Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.139' (ECDSA) to the list of known hosts. syzkaller login: [ 65.143765][ T8487] IPVS: ftp: loaded support on port[0] = 21 [ 65.265270][ T8487] chnl_net:caif_netlink_parms(): no params data found [ 65.319891][ T8487] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.328181][ T8487] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.337120][ T8487] device bridge_slave_0 entered promiscuous mode [ 65.346505][ T8487] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.354679][ T8487] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.363106][ T8487] device bridge_slave_1 entered promiscuous mode [ 65.383939][ T8487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.395434][ T8487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.419156][ T8487] team0: Port device team_slave_0 added [ 65.426644][ T8487] team0: Port device team_slave_1 added [ 65.444567][ T8487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.451685][ T8487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.478604][ T8487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.492792][ T8487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.500047][ T8487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.527925][ T8487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.558122][ T8487] device hsr_slave_0 entered promiscuous mode [ 65.565267][ T8487] device hsr_slave_1 entered promiscuous mode [ 65.667832][ T8487] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.677843][ T8487] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.688389][ T8487] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.699153][ T8487] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.725781][ T8487] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.732983][ T8487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.740772][ T8487] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.747919][ T8487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.796992][ T8487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.809951][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.821492][ T3002] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.829774][ T3002] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.838694][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 65.852183][ T8487] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.865694][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.874688][ T3002] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.881848][ T3002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.901826][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.910194][ T3002] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.917311][ T3002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.926994][ T3002] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.946578][ T8487] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.959039][ T8487] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.973273][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.982320][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.991142][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.000086][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.021176][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.029199][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.037502][ T3001] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.048521][ T8487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.069599][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.092693][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.102255][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.110410][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.123632][ T8487] device veth0_vlan entered promiscuous mode [ 66.135554][ T8487] device veth1_vlan entered promiscuous mode [ 66.157806][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.166963][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.176576][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.189357][ T8487] device veth0_macvtap entered promiscuous mode [ 66.201444][ T8487] device veth1_macvtap entered promiscuous mode [ 66.222612][ T8487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.230171][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.240588][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.254223][ T8487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.262795][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.273435][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.286318][ T8487] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.296179][ T8487] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.305882][ T8487] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 executing program [ 66.315846][ T8487] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 executing program executing program executing program executing program executing program [ 66.405470][ T8724] divide error: 0000 [#1] PREEMPT SMP KASAN [ 66.411524][ T8724] CPU: 1 PID: 8724 Comm: syz-executor313 Not tainted 5.10.0-rc7-syzkaller #0 [ 66.420276][ T8724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 66.430434][ T8724] RIP: 0010:netem_enqueue+0x154e/0x3560 [ 66.435972][ T8724] Code: 74 1f 4c 89 44 24 20 89 4c 24 18 89 44 24 10 e8 b8 33 94 fa 4c 8b 44 24 20 8b 4c 24 18 8b 44 24 10 48 8b 34 24 31 d2 2b 4e 74 f1 48 b8 00 00 00 00 00 fc ff df 49 01 d6 4c 89 f1 48 c1 e9 03 [ 66.455702][ T8724] RSP: 0018:ffffc90001dcf680 EFLAGS: 00010246 [ 66.461747][ T8724] RAX: 00000000eac05584 RBX: 0000000000000040 RCX: 0000000000000000 [ 66.469705][ T8724] RDX: 0000000000000000 RSI: ffff8880207e3dc0 RDI: ffff8880207e3e34 [ 66.477652][ T8724] RBP: ffff88801b5b0000 R08: ffff8880207e3e88 R09: ffffffff8cecae4f [ 66.491163][ T8724] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 66.499123][ T8724] R13: ffff88801b5b0330 R14: ffff8880223e3000 R15: 0000000000000000 [ 66.507207][ T8724] FS: 00007f69b1a27700(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000 [ 66.516159][ T8724] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 66.522740][ T8724] CR2: 00000000200001c0 CR3: 0000000013214000 CR4: 00000000001506e0 [ 66.530704][ T8724] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 66.538663][ T8724] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 66.546619][ T8724] Call Trace: [ 66.550242][ T8724] ? lock_release+0x710/0x710 [ 66.554909][ T8724] ? do_raw_spin_lock+0x120/0x2b0 [ 66.560149][ T8724] ? netem_dump+0x1120/0x1120 [ 66.564832][ T8724] ? rwlock_bug.part.0+0x90/0x90 [ 66.569764][ T8724] __dev_queue_xmit+0x18dd/0x2da0 [ 66.574783][ T8724] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 66.580079][ T8724] ? memcpy+0x39/0x60 [ 66.584037][ T8724] ? memcpy+0x39/0x60 [ 66.587995][ T8724] ? __skb_clone+0x586/0x770 [ 66.592580][ T8724] netlink_deliver_tap+0x92e/0xb70 [ 66.597668][ T8724] netlink_unicast+0x5e5/0x7d0 [ 66.602428][ T8724] ? netlink_attachskb+0x810/0x810 [ 66.607531][ T8724] ? __check_object_size+0x30/0x3f0 [ 66.612714][ T8724] netlink_sendmsg+0x856/0xd90 [ 66.617467][ T8724] ? netlink_unicast+0x7d0/0x7d0 [ 66.622393][ T8724] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 66.627664][ T8724] ? netlink_unicast+0x7d0/0x7d0 [ 66.632582][ T8724] sock_sendmsg+0xcf/0x120 [ 66.636977][ T8724] ____sys_sendmsg+0x6e8/0x810 [ 66.641762][ T8724] ? kernel_sendmsg+0x50/0x50 [ 66.647386][ T8724] ? do_recvmmsg+0x6c0/0x6c0 [ 66.651970][ T8724] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 66.658560][ T8724] ___sys_sendmsg+0xf3/0x170 [ 66.663215][ T8724] ? sendmsg_copy_msghdr+0x160/0x160 [ 66.669026][ T8724] ? __fget_files+0x272/0x400 [ 66.673705][ T8724] ? lock_downgrade+0x6d0/0x6d0 [ 66.678641][ T8724] ? percpu_counter_add_batch+0xbd/0x180 [ 66.684651][ T8724] ? __fget_files+0x294/0x400 [ 66.690661][ T8724] ? __fget_light+0xea/0x280 [ 66.695490][ T8724] __sys_sendmsg+0xe5/0x1b0 [ 66.700267][ T8724] ? __sys_sendmsg_sock+0xb0/0xb0 [ 66.705413][ T8724] ? __do_sys_futex+0x2a2/0x470 [ 66.710806][ T8724] ? syscall_enter_from_user_mode+0x1d/0x50 [ 66.716731][ T8724] do_syscall_64+0x2d/0x70 [ 66.721336][ T8724] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 66.727555][ T8724] RIP: 0033:0x44a3d9 [ 66.731773][ T8724] Code: e8 cc 0c 03 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 03 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 66.751657][ T8724] RSP: 002b:00007f69b1a26db8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 66.760056][ T8724] RAX: ffffffffffffffda RBX: 00000000006dfc48 RCX: 000000000044a3d9 [ 66.768462][ T8724] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000004 [ 66.776944][ T8724] RBP: 00000000006dfc40 R08: 0000000000000000 R09: 0000000000000000 [ 66.785421][ T8724] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dfc4c [ 66.793373][ T8724] R13: 00007ffe9e78bbdf R14: 00007f69b1a279c0 R15: 00000000006dfc4c [ 66.801343][ T8724] Modules linked in: [ 66.805329][ T8724] ---[ end trace a8a57746b952ae2e ]--- [ 66.811047][ T8724] RIP: 0010:netem_enqueue+0x154e/0x3560 [ 66.816858][ T8724] Code: 74 1f 4c 89 44 24 20 89 4c 24 18 89 44 24 10 e8 b8 33 94 fa 4c 8b 44 24 20 8b 4c 24 18 8b 44 24 10 48 8b 34 24 31 d2 2b 4e 74 f1 48 b8 00 00 00 00 00 fc ff df 49 01 d6 4c 89 f1 48 c1 e9 03 [ 66.836983][ T8724] RSP: 0018:ffffc90001dcf680 EFLAGS: 00010246 [ 66.843307][ T8724] RAX: 00000000eac05584 RBX: 0000000000000040 RCX: 0000000000000000 [ 66.851274][ T8724] RDX: 0000000000000000 RSI: ffff8880207e3dc0 RDI: ffff8880207e3e34 [ 66.859887][ T8724] RBP: ffff88801b5b0000 R08: ffff8880207e3e88 R09: ffffffff8cecae4f [ 66.867960][ T8724] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 66.876063][ T8724] R13: ffff88801b5b0330 R14: ffff8880223e3000 R15: 0000000000000000 [ 66.884725][ T8724] FS: 00007f69b1a27700(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000 [ 66.893784][ T8724] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 66.902237][ T8724] CR2: 00000000200001c0 CR3: 0000000013214000 CR4: 00000000001506e0 [ 66.910558][ T8724] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 66.919314][ T8724] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 66.927495][ T8724] Kernel panic - not syncing: Fatal exception in interrupt [ 66.936400][ T8724] Kernel Offset: disabled [ 66.940730][ T8724] Rebooting in 86400 seconds..