[[0;32m OK [0m] Started Getty on tty2.
[[0;32m OK [0m] Started Serial Getty on ttyS0.
[[0;32m OK [0m] Started Getty on tty1.
[[0;32m OK [0m] Started getty on tty2-tty6 if dbus and logind are not available.
[[0;32m OK [0m] Started OpenBSD Secure Shell server.
Debian GNU/Linux 9 syzkaller ttyS0
Warning: Permanently added '10.128.10.32' (ECDSA) to the list of known hosts.
syzkaller login: [ 72.944713][ T8515] IPVS: ftp: loaded support on port[0] = 21
[ 73.051392][ T8515] chnl_net:caif_netlink_parms(): no params data found
[ 73.103229][ T8515] bridge0: port 1(bridge_slave_0) entered blocking state
[ 73.110440][ T8515] bridge0: port 1(bridge_slave_0) entered disabled state
[ 73.120509][ T8515] device bridge_slave_0 entered promiscuous mode
[ 73.130376][ T8515] bridge0: port 2(bridge_slave_1) entered blocking state
[ 73.137467][ T8515] bridge0: port 2(bridge_slave_1) entered disabled state
[ 73.146160][ T8515] device bridge_slave_1 entered promiscuous mode
[ 73.167018][ T8515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 73.177795][ T8515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 73.200564][ T8515] team0: Port device team_slave_0 added
[ 73.209119][ T8515] team0: Port device team_slave_1 added
[ 73.226386][ T8515] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 73.233502][ T8515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 73.260614][ T8515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 73.274992][ T8515] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 73.282845][ T8515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 73.308863][ T8515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 73.336001][ T8515] device hsr_slave_0 entered promiscuous mode
[ 73.342615][ T8515] device hsr_slave_1 entered promiscuous mode
[ 73.446226][ T8515] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 73.457180][ T8515] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 73.467299][ T8515] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 73.478019][ T8515] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 73.504257][ T8515] bridge0: port 2(bridge_slave_1) entered blocking state
[ 73.511436][ T8515] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 73.519282][ T8515] bridge0: port 1(bridge_slave_0) entered blocking state
[ 73.526340][ T8515] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 73.574894][ T8515] 8021q: adding VLAN 0 to HW filter on device bond0
[ 73.587684][ T3213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 73.599752][ T3213] bridge0: port 1(bridge_slave_0) entered disabled state
[ 73.607605][ T3213] bridge0: port 2(bridge_slave_1) entered disabled state
[ 73.616767][ T3213] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 73.630721][ T8515] 8021q: adding VLAN 0 to HW filter on device team0
[ 73.642227][ T3213] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 73.651393][ T3213] bridge0: port 1(bridge_slave_0) entered blocking state
[ 73.658535][ T3213] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 73.669904][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 73.679177][ T3089] bridge0: port 2(bridge_slave_1) entered blocking state
