Debian GNU/Linux 11 syzkaller ttyS0
Warning: Permanently added '[localhost]:34396' (ED25519) to the list of known hosts.
syzkaller login: [ 76.563563][ T8058] chnl_net:caif_netlink_parms(): no params data found
[ 76.658011][ T8058] bridge0: port 1(bridge_slave_0) entered blocking state
[ 76.658506][ T8058] bridge0: port 1(bridge_slave_0) entered disabled state
[ 76.659084][ T8058] bridge_slave_0: entered allmulticast mode
[ 76.660299][ T8058] bridge_slave_0: entered promiscuous mode
[ 76.663217][ T8058] bridge0: port 2(bridge_slave_1) entered blocking state
[ 76.663702][ T8058] bridge0: port 2(bridge_slave_1) entered disabled state
[ 76.664144][ T8058] bridge_slave_1: entered allmulticast mode
[ 76.665860][ T8058] bridge_slave_1: entered promiscuous mode
[ 76.705902][ T8058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 76.711053][ T8058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 76.744093][ T8058] team0: Port device team_slave_0 added
[ 76.747721][ T8058] team0: Port device team_slave_1 added
[ 76.773132][ T8058] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 76.774069][ T8058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 76.775801][ T8058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 76.780194][ T8058] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 76.780722][ T8058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 76.782464][ T8058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 76.823268][ T8058] hsr_slave_0: entered promiscuous mode
[ 76.824366][ T8058] hsr_slave_1: entered promiscuous mode
[ 77.009502][ T8058] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 77.016829][ T8058] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 77.022014][ T8058] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 77.027136][ T8058] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 77.058249][ T8058] bridge0: port 2(bridge_slave_1) entered blocking state
[ 77.058848][ T8058] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 77.059787][ T8058] bridge0: port 1(bridge_slave_0) entered blocking state
[ 77.060270][ T8058] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 77.121388][ T8058] 8021q: adding VLAN 0 to HW filter on device bond0
[ 77.132911][ T55] bridge0: port 1(bridge_slave_0) entered disabled state
[ 77.134359][ T55] bridge0: port 2(bridge_slave_1) entered disabled state
[ 77.145134][ T8058] 8021q: adding VLAN 0 to HW filter on device team0
[ 77.153978][ T27] bridge0: port 1(bridge_slave_0) entered blocking state
[ 77.154733][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 77.170108][ T55] bridge0: port 2(bridge_slave_1) entered blocking state
[ 77.170751][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 77.259307][ T8058] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 77.319233][ T8058] veth0_vlan: entered promiscuous mode
[ 77.331313][ T8058] veth1_vlan: entered promiscuous mode
[ 77.362228][ T8058] veth0_macvtap: entered promiscuous mode
[ 77.367879][ T8058] veth1_macvtap: entered promiscuous mode
[ 77.393904][ T8058] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 77.404207][ T8058] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 77.409640][ T8058] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 77.410260][ T8058] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 77.410845][ T8058] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 77.411419][ T8058] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
executing program
[ 77.476675][ T8058] ================================================================================
[ 77.477434][ T8058] UBSAN: array-index-out-of-bounds in net/rds/recv.c:585:39
[ 77.477981][ T8058] index 4 is out of range for type 'u64 [4]'
[ 77.478419][ T8058] CPU: 1 PID: 8058 Comm: syz-executor228 Not tainted 6.6.0-gd2f51b3516da #1
[ 77.479015][ T8058] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014
[ 77.479836][ T8058] Call Trace:
[ 77.480190][ T8058]
[ 77.480448][ T8058] dump_stack_lvl+0x136/0x150
[ 77.480825][ T8058] __ubsan_handle_out_of_bounds+0xd5/0x130
[ 77.481488][ T8058] ? kvm_sched_clock_read+0x16/0x20
