[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.87' (ECDSA) to the list of known hosts. syzkaller login: [ 467.696501][ T6834] IPVS: ftp: loaded support on port[0] = 21 [ 467.778007][ T6834] chnl_net:caif_netlink_parms(): no params data found [ 467.825168][ T6834] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.832570][ T6834] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.841869][ T6834] device bridge_slave_0 entered promiscuous mode [ 467.850152][ T6834] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.858064][ T6834] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.866148][ T6834] device bridge_slave_1 entered promiscuous mode [ 467.885171][ T6834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.896251][ T6834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.917611][ T6834] team0: Port device team_slave_0 added [ 467.925030][ T6834] team0: Port device team_slave_1 added [ 467.941619][ T6834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.948652][ T6834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.975651][ T6834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.988517][ T6834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.996066][ T6834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.022675][ T6834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.048599][ T6834] device hsr_slave_0 entered promiscuous mode [ 468.055362][ T6834] device hsr_slave_1 entered promiscuous mode [ 468.142034][ T6834] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 468.152606][ T6834] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 468.162013][ T6834] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 468.170724][ T6834] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 468.190867][ T6834] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.198008][ T6834] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.205720][ T6834] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.212836][ T6834] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.251494][ T6834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.265282][ T6895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 468.275278][ T6895] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.283972][ T6895] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.293252][ T6895] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 468.305806][ T6834] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.317565][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 468.326527][ T2585] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.333676][ T2585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.352920][ T7044] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 468.362072][ T7044] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.369701][ T7044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.391752][ T6826] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 468.401094][ T6826] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 468.409930][ T6826] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 468.418751][ T6826] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 468.430050][ T6834] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 468.438202][ T6826] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 468.461687][ T6834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.468693][ T6895] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 468.477807][ T6895] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 468.503245][ T7042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 468.516917][ T6834] device veth0_vlan entered promiscuous mode [ 468.524258][ T6826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 468.532879][ T6826] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 468.541522][ T6826] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 468.555626][ T6834] device veth1_vlan entered promiscuous mode [ 468.575501][ T6895] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 468.585297][ T6895] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 468.594453][ T6895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 468.605126][ T6834] device veth0_macvtap entered promiscuous mode [ 468.615718][ T6834] device veth1_macvtap entered promiscuous mode [ 468.632972][ T6834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.641803][ T6826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 468.653403][ T6826] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 468.666793][ T6834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 468.675091][ T7044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 468.688179][ T6834] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.697323][ T6834] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.706179][ T6834] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.715328][ T6834] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.834803][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 498.551594][ T0] NOHZ: local_softirq_pending 08 [ 559.990970][ T0] NOHZ: local_softirq_pending 08 [ 580.471208][ T0] NOHZ: local_softirq_pending 08 [ 600.951369][ T0] NOHZ: local_softirq_pending 08 [ 616.310369][ T1170] INFO: task syz-executor773:6834 blocked for more than 143 seconds. [ 616.318522][ T1170] Not tainted 5.9.0-rc2-syzkaller #0 [ 616.326299][ T1170] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 616.335074][ T1170] task:syz-executor773 state:D stack:24208 pid: 6834 ppid: 6833 flags:0x00004000 [ 616.344856][ T1170] Call Trace: [ 616.348224][ T1170] __schedule+0x979/0xce0 [ 616.353365][ T1170] ? schedule+0x188/0x220 [ 616.357823][ T1170] ? schedule_timeout+0x43/0x250 [ 616.363805][ T1170] ? lockdep_hardirqs_on_prepare+0x445/0x6a0 [ 616.369789][ T1170] ? _raw_spin_unlock_irq+0x1f/0x80 [ 616.375183][ T1170] ? lockdep_hardirqs_on+0x49/0xf0 [ 616.380868][ T1170] ? do_wait_for_common+0x232/0x370 [ 616.386052][ T1170] ? console_conditional_schedule+0x30/0x30 [ 616.392377][ T1170] ? wait_for_completion+0x43/0x50 [ 616.397566][ T1170] ? __cancel_work_timer+0x44d/0x5c0 [ 616.403748][ T1170] ? start_flush_work+0x730/0x730 [ 616.408863][ T1170] ? tls_sk_proto_close+0xc6/0x870 [ 616.414910][ T1170] ? inet_release+0x16e/0x1f0 [ 616.419619][ T1170] ? sock_close+0xd8/0x260 [ 616.424776][ T1170] ? sock_mmap+0x90/0x90 [ 616.429080][ T1170] ? __fput+0x34f/0x7b0 [ 616.434009][ T1170] ? task_work_run+0x137/0x1c0 [ 616.438805][ T1170] ? exit_to_user_mode_prepare+0xfa/0x1b0 [ 616.445421][ T1170] ? syscall_exit_to_user_mode+0x5e/0x1a0 [ 616.452060][ T1170] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 616.458157][ T1170] [ 616.458157][ T1170] Showing all locks held in the system: [ 616.467213][ T1170] 1 lock held by khungtaskd/1170: [ 616.473079][ T1170] #0: ffffffff894fe510 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 616.482494][ T1170] 1 lock held by systemd-journal/3899: [ 616.487958][ T1170] #0: ffff8880ae9358d8 (&rq->lock){-.-.}-{2:2}, at: newidle_balance+0x647/0xae0 [ 616.497178][ T1170] 1 lock held by in:imklog/6474: [ 616.502174][ T1170] 1 lock held by syz-executor773/6834: [ 616.507629][ T1170] #0: ffff888087ffec90 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: sock_close+0x94/0x260 [ 616.517827][ T1170] 3 locks held by kworker/0:1/6895: [ 616.523077][ T1170] #0: ffff8880aa463d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x6f4/0xfc0 [ 616.533367][ T1170] #1: ffffc90001677d80 ((work_completion)(&(&sw_ctx_tx->tx_work.work)->work)){+.+.}-{0:0}, at: process_one_work+0x733/0xfc0 [ 616.546365][ T1170] #2: ffff8880a338fcd8 (&ctx->tx_lock){+.+.