Warning: Permanently added '10.128.0.97' (ECDSA) to the list of known hosts. syzkaller login: [ 82.966773][T10090] IPVS: ftp: loaded support on port[0] = 21 [ 83.026344][T10090] chnl_net:caif_netlink_parms(): no params data found [ 83.064779][T10090] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.073959][T10090] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.081996][T10090] device bridge_slave_0 entered promiscuous mode [ 83.090438][T10090] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.097756][T10090] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.105467][T10090] device bridge_slave_1 entered promiscuous mode [ 83.122930][T10090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.133850][T10090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.154297][T10090] team0: Port device team_slave_0 added [ 83.161869][T10090] team0: Port device team_slave_1 added [ 83.176725][T10090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.184188][T10090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.210330][T10090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.222933][T10090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.230228][T10090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.256317][T10090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.320040][T10090] device hsr_slave_0 entered promiscuous mode [ 83.357899][T10090] device hsr_slave_1 entered promiscuous mode [ 83.468391][T10090] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.510732][T10090] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.570332][T10090] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.610266][T10090] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.662882][T10090] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.670088][T10090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.678053][T10090] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.685155][T10090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.729344][T10090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.743487][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.755043][ T2726] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.763516][ T2726] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.772205][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 83.785623][T10090] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.797031][ T2773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.805710][ T2773] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.812855][ T2773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.824668][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.833979][ T2726] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.841128][ T2726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.860970][ T2773] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.870177][ T2773] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.883062][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.898332][ T2773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.907311][ T2773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.920258][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.939182][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.946780][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.960776][T10090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.981553][ T2773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.001761][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.010553][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.019138][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.031048][T10090] device veth0_vlan entered promiscuous mode [ 84.043528][T10090] device veth1_vlan entered promiscuous mode [ 84.070937][ T2773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.080478][ T2773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.091722][T10090] device veth0_macvtap entered promiscuous mode [ 84.102277][T10090] device veth1_macvtap entered promiscuous mode [ 84.119277][T10090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.126884][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.136107][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.144604][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.153407][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.165938][T10090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.174289][ T2771] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.183733][ T2771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready executing program [ 84.368411][T10095] team0: Device sit1 is of different type [ 84.578357][T10095] netlink: 8 bytes leftover after parsing attributes in process `syz-executor854'. [ 84.589990][T10095] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 84.599419][T10095] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.606884][T10095] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.615879][T10095] device bridge_slave_0 left promiscuous mode [ 84.623170][T10095] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.718509][T10095] device bridge_slave_1 left promiscuous mode [ 84.725269][T10095] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.820146][T10095] bond0: (slave bond_slave_0): Releasing backup interface [ 84.959073][T10095] bond0: (slave bond_slave_1): Releasing backup interface [ 85.162264][T10095] team0: Port device team_slave_0 removed [ 85.272804][T10095] team0: Port device team_slave_1 removed [ 85.328009][T10095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.335552][T10095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.378311][T10095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.385789][T10095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.444772][T10095] netlink: 'syz-executor854': attribute type 10 has an invalid length. [ 85.455572][T10095] team0: Device ipvlan1 failed to register rx_handler executing program [ 85.537136][T10095] syz-executor854 (10095) used greatest stack depth: 22760 bytes left [ 85.566658][T10096] team0: Port device sit1 added [ 85.588721][T10096] netlink: 8 bytes leftover after parsing attributes