[ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.132' (ECDSA) to the list of known hosts. 2020/04/08 00:22:43 parsed 1 programs syzkaller login: [ 61.061001][ T7013] as (7013) used greatest stack depth: 23088 bytes left 2020/04/08 00:22:45 executed programs: 0 [ 62.160416][ T7021] IPVS: ftp: loaded support on port[0] = 21 [ 62.252741][ T7021] chnl_net:caif_netlink_parms(): no params data found [ 62.300362][ T7021] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.308641][ T7021] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.317150][ T7021] device bridge_slave_0 entered promiscuous mode [ 62.326427][ T7021] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.333500][ T7021] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.341683][ T7021] device bridge_slave_1 entered promiscuous mode [ 62.360986][ T7021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.371687][ T7021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.392608][ T7021] team0: Port device team_slave_0 added [ 62.401052][ T7021] team0: Port device team_slave_1 added [ 62.416965][ T7021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.423900][ T7021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.449960][ T7021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.462374][ T7021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.469432][ T7021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.495403][ T7021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.567891][ T7021] device hsr_slave_0 entered promiscuous mode [ 62.614422][ T7021] device hsr_slave_1 entered promiscuous mode [ 62.746858][ T7021] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.788068][ T7021] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.837130][ T7021] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.876530][ T7021] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.944748][ T7021] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.951975][ T7021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.960004][ T7021] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.967164][ T7021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.029219][ T7021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.043642][ T3434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.057943][ T3434] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.066182][ T3434] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.075714][ T3434] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 63.092377][ T7021] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.103970][ T2688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.115278][ T2688] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.122361][ T2688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.149045][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.158562][ T2952] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.165714][ T2952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.187905][ T2688] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.197539][ T2688] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.216735][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.225386][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.233562][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.243790][ T7021] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.263409][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.271061][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.286560][ T7021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.304644][ T3434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.313402][ T3434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.336307][ T3434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.346256][ T3434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.354706][ T7021] device veth0_vlan entered promiscuous mode [ 63.364565][ T3434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.372210][ T3434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.381841][ T7021] device veth1_vlan entered promiscuous mode [ 