcb/0x180 [ 49.540896] __sys_sendmmsg+0x1bf/0x4e0 [ 49.544866] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 49.549181] ? __sys_connect+0x12d/0x330 [ 49.553230] ? __ia32_sys_accept+0xb0/0xb0 [ 49.557500] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 49.563044] ? __do_page_fault+0x484/0xe90 [ 49.567284] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 49.572038] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 49.576789] ? do_syscall_64+0x26/0x620 [ 49.580752] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 49.586123] ? do_syscall_64+0x26/0x620 [ 49.590113] __x64_sys_sendmmsg+0x9d/0x100 [ 49.594352] do_syscall_64+0xfd/0x620 [ 49.598149] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 49.603352] RIP: 0033:0x441fa9 [ 49.606532] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b 10 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 49.625434] RSP: 002b:00007ffe6ff31e28 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 49.633129] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000441fa9 [ 49.640461] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000003 [ 49.647755] RBP: 0000000000000004 R08: 0000000000000025 R09: 0000000000000025 [ 49.655011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 49.662280] R13: 0000000000403520 R14: 0000000000000000 R15: 0000000000000000 [ 49.671203] Kernel Offset: disabled [ 49.674922] Rebooting in 86400 seconds..