[[0;32m OK [0m] Started Getty on tty2.
[[0;32m OK [0m] Started Serial Getty on ttyS0.
[[0;32m OK [0m] Started Getty on tty1.
[[0;32m OK [0m] Started OpenBSD Secure Shell server.
[[0;32m OK [0m] Started getty on tty2-tty6 if dbus and logind are not available.
Debian GNU/Linux 9 syzkaller ttyS0
Warning: Permanently added '10.128.1.34' (ECDSA) to the list of known hosts.
syzkaller login: [ 70.929639][ T8454] IPVS: ftp: loaded support on port[0] = 21
[ 71.035716][ T8454] chnl_net:caif_netlink_parms(): no params data found
[ 71.085636][ T8454] bridge0: port 1(bridge_slave_0) entered blocking state
[ 71.093433][ T8454] bridge0: port 1(bridge_slave_0) entered disabled state
[ 71.103964][ T8454] device bridge_slave_0 entered promiscuous mode
[ 71.113403][ T8454] bridge0: port 2(bridge_slave_1) entered blocking state
[ 71.122420][ T8454] bridge0: port 2(bridge_slave_1) entered disabled state
[ 71.130595][ T8454] device bridge_slave_1 entered promiscuous mode
[ 71.150930][ T8454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 71.162512][ T8454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 71.185083][ T8454] team0: Port device team_slave_0 added
[ 71.193754][ T8454] team0: Port device team_slave_1 added
[ 71.211917][ T8454] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 71.218954][ T8454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 71.244860][ T8454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 71.257973][ T8454] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 71.265008][ T8454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 71.291157][ T8454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 71.318178][ T8454] device hsr_slave_0 entered promiscuous mode
[ 71.324921][ T8454] device hsr_slave_1 entered promiscuous mode
[ 71.428906][ T8454] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 71.438913][ T8454] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 71.451547][ T8454] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 71.462429][ T8454] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 71.487379][ T8454] bridge0: port 2(bridge_slave_1) entered blocking state
[ 71.494668][ T8454] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 71.502517][ T8454] bridge0: port 1(bridge_slave_0) entered blocking state
[ 71.509662][ T8454] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 71.558638][ T8454] 8021q: adding VLAN 0 to HW filter on device bond0
[ 71.573146][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 71.585275][ T8] bridge0: port 1(bridge_slave_0) entered disabled state
[ 71.593849][ T8] bridge0: port 2(bridge_slave_1) entered disabled state
[ 71.602735][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 71.615942][ T8454] 8021q: adding VLAN 0 to HW filter on device team0
[ 71.628380][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 71.637326][ T3053] bridge0: port 1(bridge_slave_0) entered blocking state
[ 71.644434][ T3053] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 71.655976][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 71.665849][ T8] bridge0: port 2(bridge_slave_1) entered blocking state
[ 71.672950][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 71.694136][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 71.702692][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 71.722117][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 71.730951][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 71.739181][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 71.752268][ T8454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 71.771856][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 71.779206][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 71.795237][ T8454] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 71.815374][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 71.835567][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 71.844279][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 71.852612][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 71.863565][ T8454] device veth0_vlan entered promiscuous mode