[ 73.686235][ T3089] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 73.705498][ T3213] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 73.714573][ T3213] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 73.729298][ T3213] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 73.744749][ T8515] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 73.756957][ T8515] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 73.770637][ T3213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 73.779570][ T3213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 73.787748][ T3213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 73.806720][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 73.814183][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 73.826874][ T8515] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 73.847457][ T3213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 73.869783][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 73.878019][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 73.886524][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 73.896318][ T8515] device veth0_vlan entered promiscuous mode
[ 73.908934][ T8515] device veth1_vlan entered promiscuous mode
[ 73.932627][ T3213] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 73.941102][ T3213] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 73.950003][ T3213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 73.961612][ T8515] device veth0_macvtap entered promiscuous mode
[ 73.972947][ T8515] device veth1_macvtap entered promiscuous mode
[ 73.991573][ T8515] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 73.999868][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 74.010430][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 74.023533][ T8515] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 74.031323][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
executing program
[ 74.040906][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 74.053961][ T8515] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 74.063468][ T8515] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 74.073372][ T8515] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 74.082458][ T8515] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 74.389219][ C0] ================================================================================
[ 74.398828][ C0] UBSAN: shift-out-of-bounds in net/sched/sch_api.c:571:7
[ 74.405945][ C0] shift exponent 144 is too large for 32-bit type 'int'
[ 74.412997][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.10.0-rc7-next-20201208-syzkaller #0
[ 74.422228][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 74.432291][ C0] Call Trace:
[ 74.435574][ C0]
[ 74.438457][ C0] dump_stack+0x107/0x163
[ 74.442804][ C0] ubsan_epilogue+0xb/0x5a
[ 74.447273][ C0] __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x181
[ 74.454179][ C0] ? __lock_acquire+0x16c2/0x54b0
[ 74.459201][ C0] __qdisc_calculate_pkt_len.cold+0x62/0xcf
[ 74.465104][ C0] __dev_queue_xmit+0x1349/0x2ec0
[ 74.470122][ C0] ? netdev_core_pick_tx+0x2e0/0x2e0
[ 74.475392][ C0] ? __ip_finish_output+0x399/0x650
[ 74.480591][ C0] ? mark_held_locks+0x9f/0xe0
[ 74.485341][ C0] ? ip_finish_output2+0x16db/0x2330
[ 74.490612][ C0] ip_finish_output2+0xf5d/0x2330
[ 74.495737][ C0] ? ip_fragment.constprop.0+0x240/0x240
[ 74.501351][ C0] ? __ip_finish_output+0x650/0x650
[ 74.506547][ C0] ? __ip_flush_pending_frames.constprop.0+0x2c0/0x2c0
[ 74.513377][ C0] ? debug_object_free+0x2e0/0x2e0
[ 74.518590][ C0] __ip_finish_output+0x399/0x650
[ 74.523599][ C0] ip_finish_output+0x35/0x200
[ 74.528347][ C0] ip_output+0x196/0x310
[ 74.532576][ C0] ip_local_out+0xaf/0x1a0
[ 74.536979][ C0] iptunnel_xmit+0x5a3/0x9c0
[ 74.541561][ C0] geneve_xmit+0xfe0/0x3230
[ 74.546060][ C0] ? geneve_udp_encap_recv+0x2790/0x2790
[ 74.551687][ C0] ? skb_crc32c_csum_help+0x70/0x70
[ 74.556882][ C0] ? dev_hard_start_xmit+0x68a/0x960
[ 74.562154][ C0] dev_hard_start_xmit+0x1eb/0x960
[ 74.567262][ C0] __dev_queue_xmit+0x21de/0x2ec0
[ 74.572291][ C0] ? netdev_core_pick_tx+0x2e0/0x2e0
[ 74.577568][ C0] ? __ip6_finish_output+0x4be/0xb80
[ 74.582853][ C0] ? mark_held_locks+0x9f/0xe0
