[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.10.60' (ECDSA) to the list of known hosts. 2020/07/26 06:59:14 parsed 1 programs 2020/07/26 06:59:14 executed programs: 0 syzkaller login: [ 549.740463][ T6931] IPVS: ftp: loaded support on port[0] = 21 [ 549.831519][ T6931] chnl_net:caif_netlink_parms(): no params data found [ 549.874367][ T6931] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.882578][ T6931] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.891652][ T6931] device bridge_slave_0 entered promiscuous mode [ 549.900554][ T6931] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.908237][ T6931] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.915850][ T6931] device bridge_slave_1 entered promiscuous mode [ 549.934656][ T6931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 549.945455][ T6931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 549.967006][ T6931] team0: Port device team_slave_0 added [ 549.974872][ T6931] team0: Port device team_slave_1 added [ 549.991557][ T6931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.998620][ T6931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 550.025548][ T6931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 550.038991][ T6931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 550.045938][ T6931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 550.072902][ T6931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 550.139540][ T6931] device hsr_slave_0 entered promiscuous mode [ 550.177109][ T6931] device hsr_slave_1 entered promiscuous mode [ 550.302195][ T6931] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 550.359299][ T6931] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 550.409204][ T6931] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 550.449544][ T6931] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 550.510273][ T6931] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.517453][ T6931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 550.525146][ T6931] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.532365][ T6931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 550.571171][ T6931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 550.583360][ T7061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 550.593761][ T7061] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.603492][ T7061] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.612321][ T7061] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 550.626450][ T6931] 8021q: adding VLAN 0 to HW filter on device team0 [ 550.637606][ T7141] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 550.646307][ T7141] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.653522][ T7141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 550.678255][ T7061] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 550.687429][ T7061] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.694524][ T7061] bridge0: port 2(bridge_slave_1) entered forwarding state [ 550.703894][ T7061] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 550.713174][ T7061] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 550.721939][ T7061] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 550.730811][ T7061] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 550.742691][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 550.754926][ T6931] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 550.773183][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 550.781514][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 550.793929][ T6931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 550.812475][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 550.832288][ T6931] device veth0_vlan entered promiscuous mode [ 550.840287][ T7141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 550.850613][ T7141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 550.863075][ T6931] device veth1_vlan entered promiscuous mode [ 550.871475][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 550.880051][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 550.888866][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 550.910231][ T7061] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 550.920427][ T7061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 550.930203][ T7061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 550.940589][ T6931] device veth0_macvtap entered promiscuous mode [ 550.954612][ T6931] device veth1_macvtap entered promiscuous mode [ 550.970739][ T6931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 550.978736][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 550.988380][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 550.996421][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 551.006034][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 551.018183][ T6931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 551.027204][ T7061] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 551.035733][ T7061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 551.219974][ T7145] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 