[ 71.876858][ T8454] device veth1_vlan entered promiscuous mode
[ 71.898757][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 71.906897][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 71.916115][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 71.928062][ T8454] device veth0_macvtap entered promiscuous mode
[ 71.938017][ T8454] device veth1_macvtap entered promiscuous mode
[ 71.957614][ T8454] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 71.965213][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 71.975431][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 71.988084][ T8454] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 71.996421][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 72.008237][ T8454] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 72.021412][ T8454] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 72.034423][ T8454] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 72.043270][ T8454] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 72.174094][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 72.189075][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 72.212679][ T8662] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
executing program
[ 72.244409][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 72.253994][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 72.265637][ T8662] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 72.400293][ C0] ================================================================================
[ 72.409888][ C0] UBSAN: shift-out-of-bounds in ./include/net/red.h:310:18
[ 72.417091][ C0] shift exponent 234 is too large for 64-bit type 'long unsigned int'
[ 72.425342][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.10.0-rc6-next-20201207-syzkaller #0
[ 72.434631][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 72.444684][ C0] Call Trace:
[ 72.447967][ C0]
[ 72.450857][ C0] dump_stack+0x107/0x163
[ 72.455204][ C0] ubsan_epilogue+0xb/0x5a
[ 72.459652][ C0] __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x181
[ 72.466422][ C0] ? ktime_get+0x1bf/0x1e0
[ 72.470853][ C0] ? batadv_primary_if_get_selected.cold+0x23/0x4c
[ 72.477363][ C0] ? __sanitizer_cov_trace_cmp4+0x1c/0x70
[ 72.483090][ C0] ? ktime_get+0x167/0x1e0
[ 72.487529][ C0] red_enqueue.cold+0x1a/0x475
[ 72.492326][ C0] ? red_destroy+0x70/0x70
[ 72.496747][ C0] ? rwlock_bug.part.0+0x90/0x90
[ 72.501800][ C0] __dev_queue_xmit+0x199e/0x2ec0
[ 72.506850][ C0] ? netdev_core_pick_tx+0x2e0/0x2e0
[ 72.512139][ C0] ? __ip_finish_output+0x399/0x650
[ 72.517457][ C0] ? mark_held_locks+0x9f/0xe0
[ 72.522499][ C0] ? ip_finish_output2+0x16db/0x2330
[ 72.527768][ C0] ip_finish_output2+0xf5d/0x2330
[ 72.532799][ C0] ? ip_fragment.constprop.0+0x240/0x240
[ 72.538411][ C0] ? __ip_finish_output+0x650/0x650
[ 72.543590][ C0] ? __ip_flush_pending_frames.constprop.0+0x2c0/0x2c0
[ 72.550512][ C0] ? debug_object_free+0x2e0/0x2e0
[ 72.555614][ C0] __ip_finish_output+0x399/0x650
[ 72.560634][ C0] ip_finish_output+0x35/0x200
[ 72.565399][ C0] ip_output+0x196/0x310
[ 72.569643][ C0] ip_local_out+0xaf/0x1a0
[ 72.574084][ C0] iptunnel_xmit+0x5a3/0x9c0
[ 72.578704][ C0] geneve_xmit+0xfe0/0x3230
[ 72.583236][ C0] ? geneve_udp_encap_recv+0x2790/0x2790
[ 72.588948][ C0] ? skb_crc32c_csum_help+0x70/0x70
[ 72.594139][ C0] ? dev_hard_start_xmit+0x68a/0x960
[ 72.599423][ C0] dev_hard_start_xmit+0x1eb/0x960
[ 72.604523][ C0] __dev_queue_xmit+0x21de/0x2ec0
[ 72.609536][ C0] ? netdev_core_pick_tx+0x2e0/0x2e0
[ 72.614822][ C0] ? __ip6_finish_output+0x4be/0xb80