[ 74.587597][ C0] ? rcu_read_lock_bh_held+0x25/0x60
[ 74.592882][ C0] ? ip6_finish_output2+0xdce/0x1710
[ 74.598168][ C0] ip6_finish_output2+0x8cc/0x1710
[ 74.603293][ C0] __ip6_finish_output+0x4be/0xb80
[ 74.608409][ C0] ip6_finish_output+0x35/0x200
[ 74.613242][ C0] ip6_output+0x1db/0x520
[ 74.617556][ C0] mld_sendpack+0x996/0xe20
[ 74.622046][ C0] ? nf_hook.constprop.0+0x5b0/0x5b0
[ 74.627325][ C0] ? __local_bh_enable_ip+0x9c/0x110
[ 74.632610][ C0] mld_ifc_timer_expire+0x60a/0xf10
[ 74.637820][ C0] ? mld_send_initial_cr.part.0+0x150/0x150
[ 74.643715][ C0] call_timer_fn+0x1a5/0x710
[ 74.648306][ C0] ? msleep_interruptible+0x170/0x170
[ 74.653657][ C0] ? lock_downgrade+0x6d0/0x6d0
[ 74.658499][ C0] ? _raw_spin_unlock_irq+0x1f/0x40
[ 74.663692][ C0] ? mld_send_initial_cr.part.0+0x150/0x150
[ 74.669569][ C0] __run_timers.part.0+0x692/0xa80
[ 74.674684][ C0] ? call_timer_fn+0x710/0x710
[ 74.679435][ C0] ? kvm_sched_clock_read+0x14/0x40
[ 74.684612][ C0] ? sched_clock+0x2a/0x40
[ 74.689024][ C0] ? sched_clock_cpu+0x18/0x1f0
[ 74.693967][ C0] run_timer_softirq+0xb3/0x1d0
[ 74.698888][ C0] __do_softirq+0x2b7/0xa76
[ 74.703394][ C0] asm_call_irq_on_stack+0xf/0x20
[ 74.708392][ C0]
[ 74.711316][ C0] do_softirq_own_stack+0xaa/0xd0
[ 74.716322][ C0] irq_exit_rcu+0x194/0x210
[ 74.720825][ C0] sysvec_apic_timer_interrupt+0x4d/0x100
[ 74.726527][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 74.732490][ C0] RIP: 0010:acpi_idle_do_entry+0x1c9/0x250
[ 74.738278][ C0] Code: fd 42 5a f8 84 db 75 ac e8 14 35 5a f8 e8 5f 0b 60 f8 e9 0c 00 00 00 e8 05 35 5a f8 0f 00 2d 3e 6e b2 00 e8 f9 34 5a f8 fb f4 <9c> 5b 81 e3 00 02 00 00 fa 31 ff 48 89 de e8 84 3f 5a f8 48 85 db
[ 74.758831][ C0] RSP: 0018:ffffffff8b407d60 EFLAGS: 00000293
[ 74.764894][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 74.772849][ C0] RDX: ffffffff8b49bc00 RSI: ffffffff89181207 RDI: 0000000000000000
[ 74.780802][ C0] RBP: ffff8880153ee064 R08: 0000000000000001 R09: 0000000000000001
[ 74.788771][ C0] R10: ffffffff81781d88 R11: 0000000000000000 R12: 0000000000000001
[ 74.796737][ C0] R13: ffff8880153ee000 R14: ffff8880153ee064 R15: ffff8881435e0804
[ 74.804699][ C0] ? trace_hardirqs_on+0x38/0x1c0
[ 74.809707][ C0] ? acpi_idle_do_entry+0x1c7/0x250
[ 74.814895][ C0] acpi_idle_enter+0x361/0x500
[ 74.819651][ C0] cpuidle_enter_state+0x1b1/0xc80
[ 74.824752][ C0] cpuidle_enter+0x4a/0xa0
[ 74.829177][ C0] do_idle+0x3eb/0x590
[ 74.833231][ C0] ? arch_cpu_idle_exit+0x30/0x30
[ 74.838243][ C0] ? trace_init_perf_perm_irq_work_exit+0xe/0xe
[ 74.844463][ C0] cpu_startup_entry+0x14/0x20
[ 74.849209][ C0] start_kernel+0x49b/0x4bc
[ 74.853700][ C0] secondary_startup_64_no_verify+0xb0/0xbb
[ 74.859663][ C0] ================================================================================
[ 74.868981][ C0] Kernel panic - not syncing: panic_on_warn set ...
[ 74.875581][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.10.0-rc7-next-20201208-syzkaller #0
[ 74.884778][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 74.894826][ C0] Call Trace:
[ 74.898113][ C0]
[ 74.900984][ C0] dump_stack+0x107/0x163
[ 74.905296][ C0] panic+0x343/0x77f
[ 74.909189][ C0] ? __warn_printk+0xf3/0xf3
[ 74.913766][ C0] ? ubsan_epilogue+0x3e/0x5a
[ 74.918444][ C0] ubsan_epilogue+0x54/0x5a
[ 74.922928][ C0] __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x181
[ 74.929672][ C0] ? __lock_acquire+0x16c2/0x54b0
[ 74.934688][ C0] __qdisc_calculate_pkt_len.cold+0x62/0xcf
[ 74.940566][ C0] __dev_queue_xmit+0x1349/0x2ec0
[ 74.945578][ C0] ? netdev_core_pick_tx+0x2e0/0x2e0
[ 74.950848][ C0] ? __ip_finish_output+0x399/0x650
[ 74.956032][ C0] ? mark_held_locks+0x9f/0xe0
[ 74.960780][ C0] ? ip_finish_output2+0x16db/0x2330
