Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.140' (ECDSA) to the list of known hosts. syzkaller login: [ 68.415685][ T8384] IPVS: ftp: loaded support on port[0] = 21 [ 68.518817][ T8384] chnl_net:caif_netlink_parms(): no params data found [ 68.570075][ T8384] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.578621][ T8384] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.589282][ T8384] device bridge_slave_0 entered promiscuous mode [ 68.599252][ T8384] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.607128][ T8384] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.616332][ T8384] device bridge_slave_1 entered promiscuous mode [ 68.637990][ T8384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.649037][ T8384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.673453][ T8384] team0: Port device team_slave_0 added [ 68.680771][ T8384] team0: Port device team_slave_1 added [ 68.699022][ T8384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.706034][ T8384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.732440][ T8384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.745472][ T8384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.753492][ T8384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.780845][ T8384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.808204][ T8384] device hsr_slave_0 entered promiscuous mode [ 68.814951][ T8384] device hsr_slave_1 entered promiscuous mode [ 68.919806][ T8384] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.930129][ T8384] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.946656][ T8384] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.956447][ T8384] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.984819][ T8384] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.992033][ T8384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.000149][ T8384] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.007318][ T8384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.055791][ T8384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.069517][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.082075][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.091666][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.100698][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 69.114801][ T8384] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.127072][ T2962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.135537][ T2962] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.142667][ T2962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.163337][ T2962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.171795][ T2962] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.178952][ T2962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.188423][ T2962] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.199279][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.218880][ T8384] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.230433][ T8384] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.246051][ T2962] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.254767][ T2962] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.263979][ T2962] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.284352][ T8594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.325633][ T8592] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.335657][ T8592] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.355885][ T8384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.378154][ T8594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.401860][ T8384] device veth0_vlan entered promiscuous mode [ 69.409170][ T2962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.419490][ T2962] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.427961][ T2962] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.441185][ T8384] device veth1_vlan entered promiscuous mode [ 69.449421][ T2962] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.473944][ T2962] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.484448][ T2962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.496399][ T8384] device veth0_macvtap entered promiscuous mode [ 69.507295][ T8384] device veth1_macvtap entered promiscuous mode [ 69.526745][ T8384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.534271][ T8592] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.544528][ T8592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.557214][ T8384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.565311][ T2962] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.574594][ T2962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.593030][ T8384] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.602987][ T8384] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.611698][ T8384] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 executing program [ 69.621083][ T8384] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.182450][ C0] ================================================================================ [ 70.192139][ C0] UBSAN: shift-out-of-bounds in ./include/net/red.h:312:18 [ 70.199356][ C0] shift exponent 65 is too large for 64-bit type 'long unsigned int' [ 70.207836][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.11.0-syzkaller #0 [ 70.215590][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.225678][ C0] Call Trace: [ 70.228991][ C0] [ 70.231822][ C0] dump_stack+0x141/0x1d7 [ 70.236177][ C0] ubsan_epilogue+0xb/0x5a [ 70.240606][ C0] __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x181 [ 70.247364][ C0] ? ktime_get+0x1f4/0x230 [ 70.251784][ C0] ? hfsc_change_class+0x3260/0x3760 [ 70.257073][ C0] ? lockdep_hardirqs_on+0x79/0x100 [ 70.262268][ C0] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 70.268015][ C0] ? ktime_get+0x19c/0x230 [ 70.272421][ C0] red_adaptative_timer.cold+0x1bd/0x26c [ 70.278044][ C0] ? red_init+0x260/0x260 [ 70.282365][ C0] call_timer_fn+0x1a5/0x6b0 [ 70.286983][ C0] ? add_timer_on+0x4a0/0x4a0 [ 70.291643][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 70.296513][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 70.301713][ C0] ? red_init+0x260/0x260 [ 70.306066][ C0] __run_timers.part.0+0x67c/0xa50 [ 70.311193][ C0] ? call_timer_fn+0x6b0/0x6b0 [ 70.315940][ C0] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 70.322183][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 70.327392][ C0] ? sched_clock+0x2a/0x40 [ 70.331793][ C0] ? sched_clock_cpu+0x18/0x1f0 [ 70.336637][ C0] run_timer_softirq+0xb3/0x1d0 [ 70.343044][ C0] __do_softirq+0x29b/0x9f6 [ 70.347572][ C0] asm_call_irq_on_stack+0xf/0x20 [ 70.352584][ C0] [ 70.355516][ C0] do_softirq_own_stack+0xaa/0xd0 [ 70.360527][ C0] irq_exit_rcu+0x134/0x200 [ 70.365026][ C0] sysvec_apic_timer_interrupt+0x4d/0x100 [ 70.370736][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 70.376710][ C0] RIP: 0010:acpi_idle_do_entry+0x1c9/0x250 [ 70.382518][ C0] Code: 5d 6b 72 f8 84 db 75 ac e8 a4 64 72 f8 e8 5f 39 78 f8 e9 0c 00 00 00 e8 95 64 72 f8 0f 00 2d 5e 9b c9 00 e8 89 64 72 f8 fb f4 <9c> 5b 81 e3 00 02 00 00 fa 31 ff 48 89 de e8 94 6c 72 f8 48 85 db [ 70.402140][ C0] RSP: 0018:ffffffff8bc07d60 EFLAGS: 00000293 [ 70.408223][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 70.416181][ C0] RDX: ffffffff8bcbc340 RSI: ffffffff8900a467 RDI: 0000000000000000 [ 70.424138][ C0] RBP: ffff888141285064 R08: 0000000000000001 R09: 0000000000000001 [ 70.432112][ C0] R10: ffffffff8178dde8 R11: 0000000000000000 R12: 0000000000000001 [ 70.440084][ C0] R13: ffff888141285000 R14: ffff888141285064 R15: ffff888017843004 [ 70.448060][ C0] ? trace_hardirqs_on+0x38/0x1c0 [ 70.453093][ C0] ? acpi_idle_do_entry+0x1c7/0x250 [ 70.458319][ C0] acpi_idle_enter+0x361/0x500 [ 70.462154][ T19] ------------[ cut here ]------------ [ 70.463082][ C0] cpuidle_enter_state+0x1b1/0xc80 [ 70.468665][ T19] raw_local_irq_restore() called with IRQs enabled [ 70.468727][ T19] WARNING: CPU: 1 PID: 19 at kernel/locking/irqflag-debug.c:10 warn_bogus_irq_restore+0x1d/0x20 [ 70.473767][ C0] cpuidle_enter+0x4a/0xa0 [ 70.473801][ C0] do_idle+0x3e1/0x590 [ 70.473834][ C0] ? arch_cpu_idle_exit+0x30/0x30 [ 70.473875][ C0] ? trace_init_perf_perm_irq_work_exit+0xe/0xe [ 70.480342][ T19] Modules linked in: [ 70.490736][ C0] cpu_startup_entry+0x14/0x20 [ 70.490775][ C0] start_kernel+0x46b/0x48c [ 70.495206][ T19] CPU: 1 PID: 19 Comm: kworker/1:0 Not tainted 5.11.0-syzkaller #0 [ 70.499238][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 70.504308][ T19] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.510542][ C0] ================================================================================ [ 70.514413][ T19] Workqueue: ipv6_addrconf addrconf_dad_work [ 70.519137][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 70.523659][ T19] [ 70.531577][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.11.0-syzkaller #0 [ 70.537491][ T19] RIP: 0010:warn_bogus_irq_restore+0x1d/0x20 [ 70.547487][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.547505][ C0] Call Trace: [ 70.547515][ C0] [ 70.547526][ C0] dump_stack+0x141/0x1d7 [ 70.556820][ T19] Code: bf ff cc cc cc cc cc cc cc cc cc cc cc 80 3d 8a 88 b1 04 00 74 01 c3 48 c7 c7 40 a2 6b 89 c6 05 79 88 b1 04 01 e8 b8 37 bf ff <0f> 0b c3 48 39 77 10 0f 84 97 00 00 00 66 f7 47 22 f0 ff 74 4b 48 [ 