[ OK ] Reached target Basic System. Starting System Logging Service... Starting getty on tty2-tty6 if dbus and logind are not available... [ OK ] Started Regular background program processing daemon. Starting OpenBSD Secure Shell server... Starting Permit User Sessions... [ OK ] Started System Logging Service. [ OK ] Started Permit User Sessions. [ OK ] Started OpenBSD Secure Shell server. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. [ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Started Getty on tty2. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.174' (ECDSA) to the list of known hosts. syzkaller login: [ 65.623990][ T27] audit: type=1400 audit(1588491075.790:8): avc: denied { execmem } for pid=7042 comm="syz-executor359" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 65.657892][ T7043] IPVS: ftp: loaded support on port[0] = 21 [ 65.758010][ T7043] chnl_net:caif_netlink_parms(): no params data found [ 65.809718][ T7043] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.817272][ T7043] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.825946][ T7043] device bridge_slave_0 entered promiscuous mode [ 65.836514][ T7043] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.843793][ T7043] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.851727][ T7043] device bridge_slave_1 entered promiscuous mode [ 65.874250][ T7043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.885657][ T7043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.910282][ T7043] team0: Port device team_slave_0 added [ 65.917933][ T7043] team0: Port device team_slave_1 added [ 65.936947][ T7043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.944331][ T7043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.971480][ T7043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.984333][ T7043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.991445][ T7043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.017417][ T7043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.083035][ T7043] device hsr_slave_0 entered promiscuous mode [ 66.139507][ T7043] device hsr_slave_1 entered promiscuous mode [ 66.304172][ T7043] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.363057][ T7043] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.411933][ T7043] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.451560][ T7043] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.517159][ T7043] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.524921][ T7043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.533029][ T7043] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.540188][ T7043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.587491][ T7043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.602860][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.613506][ T2772] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.622373][ T2772] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.631810][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 66.646573][ T7043] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.658485][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.667559][ T2721] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.674728][ T2721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.686774][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.696503][ T2772] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.703644][ T2772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.730127][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.740043][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.748427][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.758223][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.773167][ T7043] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.785506][ T7043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.794114][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.803465][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.825137][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.833327][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.846478][ T7043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.868145][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.878090][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.900757][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.911604][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.922390][ T7043] device veth0_vlan entered promiscuous mode [ 66.930509][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.938278][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.952920][ T7043] device veth1_vlan entered promiscuous mode [ 66.976103][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.985092][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.993569][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.002560][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.013888][ T7043] device veth0_macvtap entered promiscuous mode [ 67.024952][ T7043] device veth1_macvtap entered promiscuous mode [ 67.044484][ T7043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.053524][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.062208][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.074959][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.084523][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.098089][ T7043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.106115][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.115798][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready