[ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.68' (ECDSA) to the list of known hosts. syzkaller login: [ 62.482193][ T6830] IPVS: ftp: loaded support on port[0] = 21 [ 62.621428][ T6830] chnl_net:caif_netlink_parms(): no params data found [ 62.672517][ T6830] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.680200][ T6830] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.688574][ T6830] device bridge_slave_0 entered promiscuous mode [ 62.699610][ T6830] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.707252][ T6830] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.715140][ T6830] device bridge_slave_1 entered promiscuous mode [ 62.735269][ T6830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.746400][ T6830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.768854][ T6830] team0: Port device team_slave_0 added [ 62.776195][ T6830] team0: Port device team_slave_1 added [ 62.794792][ T6830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.801746][ T6830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.828657][ T6830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.841935][ T6830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.849078][ T6830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.875081][ T6830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.901570][ T6830] device hsr_slave_0 entered promiscuous mode [ 62.908339][ T6830] device hsr_slave_1 entered promiscuous mode [ 63.005438][ T6830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.016281][ T6830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.027543][ T6830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.036440][ T6830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.062597][ T6830] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.069764][ T6830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.077685][ T6830] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.084822][ T6830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.131576][ T6830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.145618][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.155947][ T2676] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.165180][ T2676] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.172957][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 63.187141][ T6830] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.198973][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.208174][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.215288][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.234367][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.242716][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.249841][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.271729][ T6830] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.282154][ T6830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.297812][ T2601] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.306631][ T2601] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.315215][ T2601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.324240][ T2601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.332665][ T2601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.340534][ T2601] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.360422][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.368843][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.381684][ T6830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.401559][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.423695][ T2601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.431905][ T2601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.441072][ T2601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.449079][ T6830] device veth0_vlan entered promiscuous mode [ 63.461451][ T6830] device veth1_vlan entered promiscuous mode [ 63.483224][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.491736][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.500552][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.511740][ T6830] device veth0_macvtap entered promiscuous mode [ 63.522806][ T6830] device veth1_macvtap entered promiscuous mode [ 63.541362][ T6830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.549189][ T2601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.560356][ T2601] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.572153][ T6830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.580433][ T7049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready executing program [ 63.593150][ T6830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.603056][ T6830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.611909][ T6830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.620936][ T6830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 executing program executing program executing program executing program executing program [ 63.711281][ T7070] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 63.723002][ T7070] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 63.731396][ T7070] CPU: 0 PID: 7070 Comm: syz-executor893 Not tainted 5.9.0-rc1-syzkaller #0 [ 63.740035][ T7070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 