Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.33' (ECDSA) to the list of known hosts. syzkaller login: [ 75.596516][ T8434] chnl_net:caif_netlink_parms(): no params data found [ 75.672933][ T8434] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.681216][ T8434] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.689166][ T8434] device bridge_slave_0 entered promiscuous mode [ 75.700495][ T8434] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.707824][ T8434] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.716146][ T8434] device bridge_slave_1 entered promiscuous mode [ 75.746308][ T8434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.758052][ T8434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.791869][ T8434] team0: Port device team_slave_0 added [ 75.799220][ T8434] team0: Port device team_slave_1 added [ 75.828162][ T8434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.836476][ T8434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.863641][ T8434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.877224][ T8434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.884611][ T8434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.911677][ T8434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.950876][ T8434] device hsr_slave_0 entered promiscuous mode [ 75.958197][ T8434] device hsr_slave_1 entered promiscuous mode [ 76.082738][ T8434] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.094152][ T8434] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.104526][ T8434] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.115536][ T8434] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.141481][ T8434] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.148635][ T8434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.156649][ T8434] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.164031][ T8434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.206644][ T8434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.220803][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.234625][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.243988][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.253839][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 76.267210][ T8434] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.279138][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.289086][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.296472][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.308588][ T3171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.318334][ T3171] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.326580][ T3171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.352715][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.361873][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.371927][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.387786][ T8434] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.403783][ T8434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.413799][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.422707][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.444495][ T3171] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.453844][ T3171] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.470030][ T8434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.490036][ T3171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.511644][ T3171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.521921][ T3171] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.530901][ T3171] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.542205][ T8434] device veth0_vlan entered promiscuous mode [ 76.555357][ T8434] device veth1_vlan entered promiscuous mode [ 76.576155][ T3171] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.585514][ T3171] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.594377][ T3171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.610461][ T8434] device veth0_macvtap entered promiscuous mode [ 76.622705][ T8434] device veth1_macvtap entered promiscuous mode [ 76.645896][ T8434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.654386][ T3171] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.667266][ T3171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.681001][ T8434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.693868][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.703833][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.716842][ T8434] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 executing program [ 76.726722][ T8434] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.736072][ T8434] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.747910][ T8434] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.792099][ T8434] general protection fault, probably for non-canonical address 