[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 57.770092][ T26] audit: type=1800 audit(1571178771.516:25): pid=8595 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 57.791600][ T26] audit: type=1800 audit(1571178771.526:26): pid=8595 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 57.829828][ T26] audit: type=1800 audit(1571178771.526:27): pid=8595 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.207' (ECDSA) to the list of known hosts. syzkaller login: [ 1063.211868][ T8751] IPVS: ftp: loaded support on port[0] = 21 [ 1063.266242][ T8751] chnl_net:caif_netlink_parms(): no params data found [ 1063.294726][ T8751] bridge0: port 1(bridge_slave_0) entered blocking state [ 1063.302701][ T8751] bridge0: port 1(bridge_slave_0) entered disabled state [ 1063.311083][ T8751] device bridge_slave_0 entered promiscuous mode [ 1063.319273][ T8751] bridge0: port 2(bridge_slave_1) entered blocking state [ 1063.326704][ T8751] bridge0: port 2(bridge_slave_1) entered disabled state [ 1063.334880][ T8751] device bridge_slave_1 entered promiscuous mode [ 1063.351503][ T8751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1063.362039][ T8751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1063.380877][ T8751] team0: Port device team_slave_0 added [ 1063.388100][ T8751] team0: Port device team_slave_1 added [ 1063.441988][ T8751] device hsr_slave_0 entered promiscuous mode [ 1063.509910][ T8751] device hsr_slave_1 entered promiscuous mode [ 1063.587702][ T8751] bridge0: port 2(bridge_slave_1) entered blocking state [ 1063.595002][ T8751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1063.602843][ T8751] bridge0: port 1(bridge_slave_0) entered blocking state [ 1063.610150][ T8751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1063.643841][ T8751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1063.655830][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1063.665952][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1063.674223][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1063.682447][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1063.694566][ T8751] 8021q: adding VLAN 0 to HW filter on device team0 [ 1063.704791][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1063.713984][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 1063.721079][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1063.732280][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1063.740677][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1063.747735][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1063.771424][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1063.780726][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1063.789376][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1063.798015][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1063.807041][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1063.816232][ T8751] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1063.834553][ T8751] 8021q: adding VLAN 0 to HW filter on device batadv0 executing program [ 1063.929977][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1063.936308][ C0] protocol 88fb is buggy, dev hsr_slave_1 executing program [ 1064.049708][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1064.055945][ C0] protocol 88fb is buggy, dev hsr_slave_1 executing program [ 1064.169668][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1064.175695][ C0] protocol 88fb is buggy, dev hsr_slave_1 executing program [ 1064.289725][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1064.291285][ T8768] ------------[ cut here ]------------ [ 1064.301201][ T8768] hsr_addr_subst_dest: Unknown node [ 1064.306952][ T8768] WARNING: CPU: 1 PID: 8768 at net/hsr/hsr_framereg.c:303 hsr_addr_subst_dest+0x382/0x460 [ 1064.316956][ T8768] Kernel panic - not syncing: panic_on_warn set ... [ 1064.323534][ T8768] CPU: 1 PID: 8768 Comm: syz-executor837 Not tainted 5.4.0-rc1+ #0 [ 1064.331406][ T8768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1064.341533][ T8768] Call Trace: [ 1064.344880][ T8768] dump_stack+0x172/0x1f0 [ 1064.349204][ T8768] ? hsr_addr_subst_dest+0x300/0x460 [ 1064.354476][ T8768] panic+0x2dc/0x755 [ 1064.358360][ T8768] ? add_taint.cold+0x16/0x16 [ 1064.363022][ T8768] ? __kasan_check_write+0x14/0x20 [ 1064.368113][ T8768] ? __warn.cold+0x14/0x3c [ 1064.372513][ T8768] ? __warn+0xd9/0x1d0 [ 1064.376578][ T8768] ? hsr_addr_subst_dest+0x382/0x460 [ 1064.381871][ T8768] __warn.cold+0x2f/0x3c [ 1064.386114][ T8768] ? hsr_addr_subst_dest+0x382/0x460 [ 1064.391383][ T8768] report_bug+0x289/0x300 [ 1064.395720][ T8768] do_error_trap+0x11b/0x200 [ 1064.400293][ T8768] do_invalid_op+0x37/0x50 [ 1064.404708][ T8768] ? hsr_addr_subst_dest+0x382/0x460 [ 1064.410003][ T8768] invalid_op+0x23/0x30 [ 1064.414142][ T8768] RIP: 0010:hsr_addr_subst_dest+0x382/0x460 [ 1064.420030][ T8768] Code: 89 de e8 c1 4f 36 fa 84 db 75 d3 e8 78 4e 36 fa 48 c7 c6 20 54 66 88 48 c7 c7 e0 53 66 88 c6 05 e7 19 85 02 01 e8 86 93 07 fa <0f> 0b eb b0 e8 55 4e 36 fa 0f b6 1d d3 19 85 02 31 ff 89 de e8 85 [ 1064.439620][ T8768] RSP: 0018:ffff88808ba5f590 EFLAGS: 00010282 [ 1064.445677][ T8768] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1064.453636][ T8768] RDX: 0000000000000000 RSI: ffffffff815cb5f6 RDI: ffffed101174bea4 [ 1064.461601][ T8768] RBP: ffff88808ba5f5d0 R08: ffff8880a022e0c0 R09: ffffed1015d24101 [ 1064.469559][ T8768] R10: ffffed1015d24100 R11: ffff8880ae920807 R12: ffff88808c9f58a0 [ 1064.477520][ T8768] R13: 0000000000000000 R14: 000000000d2fbfdf R15: 0000000000000000 [ 1064.485553][ T8768] ? vprintk_func+0x86/0x189 [ 1064.490141][ T8768] hsr_forward_skb+0x138b/0x1d30 [ 1064.495093][ T8768] hsr_dev_xmit+0x72/0xa0 [ 1064.499475][ T8768] dev_hard_start_xmit+0x1a3/0x9b0 [ 1064.504589][ T8768] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1064.510936][ T8768] __dev_queue_xmit+0x2c6c/0x3720 [ 1064.515996][ T8768] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1064.522379][ T8768] ? refcount_add_checked+0x33/0x70 [ 1064.527575][ T8768] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 1064.532877][ T8768] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1064.539209][ T8768] ? packet_parse_headers.isra.0+0x350/0x4a0 [ 1064.545267][ T8768] ? packet_parse_headers.isra.0+0x12c/0x4a0 [ 1064.551230][ T8768] ? prb_dispatch_next_block+0x1b0/0x1b0 [ 1064.556849][ T8768] dev_queue_xmit+0x18/0x20 [ 1064.561334][ T8768] ? dev_queue_xmit+0x18/0x20 [ 1064.565992][ T8768] packet_sendmsg+0x2571/0x6140 [ 1064.570827][ T8768] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1064.577208][ T8768] ? rw_copy_check_uvector+0x2ce/0x390 [ 1064.582652][ T8768] ? lock_downgrade+0x920/0x920 [ 1064.587831][ T8768] ? packet_notifier+0x880/0x880 [ 1064.592783][ T8768] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 1064.598322][ T8768] ? apparmor_socket_sendmsg+0x2a/0x30 [ 1064.603895][ T8768] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1064.610171][ T8768] ? security_socket_sendmsg+0x8d/0xc0 [ 1064.615743][ T8768] ? packet_notifier+0x880/0x880 [ 1064.620729][ T8768] sock_sendmsg+0xd7/0x130 [ 1064.625277][ T8768] ___sys_sendmsg+0x803/0x920 [ 1064.629953][ T8768] ? copy_msghdr_from_user+0x440/0x440 [ 1064.635446][ T8768] ? ___sys_sendmsg+0x920/0x920 [ 1064.640287][ T8768] ? prep_transhuge_page+0xa0/0xa0 [ 1064.645395][ T8768] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1064.651618][ T8768] ? __fget_light+0x1a9/0x230 [ 1064.656277][ T8768] ? __fdget+0x1b/0x20 [ 1064.660335][ T8768] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1064.666667][ T8768] __sys_sendmsg+0x105/0x1d0 [ 1064.671242][ T8768] ? __sys_sendmsg_sock+0xd0/0xd0 [ 1064.676250][ T8768] ? down_read_non_owner+0x490/0x490 [ 1064.681525][ T8768] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1064.687015][ T8768] ? do_syscall_64+0x26/0x760 [ 1064.691674][ T8768] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1064.697733][ T8768] ? do_syscall_64+0x26/0x760 [ 1064.702396][ T8768] __x64_sys_sendmsg+0x78/0xb0 [ 1064.707142][ T8768] do_syscall_64+0xfa/0x760 [ 1064.711641][ T8768] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1064.717516][ T8768] RIP: 0033:0x442c69 [ 1064.721425][ T8768] Code: e8 1c 0d 03 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb 08 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1064.741027][ T8768] RSP: 002b:00007ffc22534868 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1064.749424][ T8768] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000442c69 [ 1064.757376][ T8768] RDX: 0000000000000000 RSI: 0000000020001e40 RDI: 0000000000000003 [ 1064.765329][ T8768] RBP: 0000000000000000 R08: 00000000004aa29f R09: 00000000004aa29f [ 1064.773293][ T8768] R10: 00000000004aa29f R11: 0000000000000246 R12: 0000000000000003 [ 1064.781256][ T8768] R13: 0000000000403a70 R14: 0000000000000000 R15: 0000000000000000 [ 1064.791219][ T8768] Kernel Offset: disabled [ 1064.795615][ T8768] Rebooting in 86400 seconds..