[ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Started OpenBSD Secure Shell server. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.10.21' (ECDSA) to the list of known hosts. syzkaller login: [ 362.191285][ T159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.209584][ T159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.223802][ T6607] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 362.376085][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.392823][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program [ 362.438635][ T1214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.446582][ T1214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.451834][ T6604] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 362.474999][ T6604] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 362.495778][ T6818] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 362.540891][ T1214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.568519][ T1214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.593768][ T6604] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 362.619133][ T159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.636109][ T159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program [ 362.670989][ T6604] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 362.693573][ T1214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.731045][ T1214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.751733][ T159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 executing program [ 362.774346][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.798023][ T159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.800482][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.818785][ T6610] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 362.834247][ T6610] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 362.854402][ T6610] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready executing program executing program [ 362.907251][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.941392][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.964982][ T6872] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.004629][ T6872] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.042048][ T1214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.059017][ T6607] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 363.060983][ T1214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.083610][ T6607] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready executing program [ 363.091670][ T6607] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready executing program executing program [ 363.141078][ T1214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.171540][ T1214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program executing program executing program [ 363.201014][ T6607] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 363.721872][ T6604] Bluetooth: hci3: command 0x0409 tx timeout [ 363.729742][ T6607] Bluetooth: hci1: command 0x0409 tx timeout [ 363.736239][ T6604] Bluetooth: hci2: command 0x0409 tx timeout [ 363.762061][ T6604] Bluetooth: hci0: command 0x0409 tx timeout [ 363.782098][ T6604] Bluetooth: hci5: command 0x0409 tx timeout [ 363.792201][ T6604] Bluetooth: hci4: command 0x0409 tx timeout executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 365.798627][ T6604] Bluetooth: hci5: command 0x041b tx timeout [ 365.805998][ T6604] Bluetooth: hci0: command 0x041b tx timeout [ 365.816492][ T6607] Bluetooth: hci1: command 0x041b tx timeout [ 365.817213][ T6604] Bluetooth: hci2: command 0x041b tx timeout [ 365.863522][ T6604] Bluetooth: hci3: command 0x041b tx timeout [ 365.879398][ T6604] Bluetooth: hci4: command 0x041b tx timeout executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 367.879734][ T6604] Bluetooth: hci3: command 0x040f tx timeout [ 367.912120][ T6604] Bluetooth: hci2: command 0x040f tx timeout executing program executing program [ 367.933190][ T6604] Bluetooth: hci1: command 0x040f tx timeout [ 367.947280][ T6604] Bluetooth: hci0: command 0x040f tx timeout [ 367.971111][ T6604] Bluetooth: hci5: command 0x040f tx timeout [ 367.982234][ T6604] Bluetooth: hci4: command 0x040f tx timeout executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 369.958242][ T6604] Bluetooth: hci1: command 0x0419 tx timeout [ 369.964704][ T6604] Bluetooth: hci2: command 0x0419 tx timeout [ 369.981105][ T6604] Bluetooth: hci3: command 0x0419 tx timeout executing program executing program executing program executing program [ 370.038170][ T6604] Bluetooth: hci4: command 0x0419 tx timeout [ 370.058704][ T6604] Bluetooth: hci5: command 0x0419 tx timeout [ 370.070933][ T6604] Bluetooth: hci0: command 0x0419 tx timeout executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 378.209473][ T1375] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.216142][ T1375] ieee802154 phy1 wpan1: encryption failed: -22 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 383.646871][T10689] ------------[ cut here ]------------ [ 383.652556][T10689] jump label: negative count! [ 383.665434][T10689] WARNING: CPU: 1 PID: 10689 at kernel/jump_label.c:235 static_key_slow_try_dec+0xca/0xe0 [ 383.686545][T10689] Modules linked in: [ 383.691521][T10689] CPU: 1 PID: 10689 Comm: syz-executor251 Not tainted 5.14.0-rc5-next-20210809-syzkaller #0 executing program executing program executing program executing program [ 383.748913][T10689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 383.775383][T10689] RIP: 0010:static_key_slow_try_dec+0xca/0xe0 executing program [ 383.783958][T10689] Code: 5d c3 e8 a9 e7 dc ff 45 31 ed 5b 44 89 e8 5d 41 5c 41 5d c3 44 89 e5 eb 8e e8 92 e7 dc ff 48 c7 c7 c0 ce 94 89 e8 22 f3 52 07 <0f> 0b eb c5 48 89 df e8 ca 8a 22 00 e9 6a ff ff ff 0f 1f 44 00 00 [ 383.821398][T10689] RSP: 0018:ffffc90005b77ac0 EFLAGS: 00010286 [ 383.860724][T10689] RAX: 0000000000000000 RBX: ffffffff8d6d70e0 RCX: 0000000000000000 executing program executing program [ 383.883522][T10689] RDX: ffff88801e923900 RSI: ffffffff815d7628 RDI: fffff52000b6ef4a [ 383.893781][T10689] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 383.903632][T10689] R10: ffffffff815d13ce R11: 0000000000000000 R12: 00000000ffffffff [ 383.913989][T10689] R13: 0000000000000001 R14: ffff888077341100 R15: 0000000000000040 executing program executing program executing program [ 383.956657][T10689] FS: 00007f154119d700(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 executing program [ 384.010695][T10689] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 384.041872][T10689] CR2: 0000560538236198 CR3: 000000006fc65000 CR4: 00000000001526e0 executing program [ 384.068790][T10689] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 384.080342][T10689] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 384.089826][T10689] Call Trace: [ 384.093304][T10689] __static_key_slow_dec_deferred+0x60/0x100 executing program executing program executing program executing program [ 384.141792][T10689] kvm_free_lapic+0x144/0x1a0 [ 384.151860][T10689] kvm_arch_vcpu_create+0x890/0xbf0 [ 384.175046][T10689] kvm_vm_ioctl+0x137f/0x23d0 [ 384.186031][T10689] ? kvm_unregister_device_ops+0x90/0x90 [ 384.197935][T10689] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 executing program executing program executing program executing program [ 384.245392][T10689] ? tomoyo_path_number_perm+0x24e/0x590 [ 384.254918][T10689] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 384.277915][T10689] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 384.293703][T10689] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 executing program [ 384.346909][T10689] ? do_vfs_ioctl+0x132/0x15d0 [ 384.362632][T10689] ? vfs_fileattr_set+0xbe0/0xbe0 [ 384.370443][T10689] ? lock_downgrade+0x6e0/0x6e0 [ 384.375588][T10689] ? __fget_files+0x23d/0x3e0 [ 384.384910][T10689] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 384.391792][T10689] ? kvm_unregister_device_ops+0x90/0x90 executing program executing program [ 384.401113][T10689] __x64_sys_ioctl+0x193/0x200 [ 384.411105][T10689] do_syscall_64+0x35/0xb0 executing program executing program executing program [ 384.467375][T10689] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 384.488014][T10689] RIP: 0033:0x44faf9 [ 384.507970][T10689] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 executing program executing program [ 