0xdffffc00000000b3: 0000 [#1] PREEMPT SMP KASAN [ 76.804097][ T8434] KASAN: null-ptr-deref in range [0x0000000000000598-0x000000000000059f] [ 76.812595][ T8434] CPU: 0 PID: 8434 Comm: syz-executor305 Not tainted 5.14.0-rc2-syzkaller #0 [ 76.821614][ T8434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 76.832216][ T8434] RIP: 0010:add_del_if+0x57/0x140 [ 76.837881][ T8434] Code: 03 80 3c 02 00 0f 85 fd 00 00 00 48 8b 9d 88 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d bb 98 05 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 ca 00 00 00 4c 8b ab 98 05 00 00 48 b8 00 00 00 [ 76.858340][ T8434] RSP: 0018:ffffc9000162fa80 EFLAGS: 00010202 [ 76.864943][ T8434] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 76.873465][ T8434] RDX: 00000000000000b3 RSI: ffffffff87f667b6 RDI: 0000000000000598 [ 76.881524][ T8434] RBP: ffff888017fcac00 R08: 00000000000089a2 R09: ffffffff87f67f36 [ 76.890314][ T8434] R10: ffffffff87f68031 R11: 00000000000089a3 R12: 0000000000000000 [ 76.899381][ T8434] R13: ffffc9000162fd60 R14: 0000000000000000 R15: dffffc0000000000 [ 76.907821][ T8434] FS: 0000000000784300(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 76.917879][ T8434] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.925042][ T8434] CR2: 0000000020000300 CR3: 0000000032b4c000 CR4: 00000000001506f0 [ 76.933924][ T8434] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 76.942540][ T8434] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 76.950793][ T8434] Call Trace: [ 76.954278][ T8434] br_ioctl_stub+0x1c6/0x7f0 [ 76.959661][ T8434] ? br_dev_siocdevprivate+0x15c0/0x15c0 [ 76.965292][ T8434] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 76.971844][ T8434] ? full_name_hash+0xb5/0xf0 [ 76.976543][ T8434] ? br_dev_siocdevprivate+0x15c0/0x15c0 [ 76.982170][ T8434] br_ioctl_call+0x5e/0xa0 [ 76.986576][ T8434] dev_ifsioc+0xc1f/0xf60 [ 76.990899][ T8434] ? dev_load+0x79/0x200 [ 76.995124][ T8434] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 77.001269][ T8434] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 77.007819][ T8434] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 77.014333][ T8434] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 77.020321][ T8434] dev_ioctl+0x1b9/0xee0 [ 77.024570][ T8434] sock_do_ioctl+0x18b/0x210 [ 77.029156][ T8434] ? put_user_ifreq+0x140/0x140 [ 77.034100][ T8434] sock_ioctl+0x2f1/0x640 [ 77.038416][ T8434] ? br_ioctl_call+0xa0/0xa0 [ 77.043073][ T8434] ? lock_downgrade+0x6e0/0x6e0 [ 77.047906][ T8434] ? lock_downgrade+0x6e0/0x6e0 [ 77.052942][ T8434] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 77.059533][ T8434] ? br_ioctl_call+0xa0/0xa0 [ 77.064128][ T8434] __x64_sys_ioctl+0x193/0x200 [ 77.068892][ T8434] do_syscall_64+0x35/0xb0 [ 77.073851][ T8434] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 77.080740][ T8434] RIP: 0033:0x4430b9 [ 77.084725][ T8434] Code: 28 c3 e8 4a 15 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 77.104686][ T8434] RSP: 002b:00007ffeab6bc1d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 77.113614][ T8434] RAX: ffffffffffffffda RBX: 00007ffeab6bc1e8 RCX: 00000000004430b9 [ 77.122490][ T8434] RDX: 0000000020000300 RSI: 00000000000089a3 RDI: 0000000000000003 [ 77.131286][ T8434] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 77.139754][ T8434] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeab6bc1f0 [ 77.148558][ T8434] R13: 00007ffeab6bc210 R14: 00000000004b8018 R15: 00000000004004b8 [ 77.157576][ T8434] Modules linked in: [ 77.163388][ T8434] ---[ end trace 8ce043ceac60b2e0 ]--- [ 77.169038][ T8434] RIP: 0010:add_del_if+0x57/0x140 [ 77.178112][ T8434] Code: 03 80 3c 02 00 0f 85 fd 00 00 00 48 8b 9d 88 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d bb 98 05 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 ca 00 00 00 4c 8b ab 98 05 00 00 48 b8 00 00 00 [ 77.199037][ T8434] RSP: 0018:ffffc9000162fa80 EFLAGS: 00010202 [ 77.206449][ T8434] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 77.215434][ T8434] RDX: 00000000000000b3 RSI: ffffffff87f667b6 RDI: 0000000000000598 [ 77.224220][ T8434] RBP: ffff888017fcac00 R08: 00000000000089a2 R09: ffffffff87f67f36 [ 77.232521][ T8434] R10: ffffffff87f68031 R11: 00000000000089a3 R12: 0000000000000000 [ 77.241240][ T8434] R13: ffffc9000162fd60 R14: 0000000000000000 R15: dffffc0000000000 [ 77.249331][ T8434] FS: 0000000000784300(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 77.258606][ T8434] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.265633][ T8434] CR2: 00007f9d1d88a6c0 CR3: 0000000032b4c000 CR4: 00000000001506e0 [ 77.273727][ T8434] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 77.281964][ T8434] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 77.290315][ T8434] Kernel panic - not syncing: Fatal exception [ 77.298035][ T8434] Kernel Offset: disabled [ 77.302366][ T8434] Rebooting in 86400 seconds..