[ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.18' (ECDSA) to the list of known hosts. 2020/07/29 19:58:00 parsed 1 programs 2020/07/29 19:58:00 executed programs: 0 syzkaller login: [ 1046.750052][ T6842] IPVS: ftp: loaded support on port[0] = 21 [ 1046.830043][ T6842] chnl_net:caif_netlink_parms(): no params data found [ 1046.873571][ T6842] bridge0: port 1(bridge_slave_0) entered blocking state [ 1046.881563][ T6842] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.890824][ T6842] device bridge_slave_0 entered promiscuous mode [ 1046.899359][ T6842] bridge0: port 2(bridge_slave_1) entered blocking state [ 1046.907153][ T6842] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.914689][ T6842] device bridge_slave_1 entered promiscuous mode [ 1046.931937][ T6842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1046.942330][ T6842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1046.961920][ T6842] team0: Port device team_slave_0 added [ 1046.969550][ T6842] team0: Port device team_slave_1 added [ 1046.984713][ T6842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1046.991766][ T6842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1047.018455][ T6842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1047.030798][ T6842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1047.038267][ T6842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1047.064777][ T6842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1047.137856][ T6842] device hsr_slave_0 entered promiscuous mode [ 1047.176521][ T6842] device hsr_slave_1 entered promiscuous mode [ 1047.282898][ T6842] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1047.337430][ T6842] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1047.397131][ T6842] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1047.467080][ T6842] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1047.518129][ T6842] bridge0: port 2(bridge_slave_1) entered blocking state [ 1047.525287][ T6842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1047.532744][ T6842] bridge0: port 1(bridge_slave_0) entered blocking state [ 1047.539846][ T6842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1047.573675][ T6842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1047.587699][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1047.597859][ T17] bridge0: port 1(bridge_slave_0) entered disabled state [ 1047.605773][ T17] bridge0: port 2(bridge_slave_1) entered disabled state [ 1047.613342][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1047.625137][ T6842] 8021q: adding VLAN 0 to HW filter on device team0 [ 1047.636006][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1047.644371][ T2789] bridge0: port 1(bridge_slave_0) entered blocking state [ 1047.651451][ T2789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1047.666942][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1047.675988][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 1047.683006][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1047.702199][ T6842] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1047.712989][ T6842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1047.725973][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1047.734238][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1047.743113][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1047.751672][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1047.760449][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1047.768097][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1047.783612][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1047.791391][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1047.803092][ T6842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1047.820674][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1047.829468][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1047.848336][ T6842] device veth0_vlan entered promiscuous mode [ 1047.856751][ T7052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1047.864776][ T7052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1047.873942][ T7052] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1047.882884][ T7052] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1047.893180][ T6842] device veth1_vlan entered promiscuous mode [ 1047.910842][ T7055] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1047.919262][ T7055] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1047.927724][ T7055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1047.936308][ T7055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1047.946731][ T6842] device veth0_macvtap entered promiscuous mode [ 1047.955052][ T6842] device veth1_macvtap entered promiscuous mode [ 1047.969978][ T6842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1047.977448][ T7052] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1047.986653][ T7052] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1047.994403][ T7052] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1048.003204][ T7052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1048.014469][ T6842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1048.022073][ T7055] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1048.031008][ T7055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1048.189807][ T7058] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1048.199219][ T7058] tunl0: Master is either lo or non-ether device [ 1048.224808][ T7063] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1048.251746][ T7068] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1048.262766][ T7068] sit0: Master is either lo or