[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.126' (ECDSA) to the list of known hosts. syzkaller login: [ 43.629090][ T6804] IPVS: ftp: loaded support on port[0] = 21 [ 43.703186][ T6804] chnl_net:caif_netlink_parms(): no params data found [ 43.748215][ T6804] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.757782][ T6804] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.766542][ T6804] device bridge_slave_0 entered promiscuous mode [ 43.775259][ T6804] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.782823][ T6804] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.790693][ T6804] device bridge_slave_1 entered promiscuous mode [ 43.809765][ T6804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.820435][ T6804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.840710][ T6804] team0: Port device team_slave_0 added [ 43.848240][ T6804] team0: Port device team_slave_1 added [ 43.864574][ T6804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.871573][ T6804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.898122][ T6804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.910798][ T6804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.918560][ T6804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.944780][ T6804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.005793][ T6804] device hsr_slave_0 entered promiscuous mode [ 44.052575][ T6804] device hsr_slave_1 entered promiscuous mode [ 44.174081][ T6804] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 44.204834][ T6804] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 44.255434][ T6804] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 44.315057][ T6804] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 44.365612][ T6804] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.372804][ T6804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.380757][ T6804] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.387977][ T6804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.425526][ T6804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.437963][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.448480][ T2477] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.458769][ T2477] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.467140][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 44.479371][ T6804] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.491941][ T2529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.500958][ T2529] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.508504][ T2529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.534985][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.544024][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.551088][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.559737][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.568397][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.576977][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.585887][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.597973][ T6804] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 44.610697][ T6804] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.618852][ T2529] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.637015][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.644628][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.658428][ T6804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.676196][ T2529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.693789][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.703044][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.711601][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.720374][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.732954][ T6804] device veth0_vlan entered promiscuous mode [ 44.743930][ T6804] device veth1_vlan entered promiscuous mode [ 44.767234][ T2529] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 44.776103][ T2529] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 44.784580][ T2529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.793185][ T2529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.803281][ T6804] device veth0_macvtap entered promiscuous mode [ 44.813388][ T6804] device veth1_macvtap entered promiscuous mode [ 44.829654][ T6804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.837582][ T2529] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 44.847353][ T2529] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 44.855814][ T2529] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.864493][ T2529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.876989][ T6804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.884525][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.893298][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready executing program executing program executing program [ 45.355106][ T7021] device gretap0 entered promiscuous mode [ 45.414414][ C0] ------------[ cut here ]------------ [ 45.414418][ C0] WARNING: CPU: 0 PID: 7021 at net/core/dev.c:8992 rollback_registered_many+0x1146/0x14a0 [ 45.414420][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 45.414422][ C0] CPU: 0 PID: 7021 Comm: syz-executor494 Not tainted 5.8.0-rc2-syzkaller #0 [ 45.414424][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 45.414425][ C0] Call Trace: [ 45.414426][ C0] dump_stack+0x1f0/0x31e [ 45.414428][ C0] panic+0x264/0x7a0 [ 45.414429][ C0] ? __warn+0x102/0x250 [ 45.414430][ C0] ? rollback_registered_many+0x1146/0x14a0 [ 45.414431][ C0] __warn+0x227/0x250 [ 45.414433][ C0] ? rollback_registered_many+0x1146/0x14a0 [ 45.414434][ C0] report_bug+0x1b1/0x2e0 [ 45.414435][ C0] exc_invalid_op+0x1fb/0x370 [ 45.414437][ C0] asm_exc_invalid_op+0x12/0x20 [ 45.414438][ C0] RIP: 0010:rollback_registered_many+0x1146/0x14a0 [ 45.414443][ C0] Code: 4c 8d bc 24 90 00 00 00 e9 97 f6 ff ff e8 62 c7 07 fb 0f 0b e9 e9 f6 ff ff e8 56 c7 07 fb 0f 0b e9 1c ff ff ff e8 4a c7 07 fb <0f> 0b e9 70 ff ff ff e8 3e c7 07 fb 0f 0b e9 fc f7 ff ff e8 32 c7 [ 45.414444][ C0] RSP: 0018:ffffc900019c71d8 EFLAGS: 00010293 [ 45.414447][ C0] RAX: ffffffff866c8c46 RBX: ffff88809279a0b8 RCX: ffff888093650040 [ 45.414449][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 45.414451][ C0] RBP: ffff88809279a010 R08: ffffffff866c8b6d R09: fffffbfff12b73a1 [ 45.414453][ C0] R10: fffffbfff12b73a1 R11: 0000000000000000 R12: dead000000000122 [ 45.414455][ C0] R13: dffffc0000000000 R14: ffff88809279a068 R15: ffffc900019c72d0 [ 45.414456][ C0] ? rollback_registered_many+0x106d/0x14a0 [ 45.414458][ C0] ? rollback_registered_many+0x1146/0x14a0 [ 45.414459][ C0] ? rollback_registered_many+0x1146/0x14a0 [ 45.414461][ C0] unregister_netdevice_queue+0x2f3/0x4b0 [ 45.414462][ C0] hsr_dev_finalize+0x4d4/0x6d0 [ 45.414463][ C0] hsr_newlink+0x410/0x4c0 [ 45.414465][ C0] rtnl_newlink+0x143e/0x1bf0 [ 45.414466][ C0] ? __lock_acquire+0x116c/0x2c30 [ 45.414467][ C0] ? __mutex_lock_common+0x582/0x2fc0 [ 45.414469][ C0] ? rtnl_setlink+0x490/0x490 [ 45.414470][ C0] rtnetlink_rcv_msg+0x889/0xd40 [ 45.414471][ C0] ? local_bh_enable+0x5/0x20 [ 45.414472][ C0] ? __local_bh_enable_ip+0x133/0x230 [ 45.414474][ C0] ? __dev_queue_xmit+0x1846/0x2940 [ 45.414475][ C0] ? check_preemption_disabled+0x40/0x240 [ 45.414477][ C0] ? debug_smp_processor_id+0x5/0x20 [ 45.414478][ C0] netlink_rcv_skb+0x190/0x3a0 [ 45.414479][ C0] ? rtnetlink_bind+0x80/0x80 [ 45.414480][ C0] netlink_unicast+0x786/0x940 [ 45.414482][ C0] netlink_sendmsg+0xa57/0xd70 [ 45.414483][ C0] ? netlink_getsockopt+0x9e0/0x9e0 [ 45.414484][ C0] ____sys_sendmsg+0x519/0x800 [ 45.414486][ C0] ? import_iovec+0x12a/0x2c0 [ 45.414487][ C0] __sys_sendmsg+0x2b1/0x360 [ 45.414488][ C0] ? _copy_to_user+0x100/0x140 [ 45.414489][ C0] ? move_addr_to_user+0x17e/0x1e0 [ 45.414491][ C0] ? __sys_getsockname+0x1e2/0x220 [ 45.414492][ C0] ? __fd_install+0x251/0x490 [ 45.414494][ C0] ? check_preemption_disabled+0x40/0x240 [ 45.414495][ C0] ? check_preemption_disabled+0x40/0x240 [ 45.414496][ C0] ? do_syscall_64+0x1d/0xe0 [ 45.414498][ C0] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 45.414499][ C0] do_syscall_64+0x73/0xe0 [ 45.414500][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 45.414502][ C0] RIP: 0033:0x443ee9 [ 45.414503][ C0] Code: Bad RIP value. [ 45.414504][ C0] RSP: 002b:00007ffefe036b28 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 45.414507][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443ee9 [ 45.414509][ C0] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 45.414511][ C0] RBP: 00007ffefe036b30 R08: 0000000000000000 R09: 0000000000000000 [ 45.414513][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000b076 [ 45.414515][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 45.416166][ C0] Kernel Offset: disabled