[ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.77' (ECDSA) to the list of known hosts. syzkaller login: [ 58.871884][ T7068] IPVS: ftp: loaded support on port[0] = 21 [ 58.949576][ T7068] chnl_net:caif_netlink_parms(): no params data found [ 58.998957][ T7068] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.006917][ T7068] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.017256][ T7068] device bridge_slave_0 entered promiscuous mode [ 59.026365][ T7068] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.033801][ T7068] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.041502][ T7068] device bridge_slave_1 entered promiscuous mode [ 59.061623][ T7068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.073024][ T7068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.094928][ T7068] team0: Port device team_slave_0 added [ 59.102505][ T7068] team0: Port device team_slave_1 added [ 59.120839][ T7068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.128014][ T7068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.154485][ T7068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.167635][ T7068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.174665][ T7068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.200622][ T7068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.305755][ T7068] device hsr_slave_0 entered promiscuous mode [ 59.332961][ T7068] device hsr_slave_1 entered promiscuous mode [ 59.466952][ T7068] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.515692][ T7068] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.565533][ T7068] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.635552][ T7068] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.728109][ T7068] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.735320][ T7068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.743433][ T7068] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.750609][ T7068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.794833][ T7068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.808725][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.819207][ T2781] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.827837][ T2781] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.836538][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 59.850162][ T7068] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.863204][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.871628][ T2781] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.878877][ T2781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.892245][ T3423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.901409][ T3423] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.908539][ T3423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.926443][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.935781][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.946379][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.957471][ T3423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.966658][ T3423] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.978051][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.988002][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.001842][ T3423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.013042][ T3423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.024169][ T7068] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.042983][ T3423] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.050484][ T3423] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.063884][ T7068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.081664][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.090756][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.111382][ T7068] device veth0_vlan entered promiscuous mode [ 60.119411][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.129160][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.139254][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.147999][ T2781] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.159710][ T7068] device veth1_vlan entered promiscuous mode [ 60.181614][ T7068] device veth0_macvtap entered promiscuous mode [ 60.190345][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.199216][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.207787][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.217229][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.226660][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.238321][ T7068] device veth1_macvtap entered promiscuous mode [ 60.255091][ T7068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.263693][ T3423] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.271716][ T3423] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.281293][ T3423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.293543][ T7068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.301406][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.311710][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready executing program [ 60.536183][ T7275] netlink: 17 bytes leftover after parsing attributes in process `syz-executor277'. [ 60.545892][ T7275] netlink: 32 bytes leftover after parsing attributes in process `syz-executor277'. [ 60.562473][ C0] divide error: 0000 [#1] PREEMPT SMP KASAN [ 60.568437][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.7.0-rc1-syzkaller #0 [ 60.576548][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 60.586667][ C0] RIP: 0010:tabledist.part.0+0x134/0x160 [ 60.592295][ C0] Code: 4c 89 e0 48 83 c4 08 5b 5d 41 5c 41 5d c3 e8 a3 63 2b fb 48 81 eb 00 10 00 00 eb aa e8 95 63 2b fb 8d 4c 2d 00 44 89 e8 31 d2 f1 49 29 ec 49 01 d4 eb c7 48 89 df e8 5a 2a 69 fb e9 13 ff ff [ 60.612039][ C0] RSP: 0018:ffffc90000007638 