[ 72.620091][ C0] ? mark_held_locks+0x9f/0xe0
[ 72.624833][ C0] ? rcu_read_lock_bh_held+0x25/0x60
[ 72.630105][ C0] ? ip6_finish_output2+0xdce/0x1710
[ 72.635422][ C0] ip6_finish_output2+0x8cc/0x1710
[ 72.640524][ C0] __ip6_finish_output+0x4be/0xb80
[ 72.645620][ C0] ip6_finish_output+0x35/0x200
[ 72.650454][ C0] ip6_output+0x1db/0x520
[ 72.654782][ C0] mld_sendpack+0x996/0xe20
[ 72.659291][ C0] ? nf_hook.constprop.0+0x5b0/0x5b0
[ 72.664575][ C0] ? __local_bh_enable_ip+0x9c/0x110
[ 72.669847][ C0] mld_ifc_timer_expire+0x60a/0xf10
[ 72.675042][ C0] ? mld_send_initial_cr.part.0+0x150/0x150
[ 72.680927][ C0] call_timer_fn+0x1a5/0x710
[ 72.685505][ C0] ? msleep_interruptible+0x170/0x170
[ 72.690860][ C0] ? lock_downgrade+0x6d0/0x6d0
[ 72.696124][ C0] ? _raw_spin_unlock_irq+0x1f/0x40
[ 72.701306][ C0] ? mld_send_initial_cr.part.0+0x150/0x150
[ 72.707183][ C0] __run_timers.part.0+0x692/0xa80
[ 72.712306][ C0] ? call_timer_fn+0x710/0x710
[ 72.717057][ C0] ? kvm_sched_clock_read+0x14/0x40
[ 72.722241][ C0] ? sched_clock+0x2a/0x40
[ 72.726636][ C0] ? sched_clock_cpu+0x18/0x1f0
[ 72.731475][ C0] run_timer_softirq+0xb3/0x1d0
[ 72.736309][ C0] __do_softirq+0x2b7/0xa76
[ 72.740802][ C0] asm_call_irq_on_stack+0xf/0x20
[ 72.745830][ C0]
[ 72.748753][ C0] do_softirq_own_stack+0xaa/0xd0
[ 72.753847][ C0] irq_exit_rcu+0x194/0x210
[ 72.758455][ C0] sysvec_apic_timer_interrupt+0x4d/0x100
[ 72.764158][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 72.770120][ C0] RIP: 0010:acpi_idle_do_entry+0x1c9/0x250
[ 72.775911][ C0] Code: cd 0f 5b f8 84 db 75 ac e8 e4 01 5b f8 e8 df d7 60 f8 e9 0c 00 00 00 e8 d5 01 5b f8 0f 00 2d de 39 b3 00 e8 c9 01 5b f8 fb f4 <9c> 5b 81 e3 00 02 00 00 fa 31 ff 48 89 de e8 54 0c 5b f8 48 85 db
[ 72.796008][ C0] RSP: 0018:ffffffff8b407d60 EFLAGS: 00000293
[ 72.802088][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 72.810044][ C0] RDX: ffffffff8b49bc00 RSI: ffffffff89174467 RDI: 0000000000000000
[ 72.818096][ C0] RBP: ffff888014233064 R08: 0000000000000001 R09: 0000000000000001
[ 72.826049][ C0] R10: ffffffff81781c68 R11: 0000000000000000 R12: 0000000000000001
[ 72.834025][ C0] R13: ffff888014233000 R14: ffff888014233064 R15: ffff888143612004
[ 72.841990][ C0] ? trace_hardirqs_on+0x38/0x1c0
[ 72.847000][ C0] ? acpi_idle_do_entry+0x1c7/0x250
[ 72.852187][ C0] acpi_idle_enter+0x361/0x500
[ 72.856942][ C0] cpuidle_enter_state+0x1b1/0xc80
[ 72.862043][ C0] cpuidle_enter+0x4a/0xa0
[ 72.866449][ C0] do_idle+0x3eb/0x590
[ 72.870505][ C0] ? arch_cpu_idle_exit+0x30/0x30
[ 72.875519][ C0] ? trace_init_perf_perm_irq_work_exit+0xe/0xe
[ 72.881761][ C0] cpu_startup_entry+0x14/0x20
[ 72.886508][ C0] start_kernel+0x49b/0x4bc
[ 72.891001][ C0] secondary_startup_64_no_verify+0xb0/0xbb
[ 72.896972][ C0] ================================================================================
[ 72.906273][ C0] Kernel panic - not syncing: panic_on_warn set ...
[ 72.912844][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.10.0-rc6-next-20201207-syzkaller #0
[ 72.922029][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 72.932068][ C0] Call Trace:
[ 72.935331][ C0]
[ 72.938166][ C0] dump_stack+0x107/0x163
[ 72.942482][ C0] panic+0x343/0x77f
[ 72.946370][ C0] ? __warn_printk+0xf3/0xf3
[ 72.950959][ C0] ? ubsan_epilogue+0x3e/0x5a
[ 72.955628][ C0] ubsan_epilogue+0x54/0x5a
[ 72.960123][ C0] __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x181
[ 72.966870][ C0] ? ktime_get+0x1bf/0x1e0
[ 72.971275][ C0] ? batadv_primary_if_get_selected.cold+0x23/0x4c
[ 72.977760][ C0] ? __sanitizer_cov_trace_cmp4+0x1c/0x70
[ 72.983457][ C0] ? ktime_get+0x167/0x1e0
[ 72.987859][ C0] red_enqueue.cold+0x1a/0x475
[ 72.992625][ C0] ? red_destroy+0x70/0x70
[ 72.997022][ C0] ? rwlock_bug.part.0+0x90/0x90
[ 73.001950][ C0] __dev_queue_xmit+0x199e/0x2ec0
[ 73.006964][ C0] ? netdev_core_pick_tx+0x2e0/0x2e0