63.402534][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.410956][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.419407][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.428330][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.438931][ T7021] device veth0_macvtap entered promiscuous mode [ 63.449259][ T7021] device veth1_macvtap entered promiscuous mode [ 63.465885][ T7021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.473248][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.483850][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.491954][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.501104][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.514022][ T7021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.521633][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.530378][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.127367][ T7233] ------------[ cut here ]------------ [ 64.132966][ T7233] WARNING: CPU: 1 PID: 7233 at crypto/af_alg.c:404 af_alg_make_sg+0x399/0x400 [ 64.141802][ T7233] Kernel panic - not syncing: panic_on_warn set ... [ 64.148383][ T7233] CPU: 1 PID: 7233 Comm: syz-executor.0 Not tainted 5.6.0-syzkaller #0 [ 64.156594][ T7233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 64.166762][ T7233] Call Trace: [ 64.170041][ T7233] dump_stack+0x188/0x20d [ 64.174368][ T7233] ? af_alg_make_sg+0x2a0/0x400 [ 64.179221][ T7233] panic+0x2e3/0x75c [ 64.183104][ T7233] ? add_taint.cold+0x16/0x16 [ 64.187764][ T7233] ? printk+0xba/0xed [ 64.191739][ T7233] ? kmsg_dump_rewind_nolock+0xd9/0xd9 [ 64.197176][ T7233] ? __warn.cold+0x14/0x35 [ 64.201569][ T7233] ? __warn+0xd5/0x1c8 [ 64.205624][ T7233] ? af_alg_make_sg+0x399/0x400 [ 64.210454][ T7233] __warn.cold+0x2f/0x35 [ 64.214685][ T7233] ? af_alg_make_sg+0x399/0x400 [ 64.219517][ T7233] report_bug+0x27b/0x2f0 [ 64.223827][ T7233] do_error_trap+0x12b/0x220 [ 64.228394][ T7233] ? af_alg_make_sg+0x399/0x400 [ 64.233237][ T7233] do_invalid_op+0x32/0x40 [ 64.237667][ T7233] ? af_alg_make_sg+0x399/0x400 [ 64.242500][ T7233] invalid_op+0x23/0x30 [ 64.246631][ T7233] RIP: 0010:af_alg_make_sg+0x399/0x400 [ 64.252074][ T7233] Code: 5c 24 2b 31 ff 89 de e8 c5 b9 f8 fd 84 db 74 0e e8 8c b8 f8 fd 48 8b 04 24 48 89 44 24 70 e8 7e b8 f8 fd 0f 0b e8 77 b8 f8 fd <0f> 0b c7 44 24 4c ea ff ff ff e9 4b ff ff ff 48 89 df e8 40 6e 36 [ 64.271652][ T7233] RSP: 0018:ffffc90001eb7990 EFLAGS: 00010293 [ 64.277692][ T7233] RAX: ffff888091aa2140 RBX: ffff888091e65220 RCX: ffffffff837a763d [ 64.285639][ T7233] RDX: 0000000000000000 RSI: ffffffff837a78f9 RDI: 0000000000000005 [ 64.293598][ T7233] RBP: 000000001fb72254 R08: ffff888091aa2140 R09: ffffed1012354429 [ 64.301554][ T7233] R10: ffff888091aa2147 R11: ffffed1012354428 R12: 0000000000000000 [ 64.309504][ T7233] R13: dffffc0000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 64.317472][ T7233] ? af_alg_make_sg+0xdd/0x400 [ 64.322213][ T7233] ? af_alg_make_sg+0x399/0x400 [ 64.327048][ T7233] ? mark_held_locks+0x9f/0xe0 [ 64.331787][ T7233] ? free_unref_page_commit+0x17a/0x3c0 [ 64.337310][ T7233] ? free_unref_page+0xf9/0x180 [ 64.342152][ T7233] ? af_alg_release+0x110/0x110 [ 64.347113][ T7233] ? af_alg_free_sg+0xa8/0x2f0 [ 64.351854][ T7233] hash_sendmsg+0x45c/0xad0 [ 64.356339][ T7233] ? security_socket_sendmsg+0x82/0xb0 [ 64.361770][ T7233] ? hash_recvmsg+0xa80/0xa80 [ 64.366427][ T7233] sock_sendmsg+0xcf/0x120 [ 64.371663][ T7233] ____sys_sendmsg+0x6bf/0x7e0 [ 64.376509][ T7233] ? get_compat_msghdr+0xd1/0x120 [ 64.381531][ T7233] ? kernel_sendmsg+0x50/0x50 [ 64.386200][ T7233] ___sys_sendmsg+0x100/0x170 [ 64.390876][ T7233] ? sendmsg_copy_msghdr+0x70/0x70 [ 64.395978][ T7233] ? __fget_files+0x32f/0x500 [ 64.401011][ T7233] ? ksys_dup3+0x3c0/0x3c0 [ 64.405411][ T7233] ? __fget_light+0x20e/0x270 [ 64.410165][ T7233] __sys_sendmsg+0xec/0x1b0 [ 64.414664][ T7233] ? __sys_sendmsg_sock+0xb0/0xb0 [ 64.419675][ T7233] ? __ia32_sys_futex_time32+0x32a/0x494 [ 64.425299][ T7233] ? trace_hardirqs_off_caller+0x55/0x230 [ 64.431008][ T7233] ? do_fast_syscall_32+0xcc/0xe90 [ 64.436099][ T7233] do_fast_syscall_32+0x270/0xe90 [ 64.441133][ T7233] entry_SYSENTER_compat+0x70/0x7f [ 64.446945][ T7233] Kernel Offset: disabled [ 64.451330][ T7233] Rebooting in 86400 seconds..