[ 77.481933][ T8058] rds_cmsg_recv+0x60d/0x700
[ 77.482537][ T8058] ? rds_recvmsg_zcookie+0x490/0x490
[ 77.483058][ T8058] ? rds_recvmsg+0x695/0x1610
[ 77.483436][ T8058] ? lock_downgrade+0x6a0/0x6a0
[ 77.483836][ T8058] ? _raw_write_unlock_irqrestore+0x54/0x70
[ 77.484287][ T8058] rds_recvmsg+0x3fb/0x1610
[ 77.484646][ T8058] ? rds_notify_queue_get+0x760/0x760
[ 77.485120][ T8058] ? aa_af_perm+0x240/0x240
[ 77.485475][ T8058] ? prepare_to_swait_exclusive+0x240/0x240
[ 77.485934][ T8058] ? bpf_lsm_socket_recvmsg+0x9/0x10
[ 77.486345][ T8058] ? security_socket_recvmsg+0x93/0xc0
[ 77.486751][ T8058] ? rds_notify_queue_get+0x760/0x760
[ 77.487175][ T8058] sock_recvmsg+0xe2/0x160
[ 77.487517][ T8058] __sys_recvfrom+0x1b6/0x2f0
[ 77.487876][ T8058] ? __ia32_sys_send+0x100/0x100
[ 77.488261][ T8058] ? lock_downgrade+0x6a0/0x6a0
[ 77.488684][ T8058] ? __rseq_handle_notify_resume+0x5cf/0x1000
[ 77.489175][ T8058] ? __ia32_sys_socketpair+0x100/0x100
[ 77.489590][ T8058] ? __sys_connect+0x10e/0x1a0
[ 77.489963][ T8058] ? __do_sys_rseq+0x750/0x750
[ 77.490362][ T8058] ? folio_memcg_unlock+0x240/0x240
[ 77.490756][ T8058] __x64_sys_recvfrom+0xe0/0x1b0
[ 77.491183][ T8058] ? syscall_enter_from_user_mode+0x7f/0x120
[ 77.491727][ T8058] do_syscall_64+0x40/0x110
[ 77.492118][ T8058] entry_SYSCALL_64_after_hwframe+0x63/0x6b
[ 77.492591][ T8058] RIP: 0033:0x7fdd574dad9d
[ 77.492938][ T8058] Code: 28 c3 e8 e6 22 00 00 66 0f 1f 44 00 00 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 77.494300][ T8058] RSP: 002b:00007fff993d59f8 EFLAGS: 00000246 ORIG_RAX: 000000000000002d
[ 77.494971][ T8058] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fdd574dad9d
[ 77.495631][ T8058] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 77.496221][ T8058] RBP: 00007fdd57533380 R08: 0000000000000000 R09: 0000000000000000
[ 77.496798][ T8058] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff993d5a40
[ 77.497409][ T8058] R13: 00007fff993d5a60 R14: 00007fdd57567300 R15: 00007fdd57533366
[ 77.498041][ T8058]
[ 77.504343][ T8058] ================================================================================
[ 77.505104][ T8058] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 77.505643][ T8058] CPU: 1 PID: 8058 Comm: syz-executor228 Not tainted 6.6.0-gd2f51b3516da #1
[ 77.506306][ T8058] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014
[ 77.507003][ T8058] Call Trace:
[ 77.507285][ T8058]
[ 77.507510][ T8058] dump_stack_lvl+0xd9/0x150
[ 77.507896][ T8058] panic+0x6b9/0x760
[ 77.508213][ T8058] ? panic_smp_self_stop+0xa0/0xa0
[ 77.508633][ T8058] ? kmsg_dump_get_line+0x330/0x330
[ 77.509070][ T8058] ? check_panic_on_warn+0x1f/0xc0
[ 77.509501][ T8058] check_panic_on_warn+0xb1/0xc0
[ 77.509866][ T8058] __ubsan_handle_out_of_bounds+0xfd/0x130
[ 77.510342][ T8058] ? kvm_sched_clock_read+0x16/0x20
[ 77.510763][ T8058] rds_cmsg_recv+0x60d/0x700
[ 77.511150][ T8058] ? rds_recvmsg_zcookie+0x490/0x490
[ 77.511575][ T8058] ? rds_recvmsg+0x695/0x1610
[ 77.512017][ T8058] ? lock_downgrade+0x6a0/0x6a0
[ 77.512425][ T8058] ? _raw_write_unlock_irqrestore+0x54/0x70
[ 77.512914][ T8058] rds_recvmsg+0x3fb/0x1610
[ 77.513276][ T8058] ? rds_notify_queue_get+0x760/0x760
[ 77.513706][ T8058] ? aa_af_perm+0x240/0x240
[ 77.514081][ T8058] ? prepare_to_swait_exclusive+0x240/0x240
[ 77.514573][ T8058] ? bpf_lsm_socket_recvmsg+0x9/0x10
[ 77.515053][ T8058] ? security_socket_recvmsg+0x93/0xc0
[ 77.515518][ T8058] ? rds_notify_queue_get+0x760/0x760
[ 77.515977][ T8058] sock_recvmsg+0xe2/0x160
[ 77.516379][ T8058] __sys_recvfrom+0x1b6/0x2f0
[ 77.516775][ T8058] ? __ia32_sys_send+0x100/0x100
[ 77.517210][ T8058] ? lock_downgrade+0x6a0/0x6a0
[ 77.517641][ T8058] ? __rseq_handle_notify_resume+0x5cf/0x1000
[ 77.518178][ T8058] ? __ia32_sys_socketpair+0x100/0x100
[ 77.518655][ T8058] ? __sys_connect+0x10e/0x1a0
[ 77.519083][ T8058] ? __do_sys_rseq+0x750/0x750
[ 77.519497][ T8058] ? folio_memcg_unlock+0x240/0x240
[ 77.519908][ T8058] __x64_sys_recvfrom+0xe0/0x1b0
[ 77.520325][ T8058] ? syscall_enter_from_user_mode+0x7f/0x120