executing program [ 67.349832][ T7253] netlink: 17 bytes leftover after parsing attributes in process `syz-executor359'. [ 67.371047][ T7253] netlink: 32 bytes leftover after parsing attributes in process `syz-executor359'. [ 67.385158][ T2781] divide error: 0000 [#1] PREEMPT SMP KASAN [ 67.391114][ T2781] CPU: 1 PID: 2781 Comm: kworker/1:12 Not tainted 5.7.0-rc3-syzkaller #0 [ 67.399727][ T2781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.409878][ T2781] Workqueue: ipv6_addrconf addrconf_dad_work [ 67.415857][ T2781] RIP: 0010:tabledist.part.0+0x134/0x160 [ 67.421492][ T2781] Code: 4c 89 e0 48 83 c4 08 5b 5d 41 5c 41 5d c3 e8 83 1d 2b fb 48 81 eb 00 10 00 00 eb aa e8 75 1d 2b fb 8d 4c 2d 00 44 89 e8 31 d2 f1 49 29 ec 49 01 d4 eb c7 48 89 df e8 8a e9 68 fb e9 13 ff ff [ 67.441186][ T2781] RSP: 0018:ffffc9000822f458 EFLAGS: 00010246 [ 67.447245][ T2781] RAX: 00000000602af428 RBX: 0000000000000000 RCX: 0000000000000000 [ 67.455376][ T2781] RDX: 0000000000000000 RSI: ffffffff8648112b RDI: 0000000000000005 [ 67.463335][ T2781] RBP: ffffffff80000000 R08: ffff88809faa81c0 R09: ffffed10125a4866 [ 67.471288][ T2781] R10: ffff888092d2432f R11: ffffed10125a4865 R12: 0000003e42c00000 [ 67.479247][ T2781] R13: 00000000602af428 R14: ffff8880a6f76330 R15: ffff8880a6f76000 [ 67.487391][ T2781] FS: 0000000000000000(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 67.496322][ T2781] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 67.502926][ T2781] CR2: 000055fa3deb1890 CR3: 0000000099dc9000 CR4: 00000000001406e0 [ 67.510902][ T2781] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 67.519050][ T2781] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 67.527016][ T2781] Call Trace: [ 67.530298][ T2781] netem_enqueue+0x412/0x2da0 [ 67.534955][ T2781] ? rwlock_bug.part.0+0x90/0x90 [ 67.539900][ T2781] ? rcu_read_lock_bh_held+0x5a/0xb0 [ 67.545169][ T2781] __dev_queue_xmit+0x154a/0x30a0 [ 67.550172][ T2781] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 67.555453][ T2781] ? mark_lock+0x12b/0xf10 [ 67.559866][ T2781] ? ip6_finish_output2+0x1091/0x25b0 [ 67.565383][ T2781] ? print_usage_bug+0x240/0x240 [ 67.570333][ T2781] ? lock_release+0x800/0x800 [ 67.575365][ T2781] ? lock_downgrade+0x840/0x840 [ 67.580210][ T2781] ? memcpy+0x39/0x60 [ 67.584190][ T2781] ? neigh_resolve_output+0x566/0x930 [ 67.589556][ T2781] neigh_resolve_output+0x566/0x930 [ 67.594749][ T2781] ip6_finish_output2+0x1091/0x25b0 [ 67.600034][ T2781] ? find_held_lock+0x2d/0x110 [ 67.604996][ T2781] ? ip6_frag_next+0xb40/0xb40 [ 67.609780][ T2781] ? lock_downgrade+0x840/0x840 [ 67.614611][ T2781] ? __ip6_finish_output+0x442/0xab0 [ 67.619957][ T2781] __ip6_finish_output+0x442/0xab0 [ 67.625320][ T2781] ip6_finish_output+0x34/0x1f0 [ 67.630144][ T2781] ip6_output+0x239/0x810 [ 67.634481][ T2781] ? ip6_finish_output+0x1f0/0x1f0 [ 67.639592][ T2781] ? __ip6_finish_output+0xab0/0xab0 [ 67.644941][ T2781] ndisc_send_skb+0xf40/0x14b0 [ 67.649697][ T2781] ? nf_hook.constprop.0+0x520/0x520 [ 67.654959][ T2781] ? __alloc_skb+0x3a7/0x5a0 [ 67.659525][ T2781] ? detach_if_pending+0x530/0x530 [ 67.664726][ T2781] ? skb_set_owner_w+0x24e/0x400 [ 67.669719][ T2781] ndisc_send_ns+0x3b0/0x860 [ 67.674562][ T2781] ? ndisc_netdev_event+0x5f0/0x5f0 [ 67.679762][ T2781] ? mark_held_locks+0x9f/0xe0 [ 67.686354][ T2781] ? __local_bh_enable_ip+0x159/0x270 [ 67.691912][ T2781] ? lockdep_hardirqs_on+0x463/0x620 [ 67.697267][ T2781] addrconf_dad_work+0xc4a/0x1280 [ 67.702283][ T2781] ? addrconf_dad_completed+0xbb0/0xbb0 [ 67.709453][ T2781] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 67.715420][ T2781] ? _raw_spin_unlock_irq+0x1f/0x80 [ 67.720595][ T2781] process_one_work+0x965/0x16a0 [ 67.725513][ T2781] ? lock_release+0x800/0x800 [ 67.730181][ T2781] ? pwq_dec_nr_in_flight+0x310/0x310 [ 67.735539][ T2781] ? rwlock_bug.part.0+0x90/0x90 [ 67.740453][ T2781] worker_thread+0x96/0xe20 [ 67.744934][ T2781] ? process_one_work+0x16a0/0x16a0 [ 67.750106][ T2781] kthread+0x388/0x470 [ 67.754174][ T2781] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 67.759869][ T2781] ret_from_fork+0x24/0x30 [ 67.764388][ T2781] Modules linked in: [ 67.768349][ T2781] ---[ end trace a568a417cb2cbbd3 ]--- [ 67.773937][ T2781] RIP: 0010:tabledist.part.0+0x134/0x160 [ 67.779692][ T2781] Code: 4c 89 e0 48 83 c4 08 5b 5d 41 5c 41 5d c3 e8 83 1d 2b fb 48 81 eb 00 10 00 00 eb aa e8 75 1d 2b fb 8d 4c 2d 00 44 89 e8 31 d2 f1 49 29 ec 49 01 d4 eb c7 48 89 df e8 8a e9 68 fb e9 13 ff ff [ 67.799330][ T2781] RSP: 0018:ffffc9000822f458 EFLAGS: 00010246 [ 67.805387][ T2781] RAX: 00000000602af428 RBX: 0000000000000000 RCX: 0000000000000000 [ 67.813385][ T2781] RDX: 0000000000000000 RSI: ffffffff8648112b RDI: 0000000000000005 [ 67.821464][ T2781] RBP: ffffffff80000000 R08: ffff88809faa81c0 R09: ffffed10125a4866 [ 67.829471][ T2781] R10: ffff888092d2432f R11: ffffed10125a4865 R12: 0000003e42c00000 [ 67.837433][ T2781] R13: 00000000602af428 R14: ffff8880a6f76330 R15: ffff8880a6f76000 [ 67.845440][ T2781] FS: 0000000000000000(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 67.854408][ T2781] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 67.861022][ T2781] CR2: 000055fa3deb1890 CR3: 0000000099dc9000 CR4: 00000000001406e0 [ 67.869043][ T2781] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 67.877010][ T2781] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 67.885469][ T2781] Kernel panic - not syncing: Fatal exception in interrupt [ 67.894147][ T2781] Kernel Offset: disabled [ 67.898492][ T2781] Rebooting in 86400 seconds..