[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.80' (ECDSA) to the list of known hosts. syzkaller login: [ 30.183760] IPVS: ftp: loaded support on port[0] = 21 [ 30.250391] chnl_net:caif_netlink_parms(): no params data found [ 30.335999] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.343009] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.349935] device bridge_slave_0 entered promiscuous mode [ 30.357287] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.363734] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.371230] device bridge_slave_1 entered promiscuous mode [ 30.386524] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 30.395193] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 30.412627] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 30.419738] team0: Port device team_slave_0 added [ 30.425390] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 30.432577] team0: Port device team_slave_1 added [ 30.447343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.453624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.479339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.491012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.497373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.522624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.533119] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 30.540505] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 30.557936] device hsr_slave_0 entered promiscuous mode [ 30.563548] device hsr_slave_1 entered promiscuous mode [ 30.569346] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 30.576432] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 30.633447] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.639899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.646954] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.653373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.680913] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 30.686993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.695626] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 30.704021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.712747] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.731026] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.741108] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 30.747172] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.755330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.763308] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.769643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.787809] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.797699] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.809373] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 30.816285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.823883] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.830251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.837661] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 30.845405] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 30.853791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.861478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.869051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 30.875864] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 30.886877] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 30.894976] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 30.901742] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 30.912792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.960831] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 30.969850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.993733] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 31.001059] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 31.007510] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 31.016113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.023780] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.031005] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.039260] device veth0_vlan entered promiscuous mode [ 31.047557] device veth1_vlan entered promiscuous mode [ 31.053617] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 31.062745] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 31.074047] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 31.082697] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 31.089780] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 31.097377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.106836] device veth0_macvtap entered promiscuous mode [ 31.113794] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 31.122073] device veth1_macvtap entered promiscuous mode [ 31.131162] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 31.139656] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 31.150396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.157078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.165364] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 31.175227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.181940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready executing program [ 31.240024] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 31.263777] net/hsr/hsr_forward.c:366: Malformed frame (port_src hsr0) [ 31.270624] ------------[ cut here ]------------ [ 31.275382] WARNING: CPU: 0 PID: 7965 at net/hsr/hsr_forward.c:365 hsr_forward_skb.cold+0xa7/0xef [ 31.284412] Kernel panic - not syncing: panic_on_warn set ... [ 31.284412] [ 31.291753] CPU: 0 PID: 7965 Comm: syz-executor670 Not tainted 4.14.221-syzkaller #0 [ 31.299605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 31.308933] Call Trace: [ 31.311505] dump_stack+0x1b2/0x281 [ 31.315108] panic+0x1f9/0x42d [ 31.318333] ? add_taint.cold+0x16/0x16 [ 31.322291] ? hsr_forward_skb.cold+0xa7/0xef [ 31.326762] ? hsr_forward_skb.cold+0xa7/0xef [ 31.331236] __warn.cold+0x20/0x44 [ 31.334753] ? ist_end_non_atomic+0x10/0x10 [ 31.339051] ? hsr_forward_skb.cold+0xa7/0xef [ 31.343524] report_bug+0x208/0x250 [ 31.347141] do_error_trap+0x195/0x2d0 [ 31.351008] ? math_error+0x2d0/0x2d0 [ 31.354787] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 31.359620] invalid_op+0x1b/0x40 [ 31.363054] RIP: 0010:hsr_forward_skb.cold+0xa7/0xef [ 31.368128] RSP: 0018:ffff8880b34578a0 EFLAGS: 00010282 [ 31.373464] RAX: 000000000000003a RBX: 0000000000000000 RCX: 0000000000000000 [ 31.380715] RDX: 0000000000000000 RSI: ffffffff878bbb40 RDI: ffffed101668af0a [ 31.387958] RBP: ffff8880a5f74c80 R08: 000000000000003a R09: 0000000000000000 [ 31.395206] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880b282e840 [ 31.402451] R13: ffff88808fc85a80 R14: ffff88808fc85a90 R15: ffff8880a5f74d50 [ 31.409711] ? validate_xmit_skb+0x669/0x9f0 [ 31.414099] hsr_dev_xmit+0x6b/0xa0 [ 31.417701] packet_direct_xmit+0x410/0x610 [ 31.422045] packet_snd+0x1393/0x21e0 [ 31.425826] ? prb_retire_rx_blk_timer_expired+0x630/0x630 [ 31.431426] ? __lock_acquire+0x5fc/0x3f20 [ 31.435641] packet_sendmsg+0x1139/0x2ad0 [ 31.439765] ? lock_downgrade+0x740/0x740 [ 31.443888] ? __might_fault+0x104/0x1b0 [ 31.447922] ? __might_fault+0x104/0x1b0 [ 31.451960] ? compat_packet_setsockopt+0x140/0x140 [ 31.456949] ? lock_acquire+0x170/0x3f0 [ 31.460908] ? lock_downgrade+0x740/0x740 [ 31.465040] ? __might_fault+0x177/0x1b0 [ 31.469093] ? security_socket_sendmsg+0x83/0xb0 [ 31.473836] ? compat_packet_setsockopt+0x140/0x140 [ 31.478833] sock_sendmsg+0xb5/0x100 [ 31.482528] SyS_sendto+0x1c7/0x2c0 [ 31.486132] ? SyS_getpeername+0x220/0x220 [ 31.490343] ? do_vfs_ioctl+0xe2/0xff0 [ 31.494207] ? __fdget+0x167/0x1f0 [ 31.497724] ? security_socket_setsockopt+0x83/0xb0 [ 31.502864] ? SyS_setsockopt+0x130/0x1e0 [ 31.506993] ? SyS_recv+0x40/0x40 [ 31.510481] ? security_file_ioctl+0x83/0xb0 [ 31.514911] ? do_syscall_64+0x4c/0x640 [ 31.518869] ? SyS_getpeername+0x220/0x220 [ 31.523080] do_syscall_64+0x1d5/0x640 [ 31.526950] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 31.532117] RIP: 0033:0x4431a9 [ 31.535284] RSP: 002b:00007ffd75a27f18 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 31.542967] RAX: ffffffffffffffda RBX: 00007ffd75a27f38 RCX: 00000000004431a9 [ 31.550214] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 31.557465] RBP: 0000000000000003 R08: 0000000020000100 R09: 0000000000000014 [ 31.564713] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd75a27f40 [ 31.571960] R13: 00007ffd75a27f60 R14: 00000000004b8018 R15: 00000000004004b8 [ 31.580016] Kernel Offset: disabled [ 31.583678] Rebooting in 86400 seconds..