384.556181][T10689] RSP: 002b:00007f154119d208 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 executing program executing program executing program executing program [ 384.612568][T10689] RAX: ffffffffffffffda RBX: 00000000004ce4d8 RCX: 000000000044faf9 [ 384.647216][T10689] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 executing program [ 384.694615][T10689] RBP: 00000000004ce4d0 R08: 00007f154119d700 R09: 0000000000000000 [ 384.751465][T10689] R10: 00007f154119d700 R11: 0000000000000246 R12: 00000000004ce4dc [ 384.784759][T10689] R13: 00007ffdb527176f R14: 00007f154119d300 R15: 0000000000022000 [ 384.797313][T10689] Kernel panic - not syncing: panic_on_warn set ... [ 384.803918][T10689] CPU: 1 PID: 10689 Comm: syz-executor251 Not tainted 5.14.0-rc5-next-20210809-syzkaller #0 [ 384.814014][T10689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 384.824077][T10689] Call Trace: [ 384.827361][T10689] dump_stack_lvl+0xcd/0x134 [ 384.832034][T10689] panic+0x2b0/0x6dd [ 384.835935][T10689] ? __warn_printk+0xf3/0xf3 [ 384.840532][T10689] ? __warn.cold+0x1a/0x44 [ 384.844948][T10689] ? static_key_slow_try_dec+0xca/0xe0 [ 384.850405][T10689] __warn.cold+0x35/0x44 [ 384.854650][T10689] ? wake_up_klogd.part.0+0x8e/0xd0 [ 384.859847][T10689] ? static_key_slow_try_dec+0xca/0xe0 [ 384.865306][T10689] report_bug+0x1bd/0x210 [ 384.869708][T10689] handle_bug+0x3c/0x60 [ 384.873859][T10689] exc_invalid_op+0x14/0x40 [ 384.878361][T10689] asm_exc_invalid_op+0x12/0x20 [ 384.883245][T10689] RIP: 0010:static_key_slow_try_dec+0xca/0xe0 [ 384.889309][T10689] Code: 5d c3 e8 a9 e7 dc ff 45 31 ed 5b 44 89 e8 5d 41 5c 41 5d c3 44 89 e5 eb 8e e8 92 e7 dc ff 48 c7 c7 c0 ce 94 89 e8 22 f3 52 07 <0f> 0b eb c5 48 89 df e8 ca 8a 22 00 e9 6a ff ff ff 0f 1f 44 00 00 [ 384.908922][T10689] RSP: 0018:ffffc90005b77ac0 EFLAGS: 00010286 [ 384.914993][T10689] RAX: 0000000000000000 RBX: ffffffff8d6d70e0 RCX: 0000000000000000 [ 384.922961][T10689] RDX: ffff88801e923900 RSI: ffffffff815d7628 RDI: fffff52000b6ef4a [ 384.930934][T10689] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 384.938903][T10689] R10: ffffffff815d13ce R11: 0000000000000000 R12: 00000000ffffffff [ 384.946868][T10689] R13: 0000000000000001 R14: ffff888077341100 R15: 0000000000000040 [ 384.954841][T10689] ? wake_up_klogd.part.0+0x8e/0xd0 [ 384.960045][T10689] ? vprintk+0x88/0x90 [ 384.964140][T10689] __static_key_slow_dec_deferred+0x60/0x100 [ 384.970123][T10689] kvm_free_lapic+0x144/0x1a0 [ 384.974799][T10689] kvm_arch_vcpu_create+0x890/0xbf0 [ 384.980019][T10689] kvm_vm_ioctl+0x137f/0x23d0 [ 384.984724][T10689] ? kvm_unregister_device_ops+0x90/0x90 [ 384.990368][T10689] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 384.996615][T10689] ? tomoyo_path_number_perm+0x24e/0x590 [ 385.002255][T10689] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 385.008065][T10689] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 385.014043][T10689] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 385.020289][T10689] ? do_vfs_ioctl+0x132/0x15d0 [ 385.025054][T10689] ? vfs_fileattr_set+0xbe0/0xbe0 [ 385.030088][T10689] ? lock_downgrade+0x6e0/0x6e0 [ 385.034949][T10689] ? __fget_files+0x23d/0x3e0 [ 385.039627][T10689] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 385.045866][T10689] ? kvm_unregister_device_ops+0x90/0x90 [ 385.051506][T10689] __x64_sys_ioctl+0x193/0x200 [ 385.056266][T10689] do_syscall_64+0x35/0xb0 [ 385.060696][T10689] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 385.066586][T10689] RIP: 0033:0x44faf9 [ 385.070474][T10689] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 385.090075][T10689] RSP: 002b:00007f154119d208 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 385.098484][T10689] RAX: ffffffffffffffda RBX: 00000000004ce4d8 RCX: 000000000044faf9 [ 385.106446][T10689] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 385.114409][T10689] RBP: 00000000004ce4d0 R08: 00007f154119d700 R09: 0000000000000000 [ 385.122398][T10689] R10: 00007f154119d700 R11: 0000000000000246 R12: 00000000004ce4dc [ 385.130376][T10689] R13: 00007ffdb527176f R14: 00007f154119d300 R15: 0000000000022000 [ 385.139688][T10689] Kernel Offset: disabled [ 385.144090][T10689] Rebooting in 86400 seconds..