}-{3:3}, at: tx_work_handler+0x111/0x150 [ 616.556064][ T1170] [ 616.558385][ T1170] ============================================= [ 616.558385][ T1170] [ 616.567217][ T1170] NMI backtrace for cpu 0 [ 616.571653][ T1170] CPU: 0 PID: 1170 Comm: khungtaskd Not tainted 5.9.0-rc2-syzkaller #0 [ 616.579873][ T1170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 616.589903][ T1170] Call Trace: [ 616.593252][ T1170] dump_stack+0x1f0/0x31e [ 616.597590][ T1170] nmi_cpu_backtrace+0x9f/0x180 [ 616.602453][ T1170] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 616.608516][ T1170] nmi_trigger_cpumask_backtrace+0x16a/0x280 [ 616.614518][ T1170] watchdog+0xd65/0xdb0 [ 616.618679][ T1170] kthread+0x37e/0x3a0 [ 616.622723][ T1170] ? hungtask_pm_notify+0x50/0x50 [ 616.627727][ T1170] ? kthread_blkcg+0xd0/0xd0 [ 616.632366][ T1170] ret_from_fork+0x1f/0x30 [ 616.636849][ T1170] Sending NMI from CPU 0 to CPUs 1: [ 616.642309][ C1] NMI backtrace for cpu 1 [ 616.642313][ C1] CPU: 1 PID: 3899 Comm: systemd-journal Not tainted 5.9.0-rc2-syzkaller #0 [ 616.642318][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 616.642320][ C1] RIP: 0010:0xffffffffa0006da3 [ 616.642327][ C1] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 0f 1f 44 00 00 55 48 89 e5 48 81 ec 00 00 00 00 53 41 55 41 56 41 57 <31> c0 45 31 ed 48 89 fb 8b 43 04 be 3e 00 00 c0 48 39 f0 0f 85 8c [ 616.642330][ C1] RSP: 0018:ffffc900015e7d38 EFLAGS: 00000282 [ 616.642336][ C1] RAX: 1ffff920001aac06 RBX: ffffc90000d56030 RCX: ffff888092a6a2c0 [ 616.642339][ C1] RDX: 0000000000000000 RSI: ffffc90000d56038 RDI: ffffc900015e7de8 [ 616.642343][ C1] RBP: ffffc900015e7d58 R08: ffffffff81754ba6 R09: ffffffff81754572 [ 616.642346][ C1] R10: 0000000000000002 R11: ffff888092a6a2c0 R12: dffffc0000000000 [ 616.642349][ C1] R13: 000000007fff0000 R14: 0000000000000000 R15: ffffc900015e7de8 [ 616.642353][ C1] FS: 00007fa1e32468c0(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 616.642356][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 616.642360][ C1] CR2: 00007fa1e05ed028 CR3: 0000000092faf000 CR4: 00000000001506e0 [ 616.642363][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 616.642366][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 616.642369][ C1] Call Trace: [ 616.642371][ C1] bpf_prog_run_pin_on_cpu+0x6a/0x190 [ 616.642374][ C1] __seccomp_filter+0x3e7/0x1c70 [ 616.642376][ C1] ? lockdep_hardirqs_off+0x29/0xb0 [ 616.642379][ C1] ? _raw_spin_unlock_irqrestore+0xb4/0xd0 [ 616.642382][ C1] ? lock_is_held_type+0xb3/0xe0 [ 616.642384][ C1] ? lock_is_held_type+0xb3/0xe0 [ 616.642387][ C1] ? __secure_computing+0x19b/0x320 [ 616.642390][ C1] syscall_enter_from_user_mode+0x10f/0x1a0 [ 616.642392][ C1] do_syscall_64+0xf/0x70 [ 616.642395][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 616.642398][ C1] RIP: 0033:0x7fa1e2502687 [ 616.642404][ C1] Code: 00 b8 ff ff ff ff c3 0f 1f 40 00 48 8b 05 09 d8 2b 00 64 c7 00 5f 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d e1 d7 2b 00 f7 d8 64 89 01 48 [ 616.642407][ C1] RSP: 002b:00007fffdff750a8 EFLAGS: 00000293 ORIG_RAX: 0000000000000053 [ 616.642413][ C1] RAX: ffffffffffffffda RBX: 00007fffdff78110 RCX: 00007fa1e2502687 [ 616.642416][ C1] RDX: 0000000000000000 RSI: 00000000000001ed RDI: 0000557e2a67c8a0 [ 616.642420][ C1] RBP: 00007fffdff750e0 R08: 0000557e289e93e5 R09: 0000000000000018 [ 616.642423][ C1] R10: 0000000000000069 R11: 0000000000000293 R12: 0000000000000000 [ 616.642427][ C1] R13: 0000000000000001 R14: 0000557e2a67c8a0 R15: 00007fffdff75720 [ 616.902613][ T1170] Kernel panic - not syncing: hung_task: blocked tasks [ 616.909505][ T1170] CPU: 0 PID: 1170 Comm: khungtaskd Not tainted 5.9.0-rc2-syzkaller #0 [ 616.917735][ T1170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 616.927821][ T1170] Call Trace: [ 616.931098][ T1170] dump_stack+0x1f0/0x31e [ 616.935474][ T1170] panic+0x264/0x7a0 [ 616.939382][ T1170] ? nmi_trigger_cpumask_backtrace+0x206/0x280 [ 616.945518][ T1170] watchdog+0xda5/0xdb0 [ 616.949669][ T1170] kthread+0x37e/0x3a0 [ 616.953723][ T1170] ? hungtask_pm_notify+0x50/0x50 [ 616.958720][ T1170] ? kthread_blkcg+0xd0/0xd0 [ 616.963322][ T1170] ret_from_fork+0x1f/0x30 [ 616.969080][ T1170] Kernel Offset: disabled [ 616.973408][ T1170] Rebooting in 86400 seconds..