[ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.93' (ECDSA) to the list of known hosts. 2020/05/07 13:35:54 parsed 1 programs 2020/05/07 13:35:54 executed programs: 0 syzkaller login: [ 64.612861][ T7171] IPVS: ftp: loaded support on port[0] = 21 [ 64.708131][ T7171] chnl_net:caif_netlink_parms(): no params data found [ 64.762050][ T7171] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.769912][ T7171] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.778621][ T7171] device bridge_slave_0 entered promiscuous mode [ 64.787852][ T7171] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.795806][ T7171] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.803951][ T7171] device bridge_slave_1 entered promiscuous mode [ 64.824882][ T7171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.835901][ T7171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.859405][ T7171] team0: Port device team_slave_0 added [ 64.867473][ T7171] team0: Port device team_slave_1 added [ 64.886256][ T7171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.893289][ T7171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.920231][ T7171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.933486][ T7171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.940721][ T7171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.967087][ T7171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.034156][ T7171] device hsr_slave_0 entered promiscuous mode [ 65.090514][ T7171] device hsr_slave_1 entered promiscuous mode [ 65.229803][ T7171] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.273072][ T7171] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.313258][ T7171] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.382664][ T7171] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.437198][ T7171] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.444668][ T7171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.452754][ T7171] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.459940][ T7171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.507078][ T7171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.521056][ T3155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.531840][ T3155] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.539751][ T3155] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.549562][ T3155] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 65.563940][ T7171] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.574971][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.585525][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.592717][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.612260][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.621336][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.628399][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.643468][ T3155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.663670][ T3155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.672672][ T3155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.683029][ T3155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.691900][ T3155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.714497][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.722341][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.743029][ T7171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.771826][ T3155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.783348][ T3155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.806786][ T7171] device veth0_vlan entered promiscuous mode [ 65.814933][ T2874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.826046][ T2874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.844052][ T7171] device veth1_vlan entered promiscuous mode [ 65.854390][ T3155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.865075][ T3155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.873880][ T3155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.899399][ T7171] device veth0_macvtap entered promiscuous mode [ 65.907317][ T2874] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.916685][ T2874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.926320][ T2874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.937731][ T7171] device veth1_macvtap entered promiscuous mode [ 65.946235][ T3155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.954844][ T3155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.974880][ T7171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.982392][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.993124][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.004949][ T7171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.013562][ T3317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.022640][ T3317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.839657][ C0] hrtimer: interrupt took 40727 ns 2020/05/07 13:35:59 result: hanged=false err=executor 0: exit status 67 /bad argument type 18446744073709551615 (errno 0) *** stack smashing detected ***: /root/syz-executor.0 terminated bad argument type 18446744073709551615 (errno 0) *** stack smashing detected ***: /root/syz-executor.0 terminated /command has bad number of arguments 18446744073709551615 (errno 0) using non-main thread in non-thread mode (errno 0) child failed (errno 0) loop exited with status 67 /bad argument type 18446744073709551615 (errno 0) *** stack smashing detected ***: /root/syz-executor.0 terminated bad argument type 18446744073709551615 (errno 0) *** stack smashing detected ***: /root/syz-executor.0 terminated /command has bad number of arguments 18446744073709551615 (errno 0) using non-main thread in non-thread mode (errno 0) child failed (errno 0) loop exited with status 67 [ 69.181576][ T7598] ------------[ cut here ]------------ [ 69.187328][ T7598] WARNING: CPU: 1 PID: 7598 at kernel/cgroup/cgroup.c:3111 cgroup_apply_control_disable+0x404/0x4d0 [ 69.198082][ T7598] Kernel panic - not syncing: panic_on_warn set ... [ 69.204651][ T7598] CPU: 1 PID: 7598 Comm: syz-executor.0 Not tainted 5.7.0-rc1-next-20200415-syzkaller #0 [ 69.214437][ T7598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.224479][ T7598] Call Trace: [ 69.227773][ T7598] dump_stack+0x188/0x20d [ 69.232099][ T7598] ? cgroup_apply_control_disable+0x3a0/0x4d0 [ 69.238151][ T7598] panic+0x2e3/0x75c [ 69.242030][ T7598] ? add_taint.cold+0x16/0x16 [ 69.246692][ T7598] ? printk+0xba/0xed [ 69.250656][ T7598] ? kmsg_dump_rewind_nolock+0xd9/0xd9 [ 69.256106][ T7598] ? __warn.cold+0x14/0x35 [ 69.260513][ T7598] ? __warn+0xd5/0x1c8 [ 69.264700][ T7598] ? cgroup_apply_control_disable+0x404/0x4d0 [ 69.270771][ T7598] __warn.cold+0x2f/0x35 [ 69.274998][ T7598] ? cgroup_apply_control_disable+0x404/0x4d0 [ 69.281055][ T7598] report_bug+0x27b/0x2f0 [ 69.285366][ T7598] do_error_trap+0x12b/0x220 [ 69.289948][ T7598] ? cgroup_apply_control_disable+0x404/0x4d0 [ 69.296094][ T7598] do_invalid_op+0x32/0x40 [ 69.300500][ T7598] ? cgroup_apply_control_disable+0x404/0x4d0 [ 69.306561][ T7598] invalid_op+0x23/0x30 [ 69.310706][ T7598] RIP: 0010:cgroup_apply_control_disable+0x404/0x4d0 [ 69.317375][ T7598] Code: ff ff ff e8 4e 9c 06 00 48 89 ef 41 ff d5 e9 1a ff ff ff e8 3e 9c 06 00 48 89 ef e8 56 de fe ff e9 08 ff ff ff e8 2c 9c 06 00 <0f> 0b e9 ab fd ff ff 48 83 c4 30 5b 5d 41 5c 41 5d 41 5e 41 5f e9 [ 69.337163][ T7598] RSP: 0018:ffffc900069b7a90 EFLAGS: 00010293 [ 69.343217][ T7598] RAX: ffff8880915d05c0 RBX: dffffc0000000000 RCX: ffffffff816c960d [ 69.351173][ T7598] RDX: 0000000000000000 RSI: ffffffff816c9864 RDI: 0000000000000007 [ 69.359132][ T7598] RBP: ffff888098d2b400 R08: ffff8880915d05c0 R09: ffffed1015ce710c [ 69.367092][ T7598] R10: ffff8880ae73885b R11: ffffed1015ce710b R12: 0000000000000008 [ 69.375052][ T7598] R13: 0000000000000002 R14: ffffffff89a30ac0 R15: ffff88809259c000 [ 69.383011][ T7598] ? cgroup_apply_control_disable+0x1ad/0x4d0 [ 69.389056][ T7598] ? cgroup_apply_control_disable+0x404/0x4d0 [ 69.395115][ T7598] rebind_subsystems+0x3cd/0xb00 [ 69.400052][ T7598] ? cgroup_apply_control_disable+0x4d0/0x4d0 [ 69.407846][ T7598] ? css_populate_dir+0x288/0x450 [ 69.412859][ T7598] cgroup_setup_root+0x36a/0xa30 [ 69.417782][ T7598] ? rebind_subsystems+0xb00/0xb00 [ 69.422891][ T7598] ? init_cgroup_housekeeping+0x411/0x5a0 [ 69.428590][ T7598] cgroup1_get_tree+0xd6b/0x13c3 [ 69.433512][ T7598] ? cgroup1_reconfigure+0x7d0/0x7d0 [ 69.438771][ T7598] ? security_capable+0x8e/0xc0 [ 69.443617][ T7598] vfs_get_tree+0x89/0x2f0 [ 69.448019][ T7598] do_mount+0x1306/0x1b30 [ 69.452334][ T7598] ? copy_mount_string+0x40/0x40 [ 69.457269][ T7598] ? _copy_from_user+0x13c/0x1a0 [ 69.462190][ T7598] __x64_sys_mount+0x18f/0x230 [ 69.466948][ T7598] do_syscall_64+0xf6/0x7d0 [ 69.471543][ T7598] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 69.477425][ T7598] RIP: 0033:0x45f27a [ 69.481309][ T7598] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 ad 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 8a 8c fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 69.500897][ T7598] RSP: 002b:00007ffded086498 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 69.509285][ T7598] RAX: ffffffffffffffda RBX: 00007ffded0864f0 RCX: 000000000045f27a [ 69.517243][ T7598] RDX: 00000000004cad91 RSI: 00000000004c1465 RDI: 00000000004c1428 [ 69.525312][ T7598] RBP: 0000000000000000 R08: 00000000004cf7b8 R09: 000000000000001c [ 69.533262][ T7598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000418390 [ 69.541208][ T7598] R13: 00007ffded086718 R14: 0000000000000000 R15: 0000000000000000 [ 69.550888][ T7598] Kernel Offset: disabled [ 69.555299][ T7598] Rebooting in 86400 seconds..