[ 77.520809][ T8058] do_syscall_64+0x40/0x110
[ 77.521178][ T8058] entry_SYSCALL_64_after_hwframe+0x63/0x6b
[ 77.521724][ T8058] RIP: 0033:0x7fdd574dad9d
[ 77.522156][ T8058] Code: 28 c3 e8 e6 22 00 00 66 0f 1f 44 00 00 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 77.523535][ T8058] RSP: 002b:00007fff993d59f8 EFLAGS: 00000246 ORIG_RAX: 000000000000002d
[ 77.524134][ T8058] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fdd574dad9d
[ 77.524683][ T8058] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 77.525239][ T8058] RBP: 00007fdd57533380 R08: 0000000000000000 R09: 0000000000000000
[ 77.525799][ T8058] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff993d5a40
[ 77.526362][ T8058] R13: 00007fff993d5a60 R14: 00007fdd57567300 R15: 00007fdd57533366
[ 77.526984][ T8058]
[ 77.527362][ T8058] Kernel Offset: disabled
[ 77.527767][ T8058] Rebooting in 86400 seconds..
VM DIAGNOSIS:
19:50:56 Registers:
info registers vcpu 0
RAX=00000000000220e9 RBX=0000000000000000 RCX=ffffffff8a6223db RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=dffffc0000000000 RSP=ffffffff8ca07e08
R8 =0000000000000001 R9 =ffffed1005946dbd R10=ffff88802ca36deb R11=0000000000000000
R12=0000000000000000 R13=ffffffff8ef7d250 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff8a623bfe RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88802ca00000 00000000 00000000
LDT=0000 fffffe5900000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007f906224d648 CR3=0000000017398000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 512e60cee616e48b a7a17fa2a98833e0
YMM01=0000000000000000 0000000000000000 1bb8cee680be1f6e 7a6bb8571aee9717
YMM02=0000000000000000 0000000000000000 a6280bc585993577 c6e81887f0754763
YMM03=0000000000000000 0000000000000000 7eb7b8fd75791865 81a912d699d3c682
YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000002eed311
YMM08=0000000000000000 0000000000000000 8a00000030000000 180000006c000000
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 a6964d585ee97e45 a80c335293b2e155
YMM11=0000000000000000 0000000000000000 ef65dbfbc5faeef7 e3da409fef92181f
YMM12=0000000000000000 0000000000000000 0d0c0f0e09080b0a 0504070601000302
YMM13=0000000000000000 0000000000000000 0c0f0e0d080b0a09 0407060500030201
YMM14=0000000000000000 0000000000000000 00000000ffffffff 0000000000000060
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000020
info registers vcpu 1
RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9
RSI=ffffffff84c81d00 RDI=ffffffff9286ff60 RBP=ffffffff9286ff20 RSP=ffffc90003e67490
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000
R12=0000000000000000 R13=ffffffff9286ff20 R14=ffffffff928701e0 R15=ffffffff9286ff70
RIP=ffffffff84c81d27 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000555556eea3c0 00000000 00000000
GS =0000 ffff88807ec00000 00000000 00000000
LDT=0000 fffffe1d00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000048000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00000000200000c0 CR3=000000001d2f2000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 249dd689f4b472fe d82d68dcbe16388a
YMM01=0000000000000000 0000000000000000 43b409cde8b7e134 26c925d3087d519f
YMM02=0000000000000000 0000000000000000 a47a2bb03ce18847 f002136ae62620c4
YMM03=0000000000000000 0000000000000000 4d00908ea79f2da6 073fdb521fd6c940
YMM04=0000000000000000 0000000000000000 0000000000000000 00000000ed27fd12
YMM05=0000000000000000 0000000000000000 0000000000000000 612d1be5cf3ea66a
YMM06=0000000000000000 0000000000000000 0000000000000000 00000000612d1be5
YMM07=0000000000000000 0000000000000000 612d1be5cf3ea66a ed27fd1217933eae
YMM08=0000000000000000 0000000000000000 5400000050000000 ba00000046000000
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856b08e647
YMM11=0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f
YMM12=0000000000000000 0000000000000000 0d0c0f0e09080b0a 0504070601000302
YMM13=0000000000000000 0000000000000000 0c0f0e0d080b0a09 0407060500030201
YMM14=0000000000000000 0000000000000000 00000000ffffffff 000000000000003c
YMM15=0000000000000000 0000000000000000 0000000000000000 000000000000003c