551.229516][ T7145] tunl0: Master is either lo or non-ether device [ 551.254909][ T7148] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 551.265953][ T7148] gre0: Master is either lo or non-ether device [ 551.293504][ T7149] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 551.310382][ T7149] device ipvlan2 entered promiscuous mode [ 551.332841][ T7153] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 551.345792][ T7153] device ipvlan3 entered promiscuous mode [ 551.376064][ T7158] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 551.388758][ T7158] ip_vti0: Master is either lo or non-ether device [ 551.413515][ T7160] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 551.424253][ T7160] ip6_vti0: Master is either lo or non-ether device [ 551.445235][ T7161] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 551.456154][ T7161] sit0: Master is either lo or non-ether device [ 551.485471][ T7164] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 551.495089][ T7164] ip6tnl0: Master is either lo or non-ether device [ 551.519392][ T7165] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 551.530747][ T7165] ip6gre0: Master is either lo or non-ether device [ 551.558020][ T7168] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 551.569945][ T7168] device ipvlan4 entered promiscuous mode [ 551.762998][ T7174] device ipvlan5 entered promiscuous mode [ 552.005862][ T7181] device ipvlan6 entered promiscuous mode [ 552.058315][ T7190] vcan0: Master is either lo or non-ether device [ 552.295251][ T7199] device ipvlan7 entered promiscuous mode [ 552.345346][ T7206] device ipvlan8 entered promiscuous mode [ 552.385389][ T7211] device ipvlan9 entered promiscuous mode [ 552.420482][ T7215] nlmon0: Master is either lo or non-ether device [ 552.551380][ T7219] caif0: Master is either lo or non-ether device [ 552.703276][ T7229] device ipvlan10 entered promiscuous mode [ 552.739374][ T7237] vxcan0: Master is either lo or non-ether device [ 552.935087][ T7243] vxcan1: Master is either lo or non-ether device [ 553.120458][ T7254] device ipvlan11 entered promiscuous mode [ 553.407226][ T7266] device ipvlan12 entered promiscuous mode [ 553.671463][ T7278] xfrm0: Master is either lo or non-ether device [ 553.813221][ T7287] wg0: Master is either lo or non-ether device [ 554.003966][ T7296] wg1: Master is either lo or non-ether device [ 554.242097][ T7305] wg2: Master is either lo or non-ether device [ 554.433005][ T7315] device ipvlan13 entered promiscuous mode [ 554.673113][ T7142] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.701411][ T7327] bridge_slave_0: Device is already in use. [ 554.817556][ T7327] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.826351][ T7327] device bridge_slave_0 left promiscuous mode [ 554.834319][ T7327] bridge0: port 1(bridge_slave_0) entered disabled state 2020/07/26 06:59:19 executed programs: 29 [ 554.964384][ T7337] device ipvlan14 entered promiscuous mode [ 555.228097][ T7142] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.245412][ T7349] bridge_slave_1: Device is already in use. [ 555.356923][ T7349] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.402131][ T7349] device bridge_slave_1 left promiscuous mode [ 555.408597][ T7349] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.559162][ T7361] device ipvlan15 entered promiscuous mode [ 555.821264][ T7373] bond_slave_0: Device is already in use. [ 555.929521][ T7373] bond0: (slave bond_slave_0): Releasing backup interface [ 556.051061][ T7382] device ipvlan16 entered promiscuous mode [ 556.295064][ T7390] __nla_validate_parse: 24 callbacks suppressed [ 556.295072][ T7390] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 556.334296][ T7390] bond_slave_1: Device is already in use. [ 556.458830][ T7390] bond0: (slave bond_slave_1): Releasing backup interface [ 556.550448][ T7403] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 556.563844][ T7403] device ipvlan17 entered promiscuous mode [ 556.845309][ T7416] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 556.868990][ T7416] team_slave_0: Device is already in use. [ 556.962624][ T7416] team0: Port device team_slave_0 removed [ 557.051958][ T7426] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 557.080495][ T7426] device ipvlan18 entered promiscuous mode [ 557.309006][ T7437] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 557.320519][ T7437] team_slave_1: Device is already in use. [ 557.382646][ T7437] team0: Port device team_slave_1 removed [ 557.477900][ T7446] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 557.504518][ T7446] device ipvlan19 entered promiscuous mode [ 557.761595][ T7459] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 557.780772][ T7459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 557.800328][ T7459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.826159][ T7459] device ipvlan20 entered promiscuous mode [ 557.833386][ T7459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 558.015127][ T7459] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 558.078813][ T7470] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 558.092435][ T7470] device