in process `syz-executor854'. [ 85.611722][T10096] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 85.629918][T10096] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.637443][T10096] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.738328][T10096] team0: Port device sit1 removed [ 85.797983][T10096] netlink: 'syz-executor854': attribute type 10 has an invalid length. [ 85.809533][T10096] team0: Device ipvlan1 failed to register rx_handler executing program [ 86.118729][T10097] netlink: 8 bytes leftover after parsing attributes in process `syz-executor854'. [ 86.130611][T10097] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 86.142281][T10097] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.149998][T10097] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.166789][T10097] netlink: 'syz-executor854': attribute type 10 has an invalid length. [ 86.176389][T10097] team0: Device ipvlan1 failed to register rx_handler [ 86.249030][ T2690] general protection fault, probably for non-canonical address 0xdffffc0020000068: 0000 [#1] PREEMPT SMP KASAN [ 86.260895][ T2690] KASAN: probably user-memory-access in range [0x0000000100000340-0x0000000100000347] [ 86.270449][ T2690] CPU: 0 PID: 2690 Comm: kworker/0:4 Not tainted 5.6.0-rc3-syzkaller #0 [ 86.278805][ T2690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 86.288866][ T2690] Workqueue: ipv6_addrconf addrconf_dad_work [ 86.294860][ T2690] RIP: 0010:ipvlan_hard_header+0x120/0x160 [ 86.300653][ T2690] Code: 5d 41 5e 41 5f 5d c3 45 31 e4 eb e4 e8 c9 49 bc fc 49 8d bc 24 48 03 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 2f 49 8b 9c 24 48 03 00 00 e9 29 ff ff ff e8 48 ef [ 86.320384][ T2690] RSP: 0018:ffffc9000874f620 EFLAGS: 00010203 [ 86.326480][ T2690] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffff8880a8743178 [ 86.334446][ T2690] RDX: 0000000020000068 RSI: ffffffff84b93d87 RDI: 0000000100000347 [ 86.342418][ T2690] RBP: ffffc9000874f658 R08: 0000000000000000 R09: 0000000000000060 [ 86.350378][ T2690] R10: fffffbfff16a356f R11: ffffffff8b51ab7f R12: 00000000ffffffff [ 86.358337][ T2690] R13: ffff888096620680 R14: ffff8880a8743178 R15: 0000000000000060 [ 86.366501][ T2690] FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 86.375556][ T2690] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.382435][ T2690] CR2: 00000000200000d0 CR3: 00000000a2d0d000 CR4: 00000000001406f0 [ 86.390406][ T2690] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 86.398450][ T2690] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 86.406570][ T2690] Call Trace: [ 86.409860][ T2690] ? trace_hardirqs_on+0x67/0x240 [ 86.414886][ T2690] ? ipvlan_get_iflink+0x70/0x70 [ 86.419831][ T2690] neigh_resolve_output+0x552/0x990 [ 86.425039][ T2690] ip6_finish_output2+0x109a/0x25c0 [ 86.430356][ T2690] ? ip6_frag_next+0xb20/0xb20 [ 86.435163][ T2690] ? __kasan_check_read+0x11/0x20 [ 86.440246][ T2690] __ip6_finish_output+0x444/0xaa0 [ 86.445461][ T2690] ? __ip6_finish_output+0x444/0xaa0 [ 86.450742][ T2690] ip6_finish_output+0x38/0x1f0 [ 86.455585][ T2690] ip6_output+0x25e/0x880 [ 86.459924][ T2690] ? ip6_finish_output+0x1f0/0x1f0 [ 86.465064][ T2690] ? __local_bh_enable_ip+0x15a/0x270 [ 86.470469][ T2690] ? __ip6_finish_output+0xaa0/0xaa0 [ 86.475874][ T2690] ? xfrm_lookup+0x38/0x50 [ 86.480408][ T2690] mld_sendpack+0x9c2/0xed0 [ 86.484897][ T2690] ? nf_hook.constprop.0+0x560/0x560 [ 86.490170][ T2690] ? mld_send_initial_cr.part.0+0x102/0x160 [ 86.496181][ T2690] ? __local_bh_enable_ip+0x15a/0x270 [ 86.501546][ T2690] mld_send_initial_cr.part.0+0x114/0x160 [ 86.507264][ T2690] ipv6_mc_dad_complete+0x1ab/0x1f0 [ 86.512470][ T2690] addrconf_dad_completed+0x8ce/0xbb0 [ 86.517932][ T2690] ? addrconf_rs_timer+0x6e0/0x6e0 [ 86.523099][ T2690] ? addrconf_dad_work+0x7b6/0x11d0 [ 86.528293][ T2690] ? trace_hardirqs_on+0x67/0x240 [ 86.533426][ T2690] ? addrconf_dad_work+0x7b6/0x11d0 [ 86.538617][ T2690] addrconf_dad_work+0x7cc/0x11d0 [ 86.543669][ T2690] ? addrconf_dad_work+0x7cc/0x11d0 [ 86.548864][ T2690] ? addrconf_dad_completed+0xbb0/0xbb0 [ 86.554447][ T2690] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 86.559983][ T2690] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 86.566064][ T2690] ? trace_hardirqs_on+0x67/0x240 [ 86.571116][ T2690] process_one_work+0xa05/0x17a0 [ 86.576063][ T2690] ? mark_held_locks+0xf0/0xf0 [ 86.580826][ T2690] ? pwq_dec_nr_in_flight+0x320/0x320 [ 86.586231][ T2690] ? lock_acquire+0x190/0x410 [ 86.591781][ T2690] worker_thread+0x98/0xe40 [ 86.596382][ T2690] kthread+0x361/0x430 executing program [ 86.600607][ T2690] ? process_one_work+0x17a0/0x17a0 [ 86.606069][ T2690] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 86.611790][ T2690] ret_from_fork+0x24/0x30 [ 86.616216][ T2690] Modules linked in: [ 86.620151][ T2690] ---[ end trace e172934264b96c78 ]--- [ 86.625647][ T2690] RIP: 0010:ipvlan_hard_header+0x120/0x160 [ 86.631514][ T2690] Code: 5d 41 5e 41 5f 5d c3 45 31 e4 eb e4 e8 c9 49 bc fc 49 8d bc 24 48 03 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 2f 49 8b 9c 24 48 03 00 00 e9 29 ff ff ff e8 48 ef [ 86.651313][ T2690] RSP: 0018:ffffc9000874f620 EFLAGS: 00010203 [ 86.657374][ T2690] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffff8880a8743178 [ 86.665373][ T2690] RDX: 0000000020000068 RSI: ffffffff84b93d87 RDI: 0000000100000347 [ 86.673563][ T2690] RBP: ffffc9000874f658 R08: 0000000000000000 R09: 0000000000000060 [ 86.681564][ T2690] R10: fffffbfff16a356f R11: ffffffff8b51ab7f R12: 00000000ffffffff [ 86.689558][ T2690] R13: ffff888096620680 R14: ffff8880a8743178 R15: 0000000000000060 [ 86.697617][ T2690] FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 86.706675][ T2690] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.713282][ T2690] CR2: 00000000200000d0 CR3: 0000000009a6d000 CR4: 00000000001406f0 [ 86.721291][ T2690] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 86.729293][ T2690] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 86.737451][ T2690] Kernel panic - not syncing: Fatal exception in interrupt [ 86.746115][ T2690] Kernel Offset: disabled [ 86.750473][ T2690] Rebooting in 86400 seconds..