non-ether device [ 1048.314385][ T7073] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1048.508573][ T7082] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1048.518116][ T7082] vcan0: Master is either lo or non-ether device [ 1048.696291][ T7094] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1048.738976][ T7101] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1048.788548][ T7110] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1049.038018][ T7119] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1049.051948][ T7119] wg0: Master is either lo or non-ether device [ 1049.098553][ T7129] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1049.110747][ T7129] bridge_slave_0: Device is already in use. [ 1049.190468][ T7129] bridge0: port 1(bridge_slave_0) entered disabled state [ 1049.200236][ T7129] device bridge_slave_0 left promiscuous mode [ 1049.208417][ T7129] bridge0: port 1(bridge_slave_0) entered disabled state [ 1049.579301][ T7150] bond_slave_1: Device is already in use. [ 1049.646479][ T7150] bond0: (slave bond_slave_1): Releasing backup interface [ 1050.092024][ T7178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1050.120438][ T7178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1050.377589][ T7195] hsr_slave_1: Device is already in use. [ 1050.496239][ T7217] ------------[ cut here ]------------ [ 1050.502114][ T7217] WARNING: CPU: 0 PID: 7217 at drivers/net/ipvlan/ipvlan_l3s.c:148 ipvlan_l3s_unregister+0x145/0x1d0 [ 1050.513342][ T7217] Kernel panic - not syncing: panic_on_warn set ... [ 1050.519928][ T7217] CPU: 0 PID: 7217 Comm: syz-executor.0 Not tainted 5.8.0-rc7-syzkaller #0 [ 1050.528490][ T7217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1050.538516][ T7217] Call Trace: [ 1050.541846][ T7217] dump_stack+0x1f0/0x31e [ 1050.546225][ T7217] panic+0x264/0x7a0 [ 1050.550090][ T7217] ? __warn+0x102/0x250 [ 1050.554215][ T7217] ? ipvlan_l3s_unregister+0x145/0x1d0 [ 1050.559771][ T7217] ? ipvlan_l3s_unregister+0x145/0x1d0 [ 1050.565204][ T7217] __warn+0x227/0x250 [ 1050.569164][ T7217] ? ipvlan_l3s_unregister+0x145/0x1d0 [ 1050.574592][ T7217] report_bug+0x1b1/0x2e0 [ 1050.578948][ T7217] handle_bug+0x42/0x80 [ 1050.583072][ T7217] exc_invalid_op+0x16/0x40 [ 1050.587582][ T7217] asm_exc_invalid_op+0x12/0x20 [ 1050.592402][ T7217] RIP: 0010:ipvlan_l3s_unregister+0x145/0x1d0 [ 1050.598435][ T7217] Code: 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 32 57 dc fc 49 c7 06 00 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 ab 47 9d fc <0f> 0b eb c8 e8 a2 47 9d fc c6 05 ab e2 b1 04 01 48 c7 c7 ec f3 09 [ 1050.618007][ T7217] RSP: 0018:ffffc9000228f308 EFLAGS: 00010293 [ 1050.624040][ T7217] RAX: ffffffff84d74a95 RBX: 1ffff1101526eb18 RCX: ffff888095ba4400 [ 1050.631992][ T7217] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1050.639931][ T7217] RBP: 0000000000000000 R08: ffffffff84d74a1e R09: fffffbfff131a7ee [ 1050.647872][ T7217] R10: fffffbfff131a7ee R11: 0000000000000000 R12: dffffc0000000000 [ 1050.655853][ T7217] R13: ffff8880a93758c0 R14: ffff8880a2232000 R15: ffff888090f28040 [ 1050.663799][ T7217] ? ipvlan_l3s_unregister+0xce/0x1d0 [ 1050.669138][ T7217] ? ipvlan_l3s_unregister+0x145/0x1d0 [ 1050.674566][ T7217] ? ipvlan_l3s_unregister+0x145/0x1d0 [ 1050.680047][ T7217] ipvlan_set_port_mode+0x33e/0x420 [ 1050.685232][ T7217] ipvlan_link_new+0x733/0xab0 [ 1050.690066][ T7217] rtnl_newlink+0x143d/0x1c10 [ 1050.694758][ T7217] ? __lock_acquire+0x116c/0x2c30 [ 1050.699789][ T7217] ? __mutex_lock_common+0x582/0x2fc0 [ 1050.705144][ T7217] ? trace_lock_release+0x137/0x1a0 [ 1050.710320][ T7217] ? rtnetlink_rcv_msg+0x83c/0xd40 [ 1050.715439][ T7217] ? lock_is_held_type+0x87/0xe0 [ 1050.720374][ T7217] ? rtnl_setlink+0x490/0x490 [ 1050.725031][ T7217] rtnetlink_rcv_msg+0x889/0xd40 [ 1050.729947][ T7217] ? trace_lock_release+0x137/0x1a0 [ 1050.735136][ T7217] ? __local_bh_enable_ip+0x133/0x230 [ 1050.740526][ T7217] ? local_bh_enable+0x5/0x20 [ 1050.745183][ T7217] ? lockdep_hardirqs_on+0x38/0xe0 [ 1050.750272][ T7217] ? local_bh_enable+0x5/0x20 [ 1050.754920][ T7217] ? __local_bh_enable_ip+0x133/0x230 [ 1050.760269][ T7217] ? __dev_queue_xmit+0x1846/0x2940 [ 1050.765537][ T7217] netlink_rcv_skb+0x190/0x3a0 [ 1050.770285][ T7217] ? rtnetlink_bind+0x80/0x80 [ 1050.774975][ T7217] netlink_unicast+0x786/0x940 [ 1050.779710][ T7217] netlink_sendmsg+0xa57/0xd70 [ 1050.784457][ T7217] ? netlink_getsockopt+0x9e0/0x9e0 [ 1050.789651][ T7217] ____sys_sendmsg+0x519/0x800 [ 1050.794424][ T7217] ? import_iovec+0x12a/0x2c0 [ 1050.799072][ T7217] __sys_sendmsg+0x2b1/0x360 [ 1050.803674][ T7217] ? __might_fault+0xf5/0x150 [ 1050.808349][ T7217] ? _copy_to_user+0x100/0x140 [ 1050.813085][ T7217] ? lock_is_held_type+0x87/0xe0 [ 1050.817993][ T7217] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1050.824025][ T7217] do_syscall_64+0x73/0xe0 [ 1050.828411][ T7217] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1050.834271][ T7217] RIP: 0033:0x45c369 [ 1050.838138][ T7217] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1050.857713][ T7217] RSP: 002b:00007f8ba9a3fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1050.866091][ T7217] RAX: ffffffffffffffda RBX: 000000000002b740 RCX: 000000000045c369 [ 1050.874030][ T7217] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000004 [ 1050.881974][ T7217] RBP: 000000000078bf40 R08: 0000000000000000 R09: 0000000000000000 [ 1050.889913][ T7217] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 1050.897856][ T7217] R13: 00007ffc8b295b4f R14: 00007f8ba9a409c0 R15: 000000000078bf0c [ 1050.907249][ T7217] Kernel Offset: disabled [ 1050.911562][ T7217] Rebooting in 86400 seconds..