70.562752][ C0] panic+0x306/0x73d [ 70.562788][ C0] ? __warn_printk+0xf3/0xf3 [ 70.569383][ T19] RSP: 0018:ffffc90000d96ed8 EFLAGS: 00010286 [ 70.571706][ C0] ? dump_stack+0x1c1/0x1d7 [ 70.579354][ T19] [ 70.585277][ C0] ? ubsan_epilogue+0x3e/0x5a [ 70.585318][ C0] ubsan_epilogue+0x54/0x5a [ 70.595380][ T19] RAX: 0000000000000000 RBX: ffff8880267220f0 RCX: 0000000000000000 [ 70.598613][ C0] __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x181 [ 70.601473][ T19] RDX: ffff8880119c5340 RSI: ffffffff815b6845 RDI: fffff520001b2dcd [ 70.605784][ C0] ? ktime_get+0x1f4/0x230 [ 70.605818][ C0] ? hfsc_change_class+0x3260/0x3760 [ 70.625456][ T19] RBP: 0000000000000200 R08: 0000000000000000 R09: 0000000000000000 [ 70.629308][ C0] ? lockdep_hardirqs_on+0x79/0x100 [ 70.633917][ T19] R10: ffffffff815af71e R11: 0000000000000000 R12: 0000000000000003 [ 70.639923][ C0] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 70.644441][ T19] R13: ffffed1004ce441e R14: 0000000000000001 R15: ffff8880b9d35f40 [ 70.646714][ C0] ? ktime_get+0x19c/0x230 [ 70.651376][ T19] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 70.655864][ C0] red_adaptative_timer.cold+0x1bd/0x26c [ 70.655915][ C0] ? red_init+0x260/0x260 [ 70.663887][ T19] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 70.670595][ C0] call_timer_fn+0x1a5/0x6b0 [ 70.678594][ T19] CR2: 00007f96b63bd000 CR3: 000000001db97000 CR4: 00000000001506e0 [ 70.682968][ C0] ? add_timer_on+0x4a0/0x4a0 [ 70.683003][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 70.683044][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 70.688312][ T19] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 70.696285][ C0] ? red_init+0x260/0x260 [ 70.696322][ C0] __run_timers.part.0+0x67c/0xa50 [ 70.701516][ T19] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 70.709484][ C0] ? call_timer_fn+0x6b0/0x6b0 [ 70.709512][ C0] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 70.715251][ T19] Call Trace: [ 70.723182][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 70.723213][ C0] ? sched_clock+0x2a/0x40 [ 70.727615][ T19] kvm_wait+0xc9/0xe0 [ 70.736523][ C0] ? sched_clock_cpu+0x18/0x1f0 [ 70.736565][ C0] run_timer_softirq+0xb3/0x1d0 [ 70.742219][ T19] __pv_queued_spin_lock_slowpath+0x8b8/0xb40 [ 70.746492][ C0] __do_softirq+0x29b/0x9f6 [ 70.753150][ T19] ? pv_hash+0x100/0x100 [ 70.757669][ C0] asm_call_irq_on_stack+0xf/0x20 [ 70.765696][ T19] ? lock_release+0x720/0x720 [ 70.770288][ C0] [ 70.775166][ T19] do_raw_spin_lock+0x200/0x2b0 [ 70.780293][ C0] do_softirq_own_stack+0xaa/0xd0 [ 70.788292][ T19] ? rwlock_bug.part.0+0x90/0x90 [ 70.792564][ C0] irq_exit_rcu+0x134/0x200 [ 70.792598][ C0] sysvec_apic_timer_interrupt+0x4d/0x100 [ 70.797725][ T19] __dev_queue_xmit+0x1821/0x2e00 [ 70.805672][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 70.805709][ C0] RIP: 0010:acpi_idle_do_entry+0x1c9/0x250 [ 70.810475][ T19] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 70.816791][ C0] Code: 5d 6b 72 f8 84 db 75 ac e8 a4 64 72 f8 e8 5f 39 78 f8 e9 0c 00 00 00 e8 95 64 72 f8 0f 00 2d 5e 9b c9 00 e8 89 64 72 f8 fb f4 <9c> 5b 81 e3 00 02 00 00 fa 31 ff 48 89 de e8 94 6c 72 f8 48 85 db [ 70.816823][ C0] RSP: 0018:ffffffff8bc07d60 EFLAGS: 00000293 [ 70.816847][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 70.816863][ C0] RDX: ffffffff8bcbc340 RSI: ffffffff8900a467 RDI: 0000000000000000 [ 70.816883][ C0] RBP: ffff888141285064 R08: 0000000000000001 R09: 0000000000000001 [ 70.820160][ T19] ? __ip_finish_output+0x396/0x640 [ 70.825326][ C0] R10: ffffffff8178dde8 R11: 0000000000000000 R12: 0000000000000001 [ 70.825347][ C0] R13: ffff888141285000 R14: ffff888141285064 R15: ffff888017843004 [ 70.825373][ C0] ? trace_hardirqs_on+0x38/0x1c0 [ 70.829786][ T19] ? mark_held_locks+0x9f/0xe0 [ 70.833747][ C0] ? acpi_idle_do_entry+0x1c7/0x250 [ 70.833794][ C0] acpi_idle_enter+0x361/0x500 [ 70.838628][ T19] ? ip_finish_output2+0x15e9/0x21f0 [ 70.843460][ C0] cpuidle_enter_state+0x1b1/0xc80 [ 70.843506][ C0] cpuidle_enter+0x4a/0xa0 [ 70.849550][ T19] ip_finish_output2+0xeec/0x21f0 [ 70.854032][ C0] do_idle+0x3e1/0x590 [ 70.854069][ C0] ? arch_cpu_idle_exit+0x30/0x30 [ 70.858310][ T19] ? ip_fragment.constprop.0+0x240/0x240 [ 70.863308][ C0] ? trace_init_perf_perm_irq_work_exit+0xe/0xe [ 70.863349][ C0] cpu_startup_entry+0x14/0x20 [ 70.868014][ T19] ? __ip_finish_output+0x640/0x640 [ 70.870955][ C0] start_kernel+0x46b/0x48c [ 70.875826][ T19] ? __ip_flush_pending_frames.constprop.0+0x2c0/0x2c0 [ 70.880794][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 70.885755][ T19] __ip_finish_output+0x396/0x640 [ 70.895922][ C0] Kernel Offset: disabled [ 71.085251][ C0] Rebooting in 86400 seconds..