netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
------------[ cut here ]------------
hsr_addr_subst_dest: Unknown node
WARNING: CPU: 0 PID: 23393 at net/hsr/hsr_framereg.c:313 hsr_addr_subst_dest+0x3ae/0x450 net/hsr/hsr_framereg.c:313
Kernel panic - not syncing: panic_on_warn set ...

CPU: 0 PID: 23393 Comm: syz-executor.1 Not tainted 4.19.189-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
 panic+0x26a/0x50e kernel/panic.c:186
 __warn.cold+0x20/0x5a kernel/panic.c:541
 report_bug+0x262/0x2b0 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:178 [inline]
 fixup_bug arch/x86/kernel/traps.c:173 [inline]
 do_error_trap+0x1d7/0x310 arch/x86/kernel/traps.c:296
 invalid_op+0x14/0x20 arch/x86/entry/entry_64.S:1038
RIP: 0010:hsr_addr_subst_dest+0x3ae/0x450 net/hsr/hsr_framereg.c:313
Code: 00 79 f9 84 db 0f 85 49 fd ff ff e8 3c ff 78 f9 48 c7 c6 40 79 70 89 48 c7 c7 00 79 70 89 c6 05 de 54 25 03 01 e8 d2 0d 08 00 <0f> 0b e9 23 fd ff ff e8 f6 bf ae f9 e9 c2 fd ff ff 48 89 ef e8 79
RSP: 0018:ffff88804140f798 EFLAGS: 00010286
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 000000000002c1fb RSI: ffffffff814dde61 RDI: ffffed1008281ee5
RBP: ffff8880986c04c2 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000005 R11: 0000000000000000 R12: 0000000013c50000
R13: ffff88804263d8a0 R14: 000000008423ef5f R15: 000000000000c2f7
 hsr_xmit net/hsr/hsr_forward.c:230 [inline]
 hsr_forward_do net/hsr/hsr_forward.c:295 [inline]
 hsr_forward_skb+0x1284/0x1c30 net/hsr/hsr_forward.c:373
 hsr_dev_xmit+0x6b/0xa0 net/hsr/hsr_device.c:242
 __netdev_start_xmit include/linux/netdevice.h:4345 [inline]
 netdev_start_xmit include/linux/netdevice.h:4359 [inline]
 xmit_one net/core/dev.c:3256 [inline]
 dev_hard_start_xmit+0x1a8/0x920 net/core/dev.c:3272
 __dev_queue_xmit+0x269d/0x2e00 net/core/dev.c:3838
 packet_snd net/packet/af_packet.c:2988 [inline]
 packet_sendmsg+0x24e9/0x7130 net/packet/af_packet.c:3013
 sock_sendmsg_nosec net/socket.c:622 [inline]
 sock_sendmsg+0xc3/0x120 net/socket.c:632
 __sys_sendto+0x21a/0x320 net/socket.c:1787
 __do_sys_sendto net/socket.c:1799 [inline]
 __se_sys_sendto net/socket.c:1795 [inline]
 __x64_sys_sendto+0xdd/0x1b0 net/socket.c:1795
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4665f9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f56e0065188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9
RDX: 000000000000fdfa RSI: 0000000020000300 RDI: 0000000000000003
RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60
R13: 00007ffe315193af R14: 00007f56e0065300 R15: 0000000000022000
Kernel Offset: disabled

=============================
WARNING: suspicious RCU usage
4.19.189-syzkaller #0 Not tainted
-----------------------------
kernel/sched/core.c:6157 Illegal context switch in RCU-bh read-side critical section!

other info that might help us debug this:


rcu_scheduler_active = 2, debug_locks = 1
1 lock held by syz-executor.1/23393:
 #0: 0000000032092613 (rcu_read_lock_bh){....}, at: __dev_queue_xmit+0x1e2/0x2e00 net/core/dev.c:3773

stack backtrace:
CPU: 0 PID: 23393 Comm: syz-executor.1 Not tainted 4.19.189-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
 ___might_sleep+0x211/0x2b0 kernel/sched/core.c:6157
 down_read+0x17/0x80 kernel/locking/rwsem.c:23
 __blocking_notifier_call_chain kernel/notifier.c:316 [inline]
 __blocking_notifier_call_chain kernel/notifier.c:304 [inline]
 blocking_notifier_call_chain kernel/notifier.c:328 [inline]
 blocking_notifier_call_chain+0x6f/0xa0 kernel/notifier.c:325
 fb_blank+0xb5/0x1d0 drivers/video/fbdev/core/fbmem.c:1064
 fbcon_blank+0x932/0xec0 drivers/video/fbdev/core/fbcon.c:2221
 do_unblank_screen+0x241/0x610 drivers/tty/vt/vt.c:4276
 panic+0x313/0x50e kernel/panic.c:239
 __warn.cold+0x20/0x5a kernel/panic.c:541
 report_bug+0x262/0x2b0 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:178 [inline]
 fixup_bug arch/x86/kernel/traps.c:173 [inline]
 do_error_trap+0x1d7/0x310 arch/x86/kernel/traps.c:296
 invalid_op+0x14/0x20 arch/x86/entry/entry_64.S:1038
RIP: 0010:hsr_addr_subst_dest+0x3ae/0x450 net/hsr/hsr_framereg.c:313
Code: 00 79 f9 84 db 0f 85 49 fd ff ff e8 3c ff 78 f9 48 c7 c6 40 79 70 89 48 c7 c7 00 79 70 89 c6 05 de 54 25 03 01 e8 d2 0d 08 00 <0f> 0b e9 23 fd ff ff e8 f6 bf ae f9 e9 c2 fd ff ff 48 89 ef e8 79
RSP: 0018:ffff88804140f798 EFLAGS: 00010286
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 000000000002c1fb RSI: ffffffff814dde61 RDI: ffffed1008281ee5
RBP: ffff8880986c04c2 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000005 R11: 0000000000000000 R12: 0000000013c50000
R13: ffff88804263d8a0 R14: 000000008423ef5f R15: 000000000000c2f7
 hsr_xmit net/hsr/hsr_forward.c:230 [inline]
 hsr_forward_do net/hsr/hsr_forward.c:295 [inline]
 hsr_forward_skb+0x1284/0x1c30 net/hsr/hsr_forward.c:373
 hsr_dev_xmit+0x6b/0xa0 net/hsr/hsr_device.c:242
 __netdev_start_xmit include/linux/netdevice.h:4345 [inline]
 netdev_start_xmit include/linux/netdevice.h:4359 [inline]
 xmit_one net/core/dev.c:3256 [inline]
 dev_hard_start_xmit+0x1a8/0x920 net/core/dev.c:3272
 __dev_queue_xmit+0x269d/0x2e00 net/core/dev.c:3838
 packet_snd net/packet/af_packet.c:2988 [inline]
 packet_sendmsg+0x24e9/0x7130 net/packet/af_packet.c:3013
 sock_sendmsg_nosec net/socket.c:622 [inline]
 sock_sendmsg+0xc3/0x120 net/socket.c:632
 __sys_sendto+0x21a/0x320 net/socket.c:1787
 __do_sys_sendto net/socket.c:1799 [inline]
 __se_sys_sendto net/socket.c:1795 [inline]
 __x64_sys_sendto+0xdd/0x1b0 net/socket.c:1795
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4665f9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f56e0065188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9
RDX: 000000000000fdfa RSI: 0000000020000300 RDI: 0000000000000003
RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60
R13: 00007ffe315193af R14: 00007f56e0065300 R15: 0000000000022000
Rebooting in 86400 seconds..