[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.10' (ECDSA) to the list of known hosts. syzkaller login: [ 48.897891][ T6805] IPVS: ftp: loaded support on port[0] = 21 [ 49.029722][ T6805] chnl_net:caif_netlink_parms(): no params data found [ 49.077459][ T6805] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.084887][ T6805] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.093615][ T6805] device bridge_slave_0 entered promiscuous mode [ 49.102449][ T6805] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.109827][ T6805] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.117580][ T6805] device bridge_slave_1 entered promiscuous mode [ 49.136528][ T6805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.147749][ T6805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.168733][ T6805] team0: Port device team_slave_0 added [ 49.175668][ T6805] team0: Port device team_slave_1 added [ 49.191721][ T6805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.198756][ T6805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.224746][ T6805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.237237][ T6805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.244180][ T6805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.270322][ T6805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.294607][ T6805] device hsr_slave_0 entered promiscuous mode [ 49.301270][ T6805] device hsr_slave_1 entered promiscuous mode [ 49.385397][ T6805] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.394651][ T6805] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.404290][ T6805] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.413628][ T6805] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.435539][ T6805] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.442705][ T6805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.450459][ T6805] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.457576][ T6805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.497253][ T6805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.510398][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.520012][ T17] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.529370][ T17] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.537635][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 49.550530][ T6805] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.561197][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.570541][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.577666][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.589942][ T6523] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.598410][ T6523] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.605449][ T6523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.624285][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.633253][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.651299][ T6805] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 49.662525][ T6805] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.675831][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.684113][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.693219][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.702705][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.718463][ T6523] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.726299][ T6523] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.739316][ T6805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.757952][ T6523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.775119][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.784352][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.792298][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.803105][ T6805] device veth0_vlan entered promiscuous mode [ 49.814547][ T6805] device veth1_vlan entered promiscuous mode [ 49.834038][ T6523] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.843326][ T6523] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.851775][ T6523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.862270][ T6805] device veth0_macvtap entered promiscuous mode [ 49.871686][ T6805] device veth1_macvtap entered promiscuous mode [ 49.888275][ T6805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.897111][ T6523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.907417][ T6523] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.919100][ T6805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.926577][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.938840][ T6805] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.947972][ T6805] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 