63.750075][ T7070] RIP: 0010:fq_codel_enqueue+0x8a3/0x10c0 [ 63.755775][ T7070] Code: 43 2b 0b fb 45 39 ec 0f 83 cb 00 00 00 e8 35 2f 0b fb 48 8b 44 24 10 80 38 00 0f 85 32 06 00 00 49 8b 07 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 06 06 00 00 48 8b 10 48 8d 78 28 49 89 17 48 [ 63.775367][ T7070] RSP: 0018:ffffc900061f7680 EFLAGS: 00010246 [ 63.781405][ T7070] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff86690f3b [ 63.789348][ T7070] RDX: 0000000000000000 RSI: ffffffff86690fdb RDI: 0000000000000004 [ 63.797294][ T7070] RBP: ffffc900061f7820 R08: 0000000000000001 R09: ffffffff8c5f3aaf [ 63.805238][ T7070] R10: 0000000000000400 R11: 0000000000086998 R12: 0000000000000400 [ 63.813178][ T7070] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff8880848e0000 [ 63.821130][ T7070] FS: 00007f8170794700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 63.830042][ T7070] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.836606][ T7070] CR2: 00000000200001c0 CR3: 0000000099f80000 CR4: 00000000001506f0 [ 63.844554][ T7070] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 63.852510][ T7070] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 63.860460][ T7070] Call Trace: [ 63.863730][ T7070] ? do_raw_spin_lock+0x120/0x2b0 [ 63.868731][ T7070] ? INET_ECN_set_ce+0x780/0x780 [ 63.873651][ T7070] ? rwlock_bug.part.0+0x90/0x90 [ 63.878565][ T7070] __dev_queue_xmit+0x1878/0x2d60 [ 63.883589][ T7070] ? lock_acquire+0x1f1/0xad0 [ 63.888243][ T7070] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 63.893509][ T7070] ? memcpy+0x39/0x60 [ 63.897473][ T7070] ? memcpy+0x39/0x60 [ 63.901435][ T7070] ? __skb_clone+0x586/0x770 [ 63.906001][ T7070] netlink_deliver_tap+0x92e/0xb70 [ 63.911090][ T7070] netlink_unicast+0x5e5/0x7d0 [ 63.915830][ T7070] ? netlink_attachskb+0x810/0x810 [ 63.920915][ T7070] ? _copy_from_iter_full+0x247/0x890 [ 63.926269][ T7070] ? memset+0x20/0x40 [ 63.930221][ T7070] ? __check_object_size+0x30/0x3e4 [ 63.935401][ T7070] netlink_sendmsg+0x856/0xd90 [ 63.940142][ T7070] ? netlink_unicast+0x7d0/0x7d0 [ 63.945065][ T7070] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 63.950322][ T7070] ? netlink_unicast+0x7d0/0x7d0 [ 63.955235][ T7070] sock_sendmsg+0xcf/0x120 [ 63.959638][ T7070] ____sys_sendmsg+0x6e8/0x810 [ 63.964376][ T7070] ? kernel_sendmsg+0x50/0x50 [ 63.969021][ T7070] ? do_recvmmsg+0x6d0/0x6d0 [ 63.973601][ T7070] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 63.979561][ T7070] ___sys_sendmsg+0xf3/0x170 [ 63.984124][ T7070] ? sendmsg_copy_msghdr+0x160/0x160 [ 63.989381][ T7070] ? __fget_files+0x272/0x400 [ 63.994041][ T7070] ? lock_downgrade+0x830/0x830 [ 63.998867][ T7070] ? __fget_files+0x294/0x400 [ 64.003526][ T7070] ? __fget_light+0xea/0x280 [ 64.008107][ T7070] __sys_sendmsg+0xe5/0x1b0 [ 64.012593][ T7070] ? __sys_sendmsg_sock+0xb0/0xb0 [ 64.017602][ T7070] ? trace_hardirqs_on+0x5f/0x220 [ 64.022610][ T7070] ? lockdep_hardirqs_on+0x76/0xf0 [ 64.027694][ T7070] do_syscall_64+0x2d/0x70 [ 64.032099][ T7070] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 64.037965][ T7070] RIP: 0033:0x44aab9 [ 64.041836][ T7070] Code: e8 dc 0f 03 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 1b 06 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 64.061409][ T7070] RSP: 002b:00007f8170793ce8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.069802][ T7070] RAX: ffffffffffffffda RBX: 00000000006e0c58 RCX: 000000000044aab9 [ 64.077748][ T7070] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 64.085692][ T7070] RBP: 00000000006e0c50 R08: 00007f8170794700 R09: 0000000000000000 [ 64.093641][ T7070] R10: 00007f8170794700 R11: 0000000000000246 R12: 00000000006e0c5c [ 64.101592][ T7070] R13: 00007ffe61a62b3f R14: 00007f81707949c0 R15: 00000000006e0c5c [ 64.109541][ T7070] Modules linked in: [ 64.113478][ T7070] ---[ end trace e02ec897ba12107a ]--- [ 64.118939][ T7070] RIP: 0010:fq_codel_enqueue+0x8a3/0x10c0 [ 64.124656][ T7070] Code: 43 2b 0b fb 45 39 ec 0f 83 cb 00 00 00 e8 35 2f 0b fb 48 8b 44 24 10 80 38 00 0f 85 32 06 00 00 49 8b 07 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 06 06 00 00 48 8b 10 48 8d 78 28 49 89 17 48 [ 64.144246][ T7070] RSP: 0018:ffffc900061f7680 EFLAGS: 00010246 [ 64.150294][ T7070] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff86690f3b [ 64.158267][ T7070] RDX: 0000000000000000 RSI: ffffffff86690fdb RDI: 0000000000000004 [ 64.166225][ T7070] RBP: ffffc900061f7820 R08: 0000000000000001 R09: ffffffff8c5f3aaf [ 64.174182][ T7070] R10: 0000000000000400 R11: 0000000000086998 R12: 0000000000000400 [ 64.182128][ T7070] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff8880848e0000 [ 64.190088][ T7070] FS: 00007f8170794700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 64.199014][ T7070] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.205582][ T7070] CR2: 00000000200001c0 CR3: 0000000099f80000 CR4: 00000000001506f0 [ 64.213552][ T7070] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 64.221501][ T7070] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 64.229471][ T7070] Kernel panic - not syncing: Fatal exception in interrupt [ 64.237626][ T7070] Kernel Offset: disabled [ 64.241937][ T7070] Rebooting in 86400 seconds..