[ 73.366459][ T26] audit: type=1800 audit(1576835650.472:25): pid=9035 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 73.414388][ T26] audit: type=1800 audit(1576835650.472:26): pid=9035 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 73.446075][ T26] audit: type=1800 audit(1576835650.482:27): pid=9035 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [ 74.118949][ T9101] sshd (9101) used greatest stack depth: 22888 bytes left [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.142' (ECDSA) to the list of known hosts. syzkaller login: [ 84.118733][ T9188] IPVS: ftp: loaded support on port[0] = 21 [ 84.178082][ T9188] chnl_net:caif_netlink_parms(): no params data found [ 84.207421][ T9188] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.214885][ T9188] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.222539][ T9188] device bridge_slave_0 entered promiscuous mode [ 84.231315][ T9188] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.238531][ T9188] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.246785][ T9188] device bridge_slave_1 entered promiscuous mode [ 84.265508][ T9188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.275943][ T9188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.293959][ T9188] team0: Port device team_slave_0 added [ 84.301416][ T9188] team0: Port device team_slave_1 added [ 84.386834][ T9188] device hsr_slave_0 entered promiscuous mode [ 84.464930][ T9188] device hsr_slave_1 entered promiscuous mode [ 84.537926][ T9188] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.597809][ T9188] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.646665][ T9188] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.697080][ T9188] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.754354][ T9188] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.761544][ T9188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.769339][ T9188] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.776964][ T9188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.810961][ T9188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.824063][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.844230][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.863991][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.872152][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 84.884725][ T9188] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.895996][ T3377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.904334][ T3377] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.911445][ T3377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.935991][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.944300][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.951511][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.960274][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.968859][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.977206][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.985604][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.995535][ T9190] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.004288][ T9188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.020678][ T3377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.028540][ T3377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready executing program [ 85.039703][ T9188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.085412][ T9188] ------------[ cut here ]------------ [ 85.090937][ T9188] net/hsr/hsr_forward.c:354: Malformed frame (port_src hsr0) [ 85.098868][ T9188] WARNING: CPU: 1 PID: 9188 at net/hsr/hsr_forward.c:353 hsr_forward_skb+0x127b/0x1d30 [ 85.108502][ T9188] Kernel panic - not syncing: panic_on_warn set ... [ 85.115130][ T9188] CPU: 1 PID: 9188 Comm: syz-executor236 Not tainted 5.5.0-rc2-syzkaller #0 [ 85.123775][ T9188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 85.133850][ T9188] Call Trace: [ 85.137122][ T9188] dump_stack+0x197/0x210 [ 85.141431][ T9188] ? hsr_forward_skb+0x1230/0x1d30 [ 85.146539][ T9188] panic+0x2e3/0x75c [ 85.150409][ T9188] ? add_taint.cold+0x16/0x16 [ 85.155071][ T9188] ? __kasan_check_write+0x14/0x20 [ 85.160157][ T9188] ? __warn.cold+0x14/0x3e [ 85.164552][ T9188] ? __warn+0xd9/0x1cf [ 85.168599][ T9188] ? hsr_forward_skb+0x127b/0x1d30 [ 85.173689][ T9188] __warn.cold+0x2f/0x3e [ 85.177909][ T9188] ? hsr_forward_skb+0x127b/0x1d30 [ 85.182999][ T9188] report_bug+0x289/0x300 [ 85.187358][ T9188] do_error_trap+0x11b/0x200 [ 85.191927][ T9188] do_invalid_op+0x37/0x50 [ 85.196320][ T9188] ? hsr_forward_skb+0x127b/0x1d30 [ 85.201413][ T9188] invalid_op+0x23/0x30 [ 85.205545][ T9188] RIP: 0010:hsr_forward_skb+0x127b/0x1d30 [ 85.211240][ T9188] Code: fa ff ff e8 c7 bd b7 f9 4c 89 e1 ba 62 01 00 00 48 c7 c6 80 61 f5 88 48 c7 c7 c0 61 f5 88 c6 05 33 98 b7 02 01 e8 14 66 88 f9 <0f> 0b 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 80 3c 02 [ 85.230905][ T9188] RSP: 0018:ffffc90001ee78b0 EFLAGS: 00010286 [ 85.236945][ T9188] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 85.244957][ T9188] RDX: 0000000000000000 RSI: ffffffff815e8a56 RDI: fffff520003dcf08 [ 85.252915][ T9188] RBP: ffffc90001ee7960 R08: ffff888093258140 R09: 0000000000000000 [ 85.260869][ T9188] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888094c4a000 [ 85.268824][ T9188] R13: ffff88809e7fac10 R14: 000000000000ffff R15: ffff8880a8055e00 [ 85.276795][ T9188] ? vprintk_func+0x86/0x189 [ 85.281469][ T9188] ? validate_xmit_skb+0x81f/0xe50 [ 85.286571][ T9188] ? netdev_pick_tx+0x4c6/0xb00 [ 85.291409][ T9188] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 85.297112][ T9188] hsr_dev_xmit+0x7d/0xe0 [ 85.301418][ T9188] dev_direct_xmit+0x419/0x630 [ 85.306172][ T9188] ? enable_cpucache.cold+0xf/0x1e [ 85.311258][ T9188] ? validate_xmit_skb_list+0x150/0x150 [ 85.316790][ T9188] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 85.323004][ T9188] ? netdev_pick_tx+0x14e/0xb00 [ 85.327849][ T9188] packet_direct_xmit+0x1a9/0x250 [ 85.332866][ T9188] packet_sendmsg+0x260d/0x6220 [ 85.337700][ T9188] ? ___might_sleep+0x163/0x2c0 [ 85.342527][ T9188] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 85.348744][ T9188] ? aa_label_sk_perm+0x91/0xf0 [ 85.353591][ T9188] ? packet_notifier+0x880/0x880 [ 85.358510][ T9188] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 85.364032][ T9188] ? apparmor_socket_sendmsg+0x2a/0x30 [ 85.369479][ T9188] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 85.375698][ T9188] ? security_socket_sendmsg+0x8d/0xc0 [ 85.381145][ T9188] ? packet_notifier+0x880/0x880 [ 85.386072][ T9188] sock_sendmsg+0xd7/0x130 [ 85.390466][ T9188] __sys_sendto+0x262/0x380 [ 85.394961][ T9188] ? __ia32_sys_getpeername+0xb0/0xb0 [ 85.400319][ T9188] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 85.406452][ T9188] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 85.411973][ T9188] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 85.417941][ T9188] ? fd_install+0x4d/0x60 [ 85.422275][ T9188] ? __kasan_check_write+0x14/0x20 [ 85.427374][ T9188] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 85.432839][ T9188] ? do_fast_syscall_32+0xd1/0xe16 [ 85.437932][ T9188] ? entry_SYSENTER_compat+0x70/0x7f [ 85.443203][ T9188] __ia32_sys_sendto+0xdf/0x1a0 [ 85.448047][ T9188] do_fast_syscall_32+0x27b/0xe16 [ 85.453051][ T9188] entry_SYSENTER_compat+0x70/0x7f [ 85.458148][ T9188] RIP: 0023:0xf7f58a39 [ 85.462197][ T9188] Code: 00 00 00 89 d3 5b 5e 5f 5d c3 b8 80 96 98 00 eb c4 8b 04 24 c3 8b 1c 24 c3 8b 34 24 c3 8b 3c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 85.481814][ T9188] RSP: 002b:00000000ffffab4c EFLAGS: 00000282 ORIG_RAX: 0000000000000171 [ 85.490201][ T9188] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 85.498150][ T9188] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000000 [ 85.506096][ T9188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 85.514063][ T9188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 85.522033][ T9188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 85.531610][ T9188] Kernel Offset: disabled [ 85.535999][ T9188] Rebooting in 86400 seconds..