executing program executing program executing program [ 49.959126][ T6805] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.968167][ T6805] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 executing program executing program executing program [ 50.041304][ T7042] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 50.053015][ T7042] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 50.061401][ T7042] CPU: 0 PID: 7042 Comm: syz-executor807 Not tainted 5.9.0-rc2-syzkaller #0 [ 50.070042][ T7042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.080101][ T7042] RIP: 0010:fq_codel_enqueue+0xc1e/0x13d0 [ 50.085799][ T7042] Code: 89 34 24 4c 89 fb 48 8b 44 24 28 42 80 3c 38 00 48 8b 6c 24 60 74 08 48 89 ef e8 cd 14 15 fb 4c 8b 6d 00 4d 89 ef 49 c1 ef 03 <41> 80 3c 1f 00 74 08 4c 89 ef e8 b3 14 15 fb 4d 8b 75 00 48 8b 44 [ 50.105476][ T7042] RSP: 0018:ffffc90002b07898 EFLAGS: 00010246 [ 50.111533][ T7042] RAX: 1ffff11010910000 RBX: dffffc0000000000 RCX: ffff888084880000 [ 50.119472][ T7042] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 50.127417][ T7042] RBP: ffff888084880000 R08: ffffffff869fbb88 R09: fffffbfff167dab2 [ 50.135364][ T7042] R10: fffffbfff167dab2 R11: 0000000000000000 R12: 0000000000000000 [ 50.143330][ T7042] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 50.151274][ T7042] FS: 00007f2452de2700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 50.160178][ T7042] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.167424][ T7042] CR2: 00000000200001c0 CR3: 00000000917b1000 CR4: 00000000001506f0 [ 50.175396][ T7042] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 50.183344][ T7042] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 50.191281][ T7042] Call Trace: [ 50.194552][ T7042] __dev_queue_xmit+0x10f7/0x2940 [ 50.199550][ T7042] ? skb_clone+0x1f4/0x370 [ 50.203935][ T7042] netlink_deliver_tap+0x5be/0x810 [ 50.209106][ T7042] netlink_unicast+0x75c/0x940 [ 50.213850][ T7042] netlink_sendmsg+0xa57/0xd70 [ 50.218591][ T7042] ? netlink_getsockopt+0x9e0/0x9e0 [ 50.223883][ T7042] ____sys_sendmsg+0x519/0x800 [ 50.228620][ T7042] ? import_iovec+0x12a/0x2c0 [ 50.233266][ T7042] __sys_sendmsg+0x2b1/0x360 [ 50.237831][ T7042] ? lock_is_held_type+0xb3/0xe0 [ 50.242734][ T7042] ? lock_is_held_type+0xb3/0xe0 [ 50.247640][ T7042] ? syscall_enter_from_user_mode+0x24/0x1a0 [ 50.253585][ T7042] ? lockdep_hardirqs_on+0x49/0xf0 [ 50.258664][ T7042] ? syscall_enter_from_user_mode+0x24/0x1a0 [ 50.264613][ T7042] do_syscall_64+0x31/0x70 [ 50.269011][ T7042] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 50.274871][ T7042] RIP: 0033:0x44aab9 [ 50.278733][ T7042] Code: e8 dc 0f 03 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 1b 06 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 50.298321][ T7042] RSP: 002b:00007f2452de1ce8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 50.306700][ T7042] RAX: ffffffffffffffda RBX: 00000000006e0c58 RCX: 000000000044aab9 [ 50.314641][ T7042] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 50.322600][ T7042] RBP: 00000000006e0c50 R08: 00007f2452de2700 R09: 0000000000000000 [ 50.330542][ T7042] R10: 00007f2452de2700 R11: 0000000000000246 R12: 00000000006e0c5c [ 50.338488][ T7042] R13: 00007fff1265415f R14: 00007f2452de29c0 R15: 00000000006e0c5c [ 50.346434][ T7042] Modules linked in: [ 50.350367][ T7042] ---[ end trace 0625a51a0a994309 ]--- [ 50.355820][ T7042] RIP: 0010:fq_codel_enqueue+0xc1e/0x13d0 [ 50.361523][ T7042] Code: 89 34 24 4c 89 fb 48 8b 44 24 28 42 80 3c 38 00 48 8b 6c 24 60 74 08 48 89 ef e8 cd 14 15 fb 4c 8b 6d 00 4d 89 ef 49 c1 ef 03 <41> 80 3c 1f 00 74 08 4c 89 ef e8 b3 14 15 fb 4d 8b 75 00 48 8b 44 [ 50.381158][ T7042] RSP: 0018:ffffc90002b07898 EFLAGS: 00010246 [ 50.387247][ T7042] RAX: 1ffff11010910000 RBX: dffffc0000000000 RCX: ffff888084880000 [ 50.395192][ T7042] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 50.403159][ T7042] RBP: ffff888084880000 R08: ffffffff869fbb88 R09: fffffbfff167dab2 [ 50.411115][ T7042] R10: fffffbfff167dab2 R11: 0000000000000000 R12: 0000000000000000 [ 50.419087][ T7042] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 50.427058][ T7042] FS: 00007f2452de2700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 50.436003][ T7042] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.442607][ T7042] CR2: 00000000200001c0 CR3: 00000000917b1000 CR4: 00000000001506f0 [ 50.450593][ T7042] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 50.458651][ T7042] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 50.466606][ T7042] Kernel panic - not syncing: Fatal exception in interrupt [ 50.474766][ T7042] Kernel Offset: disabled [ 50.479085][ T7042] Rebooting in 86400 seconds..