[ 74.966063][ C0] ip_finish_output2+0xf5d/0x2330
[ 74.971075][ C0] ? ip_fragment.constprop.0+0x240/0x240
[ 74.976687][ C0] ? __ip_finish_output+0x650/0x650
[ 74.981866][ C0] ? __ip_flush_pending_frames.constprop.0+0x2c0/0x2c0
[ 74.988695][ C0] ? debug_object_free+0x2e0/0x2e0
[ 74.993786][ C0] __ip_finish_output+0x399/0x650
[ 74.998795][ C0] ip_finish_output+0x35/0x200
[ 75.003546][ C0] ip_output+0x196/0x310
[ 75.007772][ C0] ip_local_out+0xaf/0x1a0
[ 75.012173][ C0] iptunnel_xmit+0x5a3/0x9c0
[ 75.016753][ C0] geneve_xmit+0xfe0/0x3230
[ 75.021252][ C0] ? geneve_udp_encap_recv+0x2790/0x2790
[ 75.026874][ C0] ? skb_crc32c_csum_help+0x70/0x70
[ 75.032064][ C0] ? dev_hard_start_xmit+0x68a/0x960
[ 75.037332][ C0] dev_hard_start_xmit+0x1eb/0x960
[ 75.042445][ C0] __dev_queue_xmit+0x21de/0x2ec0
[ 75.047458][ C0] ? netdev_core_pick_tx+0x2e0/0x2e0
[ 75.052727][ C0] ? __ip6_finish_output+0x4be/0xb80
[ 75.057995][ C0] ? mark_held_locks+0x9f/0xe0
[ 75.062738][ C0] ? rcu_read_lock_bh_held+0x25/0x60
[ 75.068006][ C0] ? ip6_finish_output2+0xdce/0x1710
[ 75.073275][ C0] ip6_finish_output2+0x8cc/0x1710
[ 75.078374][ C0] __ip6_finish_output+0x4be/0xb80
[ 75.083499][ C0] ip6_finish_output+0x35/0x200
[ 75.088333][ C0] ip6_output+0x1db/0x520
[ 75.092649][ C0] mld_sendpack+0x996/0xe20
[ 75.097142][ C0] ? nf_hook.constprop.0+0x5b0/0x5b0
[ 75.102789][ C0] ? __local_bh_enable_ip+0x9c/0x110
[ 75.108060][ C0] mld_ifc_timer_expire+0x60a/0xf10
[ 75.113251][ C0] ? mld_send_initial_cr.part.0+0x150/0x150
[ 75.119130][ C0] call_timer_fn+0x1a5/0x710
[ 75.123704][ C0] ? msleep_interruptible+0x170/0x170
[ 75.129059][ C0] ? lock_downgrade+0x6d0/0x6d0
[ 75.133899][ C0] ? _raw_spin_unlock_irq+0x1f/0x40
[ 75.139092][ C0] ? mld_send_initial_cr.part.0+0x150/0x150
[ 75.144991][ C0] __run_timers.part.0+0x692/0xa80
[ 75.150092][ C0] ? call_timer_fn+0x710/0x710
[ 75.154844][ C0] ? kvm_sched_clock_read+0x14/0x40
[ 75.160036][ C0] ? sched_clock+0x2a/0x40
[ 75.164446][ C0] ? sched_clock_cpu+0x18/0x1f0
[ 75.169284][ C0] run_timer_softirq+0xb3/0x1d0
[ 75.174120][ C0] __do_softirq+0x2b7/0xa76
[ 75.178615][ C0] asm_call_irq_on_stack+0xf/0x20
[ 75.183615][ C0]
[ 75.186552][ C0] do_softirq_own_stack+0xaa/0xd0
[ 75.191572][ C0] irq_exit_rcu+0x194/0x210
[ 75.196069][ C0] sysvec_apic_timer_interrupt+0x4d/0x100
[ 75.201772][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 75.207732][ C0] RIP: 0010:acpi_idle_do_entry+0x1c9/0x250
[ 75.213535][ C0] Code: fd 42 5a f8 84 db 75 ac e8 14 35 5a f8 e8 5f 0b 60 f8 e9 0c 00 00 00 e8 05 35 5a f8 0f 00 2d 3e 6e b2 00 e8 f9 34 5a f8 fb f4 <9c> 5b 81 e3 00 02 00 00 fa 31 ff 48 89 de e8 84 3f 5a f8 48 85 db
[ 75.233132][ C0] RSP: 0018:ffffffff8b407d60 EFLAGS: 00000293
[ 75.239201][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 75.247262][ C0] RDX: ffffffff8b49bc00 RSI: ffffffff89181207 RDI: 0000000000000000
[ 75.255232][ C0] RBP: ffff8880153ee064 R08: 0000000000000001 R09: 0000000000000001
[ 75.263186][ C0] R10: ffffffff81781d88 R11: 0000000000000000 R12: 0000000000000001
[ 75.271139][ C0] R13: ffff8880153ee000 R14: ffff8880153ee064 R15: ffff8881435e0804
[ 75.279113][ C0] ? trace_hardirqs_on+0x38/0x1c0
[ 75.284129][ C0] ? acpi_idle_do_entry+0x1c7/0x250
[ 75.289423][ C0] acpi_idle_enter+0x361/0x500
[ 75.294176][ C0] cpuidle_enter_state+0x1b1/0xc80
[ 75.299278][ C0] cpuidle_enter+0x4a/0xa0
[ 75.303680][ C0] do_idle+0x3eb/0x590
[ 75.307734][ C0] ? arch_cpu_idle_exit+0x30/0x30
[ 75.312762][ C0] ? trace_init_perf_perm_irq_work_exit+0xe/0xe
[ 75.319098][ C0] cpu_startup_entry+0x14/0x20
[ 75.323849][ C0] start_kernel+0x49b/0x4bc
[ 75.328341][ C0] secondary_startup_64_no_verify+0xb0/0xbb
[ 75.335072][ C0] Kernel Offset: disabled
[ 75.339508][ C0] Rebooting in 86400 seconds..