[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.29' (ECDSA) to the list of known hosts. 2020/11/18 16:42:17 parsed 1 programs 2020/11/18 16:42:17 executed programs: 0 syzkaller login: [ 1586.929165][ T8509] IPVS: ftp: loaded support on port[0] = 21 [ 1587.091146][ T8509] chnl_net:caif_netlink_parms(): no params data found [ 1587.142745][ T8509] bridge0: port 1(bridge_slave_0) entered blocking state [ 1587.150323][ T8509] bridge0: port 1(bridge_slave_0) entered disabled state [ 1587.158053][ T8509] device bridge_slave_0 entered promiscuous mode [ 1587.169068][ T8509] bridge0: port 2(bridge_slave_1) entered blocking state [ 1587.176205][ T8509] bridge0: port 2(bridge_slave_1) entered disabled state [ 1587.184845][ T8509] device bridge_slave_1 entered promiscuous mode [ 1587.205666][ T8509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1587.216417][ T8509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1587.238771][ T8509] team0: Port device team_slave_0 added [ 1587.246463][ T8509] team0: Port device team_slave_1 added [ 1587.263861][ T8509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1587.270978][ T8509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1587.297016][ T8509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1587.310277][ T8509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1587.317232][ T8509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1587.343737][ T8509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1587.371331][ T8509] device hsr_slave_0 entered promiscuous mode [ 1587.377982][ T8509] device hsr_slave_1 entered promiscuous mode [ 1587.475918][ T8509] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1587.485546][ T8509] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1587.496001][ T8509] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1587.507030][ T8509] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1587.532742][ T8509] bridge0: port 2(bridge_slave_1) entered blocking state [ 1587.540047][ T8509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1587.547726][ T8509] bridge0: port 1(bridge_slave_0) entered blocking state [ 1587.554879][ T8509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1587.601398][ T8509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1587.615546][ T8486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1587.625705][ T8486] bridge0: port 1(bridge_slave_0) entered disabled state [ 1587.634609][ T8486] bridge0: port 2(bridge_slave_1) entered disabled state [ 1587.642993][ T8486] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1587.657134][ T8509] 8021q: adding VLAN 0 to HW filter on device team0 [ 1587.668394][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1587.677379][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 1587.684653][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1587.697047][ T8486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1587.705964][ T8486] bridge0: port 2(bridge_slave_1) entered blocking state [ 1587.713086][ T8486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1587.731814][ T8486] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1587.741322][ T8486] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1587.760806][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1587.769201][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1587.778236][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1587.788985][ T8509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1587.807311][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1587.814982][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1587.829173][ T8509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1587.851979][ T8582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1587.867311][ T8486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1587.876810][ T8486] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1587.884658][ T8486] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1587.895503][ T8509] device veth0_vlan entered promiscuous mode [ 1587.908044][ T8509] device veth1_vlan entered promiscuous mode [ 1587.931914][ T8582] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1587.941016][ T8582] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1587.949034][ T8582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1587.963113][ T8509] device veth0_macvtap entered promiscuous mode [ 1587.972937][ T8509] device veth1_macvtap entered promiscuous mode [ 1587.991636][ T8509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1587.999007][ T8486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1588.009584][ T8486] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1588.023217][ T8509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1588.030823][ T8486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1588.043703][ T8509] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1588.052613][ T8509] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1588.061414][ T8509] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1588.070412][ T8509] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1588.168857][ T8732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1588.178028][ T8732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1588.203506][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1588.223722][ T173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1588.233332][ T173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1588.243500][ T8486] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1588.941433][ T8731] Bluetooth: hci0: command 0x0409 tx timeout 2020/11/18 16:42:22 executed programs: 52 [ 1591.021881][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 1593.101865][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 1595.179551][ T7] Bluetooth: hci0: command 0x0419 tx timeout 2020/11/18 16:42:27 executed programs: 161 2020/11/18 16:42:32 executed programs: 274 2020/11/18 16:42:37 executed programs: 378 2020/11/18 16:42:42 executed programs: 484 2020/11/18 16:42:47 executed programs: 592 2020/11/18 16:42:52 executed programs: 702 2020/11/18 16:42:57 executed programs: 809 2020/11/18 16:43:02 executed programs: 921 2020/11/18 16:43:07 executed programs: 1098 2020/11/18 16:43:12 executed programs: 1294 2020/11/18 16:43:17 executed programs: 1491 2020/11/18 16:43:22 executed programs: 1691 2020/11/18 16:43:27 executed programs: 1890 2020/11/18 16:43:32 executed programs: 2089 2020/11/18 16:43:37 executed programs: 2288 2020/11/18 16:43:42 executed programs: 2489 2020/11/18 16:43:47 executed programs: 2689 2020/11/18 16:43:52 executed programs: 2887 2020/11/18 16:43:58 executed programs: 3083 2020/11/18 16:44:03 executed programs: 3279 2020/11/18 16:44:08 executed programs: 3474 2020/11/18 16:44:13 executed programs: 3671 2020/11/18 16:44:18 executed programs: 3864 2020/11/18 16:44:23 executed programs: 4061 [ 1711.493462][ T8731] Bluetooth: hci0: command 0x0406 tx timeout 2020/11/18 16:44:28 executed programs: 4254 2020/11/18 16:44:33 executed programs: 4449 2020/11/18 16:44:38 executed programs: 4645 2020/11/18 16:44:43 executed programs: 4832 2020/11/18 16:44:48 executed programs: 5034 2020/11/18 16:44:53 executed programs: 5229 2020/11/18 16:44:58 executed programs: 5423 2020/11/18 16:45:03 executed programs: 5610 [ 1906.520780][ T1647] INFO: task syz-executor.0:28381 blocked for more than 143 seconds. [ 1906.529039][ T1647] Not tainted 5.10.0-rc4-next-20201118-syzkaller #0 [ 1906.538369][ T1647] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1906.550142][ T1647] task:syz-executor.0 state:D stack:28944 pid:28381 ppid: 8509 flags:0x00004000 [ 1906.562805][ T1647] Call Trace: [ 1906.566247][ T1647] __schedule+0x890/0x2030 [ 1906.571069][ T1647] ? io_schedule_timeout+0x140/0x140 [ 1906.576523][ T1647] ? lockdep_hardirqs_on+0x79/0x100 [ 1906.582359][ T1647] ? _raw_spin_unlock_irq+0x2a/0x40 [ 1906.587569][ T1647] schedule+0xcf/0x270 [ 1906.592456][ T1647] __io_uring_files_cancel+0xc4d/0x14b0 [ 1906.598284][ T1647] ? __io_uring_free+0x1d0/0x1d0 [ 1906.604190][ T1647] ? exit_sem+0x112/0x1e80 [ 1906.608683][ T1647] ? find_held_lock+0x2d/0x110 [ 1906.614042][ T1647] ? add_wait_queue+0x150/0x150 [ 1906.618919][ T1647] ? copy_semundo+0x2f0/0x2f0 [ 1906.624365][ T1647] exit_files+0xe4/0x170 [ 1906.628701][ T1647] do_exit+0xb61/0x29f0 [ 1906.633410][ T1647] ? find_held_lock+0x2d/0x110 [ 1906.638188][ T1647] ? mm_update_next_owner+0x7a0/0x7a0 [ 1906.644242][ T1647] ? get_signal+0x2f6/0x1f70 [ 1906.648844][ T1647] ? lock_downgrade+0x6d0/0x6d0 [ 1906.654318][ T1647] do_group_exit+0x125/0x310 [ 1906.658924][ T1647] get_signal+0x3ea/0x1f70 [ 1906.663983][ T1647] ? futex_exit_release+0x220/0x220 [ 1906.669212][ T1647] ? __might_fault+0xd3/0x180 [ 1906.674553][ T1647] arch_do_signal_or_restart+0x2a6/0x1ea0 [ 1906.680448][ T1647] ? _copy_to_user+0xdc/0x150 [ 1906.685667][ T1647] ? copy_siginfo_to_user32+0xa0/0xa0 [ 1906.691372][ T1647] ? __do_sys_futex+0x2a2/0x470 [ 1906.696318][ T1647] ? do_futex+0x1a60/0x1a60 [ 1906.701515][ T1647] exit_to_user_mode_prepare+0x124/0x200 [ 1906.707256][ T1647] syscall_exit_to_user_mode+0x38/0x260 [ 1906.713412][ T1647] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1906.719312][ T1647] RIP: 0033:0x45deb9 [ 1906.723802][ T1647] Code: Unable to access opcode bytes at RIP 0x45de8f. [ 1906.730838][ T1647] RSP: 002b:00007f32be979cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1906.739257][ T1647] RAX: fffffffffffffe00 RBX: 000000000118bf28 RCX: 000000000045deb9 [ 1906.747313][ T1647] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000118bf28 [ 1906.755352][ T1647] RBP: 000000000118bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1906.763382][ T1647] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 1906.771692][ T1647] R13: 00007fffccbdf20f R14: 00007f32be97a9c0 R15: 000000000118bf2c [ 1906.779685][ T1647] [ 1906.779685][ T1647] Showing all locks held in the system: [ 1906.788454][ T1647] 1 lock held by khungtaskd/1647: [ 1906.793527][ T1647] #0: ffffffff8b339ca0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 1906.803485][ T1647] [ 1906.805815][ T1647] ============================================= [ 1906.805815][ T1647] [ 1906.814396][ T1647] NMI backtrace for cpu 1 [ 1906.818724][ T1647] CPU: 1 PID: 1647 Comm: khungtaskd Not tainted 5.10.0-rc4-next-20201118-syzkaller #0 [ 1906.828402][ T1647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1906.838441][ T1647] Call Trace: [ 1906.841770][ T1647] dump_stack+0x107/0x163 [ 1906.846096][ T1647] nmi_cpu_backtrace.cold+0x44/0xd7 [ 1906.851386][ T1647] ? lapic_can_unplug_cpu+0x80/0x80 [ 1906.856591][ T1647] nmi_trigger_cpumask_backtrace+0x1b3/0x230 [ 1906.862583][ T1647] watchdog+0xd89/0xf30 [ 1906.866720][ T1647] ? trace_sched_process_hang+0x280/0x280 [ 1906.872472][ T1647] kthread+0x3af/0x4a0 [ 1906.876524][ T1647] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 1906.882427][ T1647] ret_from_fork+0x1f/0x30 [ 1906.886989][ T1647] Sending NMI from CPU 1 to CPUs 0: [ 1906.892960][ C0] NMI backtrace for cpu 0 [ 1906.892967][ C0] CPU: 0 PID: 4897 Comm: systemd-journal Not tainted 5.10.0-rc4-next-20201118-syzkaller #0 [ 1906.892973][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1906.892978][ C0] RIP: 0010:__lock_acquire+0xd95/0x5c00 [ 1906.892988][ C0] Code: 01 00 00 00 0f 86 8e 00 00 00 89 05 65 0c 1f 0d e9 83 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 80 3c 02 00 <0f> 85 68 32 00 00 49 81 3e 80 a2 4a 8e 0f 84 3c f3 ff ff 41 83 fc [ 1906.892992][ C0] RSP: 0018:ffffc9000168f880 EFLAGS: 00000046 [ 1906.893001][ C0] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 1906.893006][ C0] RDX: 1ffffffff1e16f78 RSI: 1ffff920002d1f22 RDI: ffffffff8f0b7bc0 [ 1906.893011][ C0] RBP: ffff88801188b500 R08: 0000000000000001 R09: 0000000000000001 [ 1906.893016][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 1906.893021][ C0] R13: 0000000000000000 R14: ffffffff8f0b7bc0 R15: 0000000000000000 [ 1906.893026][ C0] FS: 00007f2f9444d8c0(0000) GS:ffff8880b9e00000(0000) knlGS:0000000000000000 [ 1906.893031][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1906.893036][ C0] CR2: 00007f2f91835000 CR3: 000000001193b000 CR4: 00000000001506f0 [ 1906.893041][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1906.893046][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1906.893048][ C0] Call Trace: [ 1906.893052][ C0] ? read_word_at_a_time+0x16/0x20 [ 1906.893056][ C0] ? __d_lookup_rcu+0x370/0x6a0 [ 1906.893060][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1906.893063][ C0] ? step_into+0x25c/0x1bd0 [ 1906.893067][ C0] lock_acquire+0x2a3/0x8c0 [ 1906.893071][ C0] ? debug_check_no_obj_freed+0xc7/0x420 [ 1906.893074][ C0] ? lock_release+0x710/0x710 [ 1906.893078][ C0] ? debug_check_no_obj_freed+0x20c/0x420 [ 1906.893082][ C0] ? lock_downgrade+0x6d0/0x6d0 [ 1906.893086][ C0] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 1906.893089][ C0] _raw_spin_lock_irqsave+0x39/0x50 [ 1906.893093][ C0] ? debug_check_no_obj_freed+0xc7/0x420 [ 1906.893097][ C0] debug_check_no_obj_freed+0xc7/0x420 [ 1906.893101][ C0] ? slab_free_freelist_hook+0xb9/0x150 [ 1906.893105][ C0] slab_free_freelist_hook+0x107/0x150 [ 1906.893109][ C0] ? putname+0xe1/0x120 [ 1906.893112][ C0] kmem_cache_free+0x82/0x350 [ 1906.893115][ C0] putname+0xe1/0x120 [ 1906.893119][ C0] filename_parentat+0x4b1/0x560 [ 1906.893123][ C0] ? getname+0xd0/0xd0 [ 1906.893126][ C0] ? find_held_lock+0x2d/0x110 [ 1906.893130][ C0] ? __might_fault+0xd3/0x180 [ 1906.893134][ C0] ? __virt_addr_valid+0x1ff/0x2c0 [ 1906.893137][ C0] ? __phys_addr+0x9a/0x110 [ 1906.893141][ C0] ? __phys_addr_symbol+0x2c/0x70 [ 1906.893144][ C0] filename_create+0x9e/0x490 [ 1906.893148][ C0] ? strncpy_from_user+0x29e/0x3a0 [ 1906.893152][ C0] ? filename_parentat+0x560/0x560 [ 1906.893156][ C0] ? getname_flags.part.0+0x1dd/0x4f0 [ 1906.893159][ C0] do_mkdirat+0xa0/0x2d0 [ 1906.893163][ C0] ? user_path_create+0xf0/0xf0 [ 1906.893166][ C0] ? __secure_computing+0x104/0x360 [ 1906.893170][ C0] do_syscall_64+0x2d/0x70 [ 1906.893174][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1906.893177][ C0] RIP: 0033:0x7f2f93709687 [ 1906.893187][ C0] Code: 00 b8 ff ff ff ff c3 0f 1f 40 00 48 8b 05 09 d8 2b 00 64 c7 00 5f 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d e1 d7 2b 00 f7 d8 64 89 01 48 [ 1906.893191][ C0] RSP: 002b:00007ffff1808ff8 EFLAGS: 00000293 ORIG_RAX: 0000000000000053 [ 1906.893200][ C0] RAX: ffffffffffffffda RBX: 00007ffff180bf10 RCX: 00007f2f93709687 [ 1906.893205][ C0] RDX: 00007f2f9417aa00 RSI: 00000000000001ed RDI: 000055bccb78d8a0 [ 1906.893210][ C0] RBP: 00007ffff1809030 R08: 0000000000000000 R09: 0000000000000000 [ 1906.893215][ C0] R10: 0000000000000069 R11: 0000000000000293 R12: 0000000000000000 [ 1906.893220][ C0] R13: 0000000000000000 R14: 00007ffff180bf10 R15: 00007ffff1809520 [ 1906.893926][ T1647] Kernel panic - not syncing: hung_task: blocked tasks [ 1907.279162][ T1647] CPU: 1 PID: 1647 Comm: khungtaskd Not tainted 5.10.0-rc4-next-20201118-syzkaller #0 [ 1907.288683][ T1647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1907.298730][ T1647] Call Trace: [ 1907.302016][ T1647] dump_stack+0x107/0x163 [ 1907.306390][ T1647] panic+0x306/0x73d [ 1907.310389][ T1647] ? __warn_printk+0xf3/0xf3 [ 1907.314990][ T1647] ? lapic_can_unplug_cpu+0x80/0x80 [ 1907.320181][ T1647] ? preempt_schedule_thunk+0x16/0x18 [ 1907.325555][ T1647] ? watchdog.cold+0x22d/0x248 [ 1907.330301][ T1647] ? watchdog+0xc59/0xf30 [ 1907.334619][ T1647] watchdog.cold+0x23e/0x248 [ 1907.339194][ T1647] ? trace_sched_process_hang+0x280/0x280 [ 1907.344896][ T1647] kthread+0x3af/0x4a0 [ 1907.348946][ T1647] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 1907.354821][ T1647] ret_from_fork+0x1f/0x30 [ 1907.360196][ T1647] Kernel Offset: disabled [ 1907.364523][ T1647] Rebooting in 86400 seconds..