EFLAGS: 00010246 [ 60.618087][ C0] RAX: 000000004662f626 RBX: 0000000000000000 RCX: 0000000000000000 [ 60.626133][ C0] RDX: 0000000000000000 RSI: ffffffff8647d06b RDI: 0000000000000005 [ 60.634123][ C0] RBP: ffffffff80000000 R08: ffffffff898864c0 R09: ffffed10131a514e [ 60.642109][ C0] R10: ffff888098d28a6f R11: ffffed10131a514d R12: 0000003e42c00000 [ 60.650075][ C0] R13: 000000004662f626 R14: ffff8880933a2330 R15: ffff8880933a2000 [ 60.658115][ C0] FS: 0000000000000000(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 60.667033][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 60.673601][ C0] CR2: 00000000f7f33db0 CR3: 00000000a780c000 CR4: 00000000001406f0 [ 60.681571][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 60.689535][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 60.698566][ C0] Call Trace: [ 60.701841][ C0] [ 60.704677][ C0] netem_enqueue+0x412/0x2da0 [ 60.709335][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 60.714261][ C0] ? rcu_read_lock_bh_held+0x5a/0xb0 [ 60.719650][ C0] __dev_queue_xmit+0x154a/0x30a0 [ 60.724669][ C0] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 60.729935][ C0] ? mark_lock+0x120/0xf10 [ 60.734341][ C0] ? __ip6_finish_output+0x442/0xab0 [ 60.739672][ C0] ? print_usage_bug+0x240/0x240 [ 60.744600][ C0] ? lock_release+0x800/0x800 [ 60.749271][ C0] ? lock_downgrade+0x840/0x840 [ 60.754101][ C0] ? rcu_lockdep_current_cpu_online+0xdc/0x130 [ 60.760249][ C0] ? ip6_finish_output2+0xfb5/0x25b0 [ 60.765517][ C0] ip6_finish_output2+0xfb5/0x25b0 [ 60.770640][ C0] ? ip6_frag_next+0xb40/0xb40 [ 60.775428][ C0] ? lock_downgrade+0x840/0x840 [ 60.780263][ C0] ? rcu_read_lock_held_common+0x130/0x130 [ 60.786196][ C0] ? __ip6_finish_output+0x442/0xab0 [ 60.791459][ C0] __ip6_finish_output+0x442/0xab0 [ 60.796561][ C0] ip6_finish_output+0x34/0x1f0 [ 60.801403][ C0] ip6_output+0x239/0x810 [ 60.805721][ C0] ? ip6_finish_output+0x1f0/0x1f0 [ 60.810812][ C0] ? mark_held_locks+0x9f/0xe0 [ 60.815584][ C0] ? __ip6_finish_output+0xab0/0xab0 [ 60.820855][ C0] mld_sendpack+0x961/0xdf0 [ 60.825351][ C0] ? nf_hook.constprop.0+0x520/0x520 [ 60.830756][ C0] ? mark_held_locks+0x9f/0xe0 [ 60.835673][ C0] ? __local_bh_enable_ip+0x159/0x270 [ 60.841032][ C0] mld_ifc_timer_expire+0x42e/0x920 [ 60.846249][ C0] call_timer_fn+0x1ac/0x780 [ 60.850881][ C0] ? mld_dad_timer_expire+0x210/0x210 [ 60.856360][ C0] ? timer_fixup_init+0x60/0x60 [ 60.861199][ C0] ? lock_downgrade+0x840/0x840 [ 60.866034][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 60.871556][ C0] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 60.877531][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 60.882707][ C0] ? mld_dad_timer_expire+0x210/0x210 [ 60.888063][ C0] run_timer_softirq+0x623/0x1600 [ 60.893252][ C0] ? add_timer+0x830/0x830 [ 60.897651][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 60.903186][ C0] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 60.909184][ C0] __do_softirq+0x26c/0x9f7 [ 60.913932][ C0] irq_exit+0x192/0x1d0 [ 60.918078][ C0] smp_apic_timer_interrupt+0x19e/0x600 [ 60.923641][ C0] apic_timer_interrupt+0xf/0x20 [ 60.928567][ C0] [ 60.931487][ C0] RIP: 0010:native_safe_halt+0xe/0x10 [ 60.936848][ C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc e9 07 00 00 00 0f 00 2d 14 a8 58 00 f4 c3 66 90 e9 07 00 00 00 0f 00 2d 04 a8 58 00 fb f4 cc 41 56 41 55 41 54 55 53 e8 63 25 91 f9 e8 2e f6 c9 fb 0f 1f [ 60.956495][ C0] RSP: 0018:ffffffff89807d98 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 60.964896][ C0] RAX: 1ffffffff1329847 RBX: ffffffff898864c0 RCX: 0000000000000000 [ 60.972858][ C0] RDX: dffffc0000000000 RSI: 0000000000000006 RDI: ffffffff89886d84 [ 60.980806][ C0] RBP: dffffc0000000000 R08: ffffffff898864c0 R09: 0000000000000000 [ 60.988763][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: fffffbfff1310c98 [ 60.996725][ C0] R13: 0000000000000000 R14: ffffffff8a894540 R15: 0000000000000000 [ 61.004693][ C0] default_idle+0x49/0x350 [ 61.009086][ C0] do_idle+0x393/0x690 [ 61.013133][ C0] ? rcu_read_lock_held+0x9c/0xb0 [ 61.018149][ C0] ? arch_cpu_idle_exit+0x70/0x70 [ 61.023195][ C0] ? schedule+0xe7/0x2a0 [ 61.027418][ C0] ? trace_init_perf_perm_irq_work_exit+0xe/0xe [ 61.033670][ C0] cpu_startup_entry+0x14/0x20 [ 61.038427][ C0] start_kernel+0x862/0x89c [ 61.042912][ C0] ? mem_encrypt_init+0x5/0x5 [ 61.047609][ C0] ? x86_family+0x3d/0x50 [ 61.051953][ C0] ? load_ucode_bsp+0x23d/0x27d [ 61.056812][ C0] secondary_startup_64+0xa4/0xb0 [ 61.061825][ C0] Modules linked in: [ 61.065771][ C0] ---[ end trace 1e4a0cbde2bf0e67 ]--- [ 61.071240][ C0] RIP: 0010:tabledist.part.0+0x134/0x160 [ 61.076933][ C0] Code: 4c 89 e0 48 83 c4 08 5b 5d 41 5c 41 5d c3 e8 a3 63 2b fb 48 81 eb 00 10 00 00 eb aa e8 95 63 2b fb 8d 4c 2d 00 44 89 e8 31 d2 f1 49 29 ec 49 01 d4 eb c7 48 89 df e8 5a 2a 69 fb e9 13 ff ff [ 61.096595][ C0] RSP: 0018:ffffc90000007638 EFLAGS: 00010246 [ 61.102885][ C0] RAX: 000000004662f626 RBX: 0000000000000000 RCX: 0000000000000000 [ 61.110858][ C0] RDX: 0000000000000000 RSI: ffffffff8647d06b RDI: 0000000000000005 [ 61.118890][ C0] RBP: ffffffff80000000 R08: ffffffff898864c0 R09: ffffed10131a514e [ 61.126962][ C0] R10: ffff888098d28a6f R11: ffffed10131a514d R12: 0000003e42c00000 [ 61.134993][ C0] R13: 000000004662f626 R14: ffff8880933a2330 R15: ffff8880933a2000 [ 61.143314][ C0] FS: 0000000000000000(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 61.153517][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 61.160317][ C0] CR2: 00000000f7f33db0 CR3: 00000000a780c000 CR4: 00000000001406f0 [ 61.168328][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 61.176481][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 61.184510][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 61.193356][ C0] Kernel Offset: disabled [ 61.197697][ C0] Rebooting in 86400 seconds..