Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.10.13' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 60.992294][ T6816] IPVS: ftp: loaded support on port[0] = 21 [ 61.028510][ T6816] netlink: 24 bytes leftover after parsing attributes in process `syz-executor287'. [ 61.086327][ T6816] device veth1 entered promiscuous mode [ 61.126766][ C1] ------------[ cut here ]------------ [ 61.126771][ C1] WARNING: CPU: 1 PID: 6816 at net/core/dev.c:9000 rollback_registered_many+0xbdb/0xf60 [ 61.126774][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 61.126777][ C1] CPU: 1 PID: 6816 Comm: syz-executor287 Not tainted 5.8.0-rc2-syzkaller #0 [ 61.126781][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 61.126782][ C1] Call Trace: [ 61.126784][ C1] dump_stack+0x18f/0x20d [ 61.126786][ C1] panic+0x2e3/0x75c [ 61.126788][ C1] ? __warn_printk+0xf3/0xf3 [ 61.126789][ C1] ? printk+0xba/0xed [ 61.126791][ C1] ? log_store.cold+0x16/0x16 [ 61.126793][ C1] ? __warn.cold+0x5/0x45 [ 61.126795][ C1] ? __warn+0xd6/0x1f2 [ 61.126797][ C1] ? rollback_registered_many+0xbdb/0xf60 [ 61.126799][ C1] __warn.cold+0x20/0x45 [ 61.126801][ C1] ? rollback_registered_many+0xbdb/0xf60 [ 61.126803][ C1] report_bug+0x1bd/0x210 [ 61.126804][ C1] exc_invalid_op+0x24d/0x400 [ 61.126806][ C1] ? exc_overflow+0x40/0x40 [ 61.126808][ C1] ? mark_lock+0xbc/0x1710 [ 61.126810][ C1] asm_exc_invalid_op+0x12/0x20 [ 61.126812][ C1] RIP: 0010:rollback_registered_many+0xbdb/0xf60 [ 61.126820][ C1] Code: 00 00 31 f6 4c 89 f7 e8 13 d9 fc ff e9 4f fe ff ff 4c 89 e7 e9 48 fd ff ff e8 61 30 3e fb 0f 0b e9 da fd ff ff e8 55 30 3e fb <0f> 0b e9 18 fe ff ff e8 49 30 3e fb 0f b6 2d 14 31 74 04 31 ff 89 [ 61.126822][ C1] RSP: 0018:ffffc900018b6f60 EFLAGS: 00010293 [ 61.126827][ C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffffff86351de5 [ 61.126830][ C1] RDX: ffff888097b74080 RSI: ffffffff86351ffb RDI: 0000000000000005 [ 61.126833][ C1] RBP: ffff88808e0b60b8 R08: 0000000000000000 R09: ffffffff8a7b0107 [ 61.126836][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880a025fe00 [ 61.126839][ C1] R13: 0000000000034960 R14: ffff88808e0b6000 R15: 0000000000000000 [ 61.126842][ C1] ? rollback_registered_many+0x9c5/0xf60 [ 61.126844][ C1] ? rollback_registered_many+0xbdb/0xf60 [ 61.126846][ C1] ? dev_xdp_uninstall+0x3f0/0x3f0 [ 61.126848][ C1] ? dev_set_mtu_ext+0x590/0x590 [ 61.126850][ C1] unregister_netdevice_queue+0x2dd/0x570 [ 61.126853][ C1] ? unregister_netdevice_many+0x50/0x50 [ 61.126854][ C1] ? hsr_add_port+0x4f3/0x790 [ 61.126856][ C1] hsr_dev_finalize+0x5ce/0x746 [ 61.126858][ C1] hsr_newlink+0x27c/0x520 [ 61.126860][ C1] ? hsr_dellink+0x70/0x70 [ 61.126862][ C1] ? rtnl_create_link+0x184/0xad0 [ 61.126864][ C1] ? hsr_dellink+0x70/0x70 [ 61.126866][ C1] __rtnl_newlink+0x1090/0x1730 [ 61.126868][ C1] ? rtnl_setlink+0x3c0/0x3c0 [ 61.126870][ C1] ? lock_downgrade+0x820/0x820 [ 61.126872][ C1] ? check_preemption_disabled+0x38/0x220 [ 61.126874][ C1] ? is_bpf_text_address+0xcb/0x160 [ 61.126882][ C1] ? kernel_text_address+0xbd/0xf0 [ 61.126884][ C1] ? __kernel_text_address+0x9/0x30 [ 61.126886][ C1] ? unwind_get_return_address+0x51/0x90 [ 61.126888][ C1] ? profile_setup.cold+0xc1/0xc1 [ 61.126890][ C1] ? arch_stack_walk+0x97/0xf0 [ 61.126892][ C1] ? stack_trace_save+0x8c/0xc0 [ 61.126894][ C1] ? stack_trace_consume_entry+0x160/0x160 [ 61.126896][ C1] ? mark_lock+0xbc/0x1710 [ 61.126898][ C1] ? trace_kmalloc+0xfd/0x130 [ 61.126900][ C1] ? kmem_cache_alloc_trace+0x168/0x2d0 [ 61.126902][ C1] rtnl_newlink+0x64/0xa0 [ 61.126904][ C1] ? __rtnl_newlink+0x1730/0x1730 [ 61.126906][ C1] rtnetlink_rcv_msg+0x44e/0xad0 [ 61.126908][ C1] ? rtnetlink_put_metrics+0x510/0x510 [ 61.126910][ C1] ? lock_acquire+0x1f1/0xad0 [ 61.126912][ C1] ? netlink_deliver_tap+0x146/0xb70 [ 61.126914][ C1] netlink_rcv_skb+0x15a/0x430 [ 61.126916][ C1] ? rtnetlink_put_metrics+0x510/0x510 [ 61.126918][ C1] ? netlink_ack+0xa10/0xa10 [ 61.126920][ C1] netlink_unicast+0x533/0x7d0 [ 61.126922][ C1] ? netlink_attachskb+0x810/0x810 [ 61.126924][ C1] ? _copy_from_iter_full+0x247/0x890 [ 61.126926][ C1] ? __phys_addr+0x9a/0x110 [ 61.126928][ C1] ? __phys_addr_symbol+0x2c/0x70 [ 61.126930][ C1] ? __check_object_size+0x171/0x3e4 [ 61.126932][ C1] netlink_sendmsg+0x856/0xd90 [ 61.126934][ C1] ? netlink_unicast+0x7d0/0x7d0 [ 61.126936][ C1] ? netlink_unicast+0x7d0/0x7d0 [ 61.126937][ C1] sock_sendmsg+0xcf/0x120 [ 61.126939][ C1] ____sys_sendmsg+0x6e8/0x810 [ 61.126941][ C1] ? kernel_sendmsg+0x50/0x50 [ 61.126943][ C1] ? do_recvmmsg+0x6d0/0x6d0 [ 61.126945][ C1] ? find_held_lock+0x2d/0x110 [ 61.126947][ C1] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 61.126950][ C1] ? __wake_up_common_lock+0xde/0x130 [ 61.126951][ C1] ___sys_sendmsg+0xf3/0x170 [ 61.126954][ C1] ? sendmsg_copy_msghdr+0x160/0x160 [ 61.126956][ C1] ? lock_downgrade+0x820/0x820 [ 61.126957][ C1] ? __might_fault+0x190/0x1d0 [ 61.126959][ C1] ? _copy_to_user+0x126/0x160 [ 61.126961][ C1] ? move_addr_to_user+0xb5/0x200 [ 61.126963][ C1] ? __fget_light+0x215/0x280 [ 61.126965][ C1] __sys_sendmsg+0xe5/0x1b0 [ 61.126967][ C1] ? __sys_sendmsg_sock+0xb0/0xb0 [ 61.126969][ C1] ? check_preemption_disabled+0x38/0x220 [ 61.126971][ C1] ? do_syscall_64+0x1c/0xe0 [ 61.126974][ C1] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 61.126975][ C1] do_syscall_64+0x60/0xe0 [ 61.126978][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 61.126979][ C1] RIP: 0033:0x440e59 [ 61.126981][ C1] Code: Bad RIP value. [ 61.126983][ C1] RSP: 002b:00007ffe4addd8f8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 61.126988][ C1] RAX: ffffffffffffffda RBX: 00000000004a2630 RCX: 0000000000440e59 [ 61.126991][ C1] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 61.126995][ C1] RBP: 00007ffe4addd900 R08: 0000000120080522 R09: 0000000120080522 [ 61.126998][ C1] R10: 0000000120080522 R11: 0000000000000246 R12: 00000000004a2630 [ 61.127001][ C1] R13: 00000000004023f0 R14: 0000000000000000 R15: 0000000000000000 [ 61.128121][ C1] Kernel Offset: disabled