[ 73.012233][ C0] ? __ip_finish_output+0x399/0x650
[ 73.017429][ C0] ? mark_held_locks+0x9f/0xe0
[ 73.022176][ C0] ? ip_finish_output2+0x16db/0x2330
[ 73.027442][ C0] ip_finish_output2+0xf5d/0x2330
[ 73.032450][ C0] ? ip_fragment.constprop.0+0x240/0x240
[ 73.038066][ C0] ? __ip_finish_output+0x650/0x650
[ 73.043248][ C0] ? __ip_flush_pending_frames.constprop.0+0x2c0/0x2c0
[ 73.050084][ C0] ? debug_object_free+0x2e0/0x2e0
[ 73.055185][ C0] __ip_finish_output+0x399/0x650
[ 73.060197][ C0] ip_finish_output+0x35/0x200
[ 73.064949][ C0] ip_output+0x196/0x310
[ 73.069190][ C0] ip_local_out+0xaf/0x1a0
[ 73.073590][ C0] iptunnel_xmit+0x5a3/0x9c0
[ 73.078171][ C0] geneve_xmit+0xfe0/0x3230
[ 73.082669][ C0] ? geneve_udp_encap_recv+0x2790/0x2790
[ 73.088291][ C0] ? skb_crc32c_csum_help+0x70/0x70
[ 73.093482][ C0] ? dev_hard_start_xmit+0x68a/0x960
[ 73.098749][ C0] dev_hard_start_xmit+0x1eb/0x960
[ 73.103879][ C0] __dev_queue_xmit+0x21de/0x2ec0
[ 73.108904][ C0] ? netdev_core_pick_tx+0x2e0/0x2e0
[ 73.114174][ C0] ? __ip6_finish_output+0x4be/0xb80
[ 73.119460][ C0] ? mark_held_locks+0x9f/0xe0
[ 73.124217][ C0] ? rcu_read_lock_bh_held+0x25/0x60
[ 73.129501][ C0] ? ip6_finish_output2+0xdce/0x1710
[ 73.134768][ C0] ip6_finish_output2+0x8cc/0x1710
[ 73.139888][ C0] __ip6_finish_output+0x4be/0xb80
[ 73.144992][ C0] ip6_finish_output+0x35/0x200
[ 73.149829][ C0] ip6_output+0x1db/0x520
[ 73.154146][ C0] mld_sendpack+0x996/0xe20
[ 73.158634][ C0] ? nf_hook.constprop.0+0x5b0/0x5b0
[ 73.163909][ C0] ? __local_bh_enable_ip+0x9c/0x110
[ 73.169188][ C0] mld_ifc_timer_expire+0x60a/0xf10
[ 73.174380][ C0] ? mld_send_initial_cr.part.0+0x150/0x150
[ 73.180346][ C0] call_timer_fn+0x1a5/0x710
[ 73.185010][ C0] ? msleep_interruptible+0x170/0x170
[ 73.190364][ C0] ? lock_downgrade+0x6d0/0x6d0
[ 73.195211][ C0] ? _raw_spin_unlock_irq+0x1f/0x40
[ 73.200389][ C0] ? mld_send_initial_cr.part.0+0x150/0x150
[ 73.206264][ C0] __run_timers.part.0+0x692/0xa80
[ 73.211367][ C0] ? call_timer_fn+0x710/0x710
[ 73.216122][ C0] ? kvm_sched_clock_read+0x14/0x40
[ 73.221305][ C0] ? sched_clock+0x2a/0x40
[ 73.225724][ C0] ? sched_clock_cpu+0x18/0x1f0
[ 73.230581][ C0] run_timer_softirq+0xb3/0x1d0
[ 73.235417][ C0] __do_softirq+0x2b7/0xa76
[ 73.239917][ C0] asm_call_irq_on_stack+0xf/0x20
[ 73.244920][ C0]
[ 73.247855][ C0] do_softirq_own_stack+0xaa/0xd0
[ 73.252875][ C0] irq_exit_rcu+0x194/0x210
[ 73.257362][ C0] sysvec_apic_timer_interrupt+0x4d/0x100
[ 73.263081][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 73.269046][ C0] RIP: 0010:acpi_idle_do_entry+0x1c9/0x250
[ 73.274833][ C0] Code: cd 0f 5b f8 84 db 75 ac e8 e4 01 5b f8 e8 df d7 60 f8 e9 0c 00 00 00 e8 d5 01 5b f8 0f 00 2d de 39 b3 00 e8 c9 01 5b f8 fb f4 <9c> 5b 81 e3 00 02 00 00 fa 31 ff 48 89 de e8 54 0c 5b f8 48 85 db
[ 73.294425][ C0] RSP: 0018:ffffffff8b407d60 EFLAGS: 00000293
[ 73.300482][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 73.308443][ C0] RDX: ffffffff8b49bc00 RSI: ffffffff89174467 RDI: 0000000000000000
[ 73.316396][ C0] RBP: ffff888014233064 R08: 0000000000000001 R09: 0000000000000001
[ 73.324361][ C0] R10: ffffffff81781c68 R11: 0000000000000000 R12: 0000000000000001
[ 73.332315][ C0] R13: ffff888014233000 R14: ffff888014233064 R15: ffff888143612004
[ 73.340292][ C0] ? trace_hardirqs_on+0x38/0x1c0
[ 73.345540][ C0] ? acpi_idle_do_entry+0x1c7/0x250
[ 73.350731][ C0] acpi_idle_enter+0x361/0x500
[ 73.355501][ C0] cpuidle_enter_state+0x1b1/0xc80
[ 73.360610][ C0] cpuidle_enter+0x4a/0xa0
[ 73.365015][ C0] do_idle+0x3eb/0x590
[ 73.369120][ C0] ? arch_cpu_idle_exit+0x30/0x30
[ 73.374161][ C0] ? trace_init_perf_perm_irq_work_exit+0xe/0xe
[ 73.380394][ C0] cpu_startup_entry+0x14/0x20
[ 73.385288][ C0] start_kernel+0x49b/0x4bc
[ 73.389791][ C0] secondary_startup_64_no_verify+0xb0/0xbb
[ 73.396436][ C0] Kernel Offset: disabled
[ 73.400855][ C0] Rebooting in 86400 seconds..