ipvlan21 entered promiscuous mode [ 558.321234][ T7477] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 558.362706][ T7477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 558.374560][ T7477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.401066][ T7477] device ipvlan22 entered promiscuous mode [ 558.414254][ T7477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 558.587832][ T7477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 558.655007][ T7493] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 558.684396][ T7493] device ipvlan23 entered promiscuous mode [ 558.951458][ T7505] hsr_slave_0: Device is already in use. [ 559.099693][ T7505] device hsr_slave_0 left promiscuous mode [ 559.193071][ T7515] device ipvlan24 entered promiscuous mode [ 559.441573][ T7524] hsr_slave_1: Device is already in use. [ 559.636326][ T7524] device hsr_slave_1 left promiscuous mode 2020/07/26 06:59:24 executed programs: 47 [ 559.982925][ T7544] veth1_virt_wifi: Device is already in use. [ 560.319540][ T7554] device ipvlan25 entered promiscuous mode [ 560.591077][ T7565] veth1_vlan: Device is already in use. [ 560.893429][ T7576] ------------[ cut here ]------------ [ 560.899552][ T7576] WARNING: CPU: 0 PID: 7576 at drivers/net/ipvlan/ipvlan_l3s.c:148 ipvlan_l3s_unregister+0x145/0x1d0 [ 560.912636][ T7576] Kernel panic - not syncing: panic_on_warn set ... [ 560.919427][ T7576] CPU: 0 PID: 7576 Comm: syz-executor.0 Not tainted 5.8.0-rc6-syzkaller #0 [ 560.928126][ T7576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 560.938207][ T7576] Call Trace: [ 560.941754][ T7576] dump_stack+0x1f0/0x31e [ 560.946410][ T7576] panic+0x264/0x7a0 [ 560.950310][ T7576] ? __warn+0x102/0x250 [ 560.954624][ T7576] ? ipvlan_l3s_unregister+0x145/0x1d0 [ 560.960219][ T7576] ? ipvlan_l3s_unregister+0x145/0x1d0 [ 560.965677][ T7576] __warn+0x227/0x250 [ 560.969859][ T7576] ? ipvlan_l3s_unregister+0x145/0x1d0 [ 560.975469][ T7576] report_bug+0x1b1/0x2e0 [ 560.979862][ T7576] handle_bug+0x42/0x80 [ 560.984023][ T7576] exc_invalid_op+0x16/0x40 [ 560.988775][ T7576] asm_exc_invalid_op+0x12/0x20 [ 560.993693][ T7576] RIP: 0010:ipvlan_l3s_unregister+0x145/0x1d0 [ 560.999758][ T7576] Code: 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 12 59 dc fc 49 c7 06 00 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 0b 4a 9d fc <0f> 0b eb c8 e8 02 4a 9d fc c6 05 4b e5 b1 04 01 48 c7 c7 ec f3 09 [ 561.019580][ T7576] RSP: 0018:ffffc9000268f308 EFLAGS: 00010293 [ 561.025707][ T7576] RAX: ffffffff84d747f5 RBX: 1ffff110137b3c38 RCX: ffff8880a7732400 [ 561.033680][ T7576] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 561.041662][ T7576] RBP: 0000000000000000 R08: ffffffff84d7477e R09: fffffbfff131a7ee [ 561.049949][ T7576] R10: fffffbfff131a7ee R11: 0000000000000000 R12: dffffc0000000000 [ 561.058440][ T7576] R13: ffff88809bd9e1c0 R14: ffff8880914ae000 R15: ffff888097498040 [ 561.066433][ T7576] ? ipvlan_l3s_unregister+0xce/0x1d0 [ 561.071812][ T7576] ? ipvlan_l3s_unregister+0x145/0x1d0 [ 561.077403][ T7576] ? ipvlan_l3s_unregister+0x145/0x1d0 [ 561.082919][ T7576] ipvlan_set_port_mode+0x33e/0x420 [ 561.088132][ T7576] ipvlan_link_new+0x733/0xab0 [ 561.093186][ T7576] rtnl_newlink+0x143e/0x1bf0 [ 561.097948][ T7576] ? __lock_acquire+0x116c/0x2c30 [ 561.103074][ T7576] ? __mutex_lock_common+0x582/0x2fc0 [ 561.108454][ T7576] ? trace_lock_release+0x137/0x1a0 [ 561.113713][ T7576] ? rtnetlink_rcv_msg+0x83c/0xd40 [ 561.118826][ T7576] ? lock_is_held_type+0x87/0xe0 [ 561.123810][ T7576] ? rtnl_setlink+0x490/0x490 [ 561.128487][ T7576] rtnetlink_rcv_msg+0x889/0xd40 [ 561.133441][ T7576] ? lock_acquire+0x160/0x720 [ 561.138208][ T7576] ? rcu_lock_acquire+0x5/0x30 [ 561.142978][ T7576] netlink_rcv_skb+0x190/0x3a0 [ 561.147741][ T7576] ? rtnetlink_bind+0x80/0x80 [ 561.152426][ T7576] netlink_unicast+0x786/0x940 [ 561.157342][ T7576] netlink_sendmsg+0xa57/0xd70 [ 561.162167][ T7576] ? netlink_getsockopt+0x9e0/0x9e0 [ 561.167468][ T7576] ____sys_sendmsg+0x519/0x800 [ 561.172322][ T7576] ? import_iovec+0x12a/0x2c0 [ 561.177019][ T7576] __sys_sendmsg+0x2b1/0x360 [ 561.181666][ T7576] ? __might_fault+0xf5/0x150 [ 561.186381][ T7576] ? _copy_to_user+0x100/0x140 [ 561.191157][ T7576] ? lock_is_held_type+0x87/0xe0 [ 561.196185][ T7576] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 561.202255][ T7576] do_syscall_64+0x73/0xe0 [ 561.206775][ T7576] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 561.212859][ T7576] RIP: 0033:0x45c369 [ 561.216754][ T7576] Code: Bad RIP value. [ 561.220953][ T7576] RSP: 002b:00007fff12787788 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 561.229447][ T7576] RAX: ffffffffffffffda RBX: 000000000002b740 RCX: 000000000045c369 [ 561.237505][ T7576] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000005 [ 561.245613][ T7576] RBP: 000000000078bf40 R08: 0000000000000000 R09: 0000000000000000 [ 561.253728][ T7576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000790730 [ 561.261859][ T7576] R13: 0000000000000000 R14: 0000000000000add R15: 000000000078bf0c [ 561.271580][ T7576] Kernel Offset: disabled [ 561.275976][ T7576] Rebooting in 86400 seconds..