[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 66.887570][ T24] audit: type=1800 audit(1561780916.425:25): pid=8793 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 66.931490][ T24] audit: type=1800 audit(1561780916.425:26): pid=8793 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 66.976998][ T24] audit: type=1800 audit(1561780916.425:27): pid=8793 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.219' (ECDSA) to the list of known hosts. 2019/06/29 04:02:14 parsed 1 programs 2019/06/29 04:02:16 executed programs: 0 syzkaller login: [ 87.031759][ T8962] IPVS: ftp: loaded support on port[0] = 21 [ 87.098605][ T8962] chnl_net:caif_netlink_parms(): no params data found [ 87.128841][ T8962] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.136546][ T8962] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.144834][ T8962] device bridge_slave_0 entered promiscuous mode [ 87.153675][ T8962] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.160870][ T8962] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.170646][ T8962] device bridge_slave_1 entered promiscuous mode [ 87.188648][ T8962] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 87.198815][ T8962] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 87.218104][ T8962] team0: Port device team_slave_0 added [ 87.225438][ T8962] team0: Port device team_slave_1 added [ 87.303356][ T8962] device hsr_slave_0 entered promiscuous mode [ 87.411909][ T8962] device hsr_slave_1 entered promiscuous mode [ 87.480023][ T8962] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.487350][ T8962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.495228][ T8962] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.502354][ T8962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.538562][ T8962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.552271][ T3321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.562971][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.571013][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.579740][ T3321] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 87.593060][ T8962] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.603573][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.612663][ T3078] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.619715][ T3078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.643428][ T3321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.652258][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.659313][ T3321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.667746][ T3321] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.676364][ T3321] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.685484][ T3321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.694400][ T3321] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.705335][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.716192][ T8962] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.735498][ T8962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.873081][ T8973] ------------[ cut here ]------------ [ 87.878785][ T8973] hsr_addr_subst_dest: Unknown node [ 87.884672][ T8973] WARNING: CPU: 1 PID: 8973 at net/hsr/hsr_framereg.c:294 hsr_addr_subst_dest+0x382/0x460 [ 87.894657][ T8973] Kernel panic - not syncing: panic_on_warn set ... [ 87.901243][ T8973] CPU: 1 PID: 8973 Comm: syz-executor.0 Not tainted 5.2.0-rc6+ #62 [ 87.909122][ T8973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 87.919353][ T8973] Call Trace: [ 87.922663][ T8973] dump_stack+0x172/0x1f0 [ 87.927018][ T8973] ? hsr_addr_subst_dest+0x320/0x460 [ 87.932328][ T8973] panic+0x2cb/0x744 [ 87.936213][ T8973] ? __warn_printk+0xf3/0xf3 [ 87.940796][ T8973] ? hsr_addr_subst_dest+0x382/0x460 [ 87.946082][ T8973] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 87.952377][ T8973] ? __warn.cold+0x5/0x4d [ 87.956792][ T8973] ? __warn+0xe8/0x1d0 [ 87.960864][ T8973] ? hsr_addr_subst_dest+0x382/0x460 [ 87.966463][ T8973] __warn.cold+0x20/0x4d [ 87.970872][ T8973] ? vprintk_emit+0x1ea/0x700 [ 87.975702][ T8973] ? hsr_addr_subst_dest+0x382/0x460 [ 87.981258][ T8973] report_bug+0x263/0x2b0 [ 87.985594][ T8973] do_error_trap+0x11b/0x200 [ 87.990195][ T8973] do_invalid_op+0x37/0x50 [ 87.994638][ T8973] ? hsr_addr_subst_dest+0x382/0x460 [ 88.000149][ T8973] invalid_op+0x14/0x20 [ 88.004299][ T8973] RIP: 0010:hsr_addr_subst_dest+0x382/0x460 [ 88.010179][ T8973] Code: 89 de e8 11 f2 5d fa 84 db 75 d3 e8 c8 f0 5d fa 48 c7 c6 60 9f 21 88 48 c7 c7 20 9f 21 88 c6 05 86 fb 69 02 01 e8 cc 29 30 fa <0f> 0b eb b0 e8 a5 f0 5d fa 0f b6 1d 72 fb 69 02 31 ff 89 de e8 d5 [ 88.043284][ T8973] RSP: 0018:ffff88809075f470 EFLAGS: 00010286 [ 88.049384][ T8973] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 88.057355][ T8973] RDX: 0000000000000000 RSI: ffffffff815adb06 RDI: ffffed10120ebe80 [ 88.065451][ T8973] RBP: ffff88809075f4b0 R08: ffff888095032080 R09: 0000000000000000 [ 88.073511][ T8973] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880848c34e0 [ 88.081595][ T8973] R13: 0000000000000000 R14: 0000000047eef7b7 R15: 0000000000005e6f [ 88.089680][ T8973] ? vprintk_func+0x86/0x189 [ 88.094265][ T8973] hsr_forward_skb+0x138b/0x1d30 [ 88.099253][ T8973] hsr_dev_xmit+0x72/0xa0 [ 88.103850][ T8973] dev_hard_start_xmit+0x18a/0x950 [ 88.108962][ T8973] __dev_queue_xmit+0x2a8e/0x36b0 [ 88.113991][ T8973] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 88.119264][ T8973] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 88.125400][ T8973] ? _copy_from_iter+0x2e0/0xbf0 [ 88.130496][ T8973] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 88.136785][ T8973] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 88.143076][ T8973] ? packet_parse_headers.isra.0+0x350/0x4a0 [ 88.149056][ T8973] ? packet_parse_headers.isra.0+0x12c/0x4a0 [ 88.155030][ T8973] ? packet_mm_open+0xc0/0xc0 [ 88.159797][ T8973] dev_queue_xmit+0x18/0x20 [ 88.164424][ T8973] ? dev_queue_xmit+0x18/0x20 [ 88.169195][ T8973] packet_sendmsg+0x22d4/0x5f90 [ 88.174044][ T8973] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 88.179896][ T8973] ? rw_copy_check_uvector+0x2a6/0x330 [ 88.185408][ T8973] ? __might_sleep+0x10/0x190 [ 88.190084][ T8973] ? packet_notifier+0x840/0x840 [ 88.195022][ T8973] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 88.200561][ T8973] ? apparmor_socket_sendmsg+0x2a/0x30 [ 88.206022][ T8973] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 88.212261][ T8973] ? security_socket_sendmsg+0x8d/0xc0 [ 88.217714][ T8973] ? packet_notifier+0x840/0x840 [ 88.222643][ T8973] sock_sendmsg+0xd7/0x130 [ 88.227166][ T8973] ___sys_sendmsg+0x3e2/0x920 [ 88.231838][ T8973] ? copy_msghdr_from_user+0x430/0x430 [ 88.237295][ T8973] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 88.243656][ T8973] ? kasan_check_read+0x11/0x20 [ 88.248520][ T8973] ? __fget+0x381/0x550 [ 88.252680][ T8973] ? ksys_dup3+0x3e0/0x3e0 [ 88.257103][ T8973] ? __fget_light+0x1a9/0x230 [ 88.261893][ T8973] ? __fdget+0x1b/0x20 [ 88.265964][ T8973] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 88.272267][ T8973] ? sockfd_lookup_light+0xcb/0x180 [ 88.277460][ T8973] __sys_sendmmsg+0x1bf/0x4d0 [ 88.282264][ T8973] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 88.287284][ T8973] ? _copy_to_user+0xc9/0x120 [ 88.291965][ T8973] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 88.298198][ T8973] ? put_timespec64+0xda/0x140 [ 88.302953][ T8973] ? nsecs_to_jiffies+0x30/0x30 [ 88.307907][ T8973] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 88.313593][ T8973] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 88.319051][ T8973] ? do_syscall_64+0x26/0x680 [ 88.323729][ T8973] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 88.329787][ T8973] ? do_syscall_64+0x26/0x680 [ 88.334456][ T8973] __x64_sys_sendmmsg+0x9d/0x100 [ 88.339398][ T8973] do_syscall_64+0xfd/0x680 [ 88.343891][ T8973] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 88.349764][ T8973] RIP: 0033:0x459519 [ 88.353638][ T8973] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 88.373564][ T8973] RSP: 002b:00007f8222964c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 88.381974][ T8973] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000459519 [ 88.390024][ T8973] RDX: 0000000000000001 RSI: 0000000020004e80 RDI: 0000000000000003 [ 88.398073][ T8973] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 88.406117][ T8973] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82229656d4 [ 88.414210][ T8973] R13: 00000000004c6af9 R14: 00000000004dbd80 R15: 00000000ffffffff [ 88.423642][ T8973] Kernel Offset: disabled [ 88.428017][ T8973] Rebooting in 86400 seconds..