[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.18' (ECDSA) to the list of known hosts. 2020/08/27 19:37:00 parsed 1 programs 2020/08/27 19:37:00 executed programs: 0 syzkaller login: [ 79.725355][ T6864] IPVS: ftp: loaded support on port[0] = 21 [ 79.875514][ T6864] chnl_net:caif_netlink_parms(): no params data found [ 79.981824][ T6864] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.989844][ T6864] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.998226][ T6864] device bridge_slave_0 entered promiscuous mode [ 80.007381][ T6864] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.014894][ T6864] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.022732][ T6864] device bridge_slave_1 entered promiscuous mode [ 80.044466][ T6864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.055541][ T6864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.079367][ T6864] team0: Port device team_slave_0 added [ 80.087555][ T6864] team0: Port device team_slave_1 added [ 80.106624][ T6864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.113638][ T6864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.139655][ T6864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.152310][ T6864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.159709][ T6864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.186006][ T6864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.214727][ T6864] device hsr_slave_0 entered promiscuous mode [ 80.221568][ T6864] device hsr_slave_1 entered promiscuous mode [ 80.325730][ T6864] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.341365][ T6864] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.350762][ T6864] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.365801][ T6864] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.392751][ T6864] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.400324][ T6864] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.408445][ T6864] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.415641][ T6864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.465218][ T6864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.479455][ T6587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.490283][ T6587] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.499487][ T6587] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.507874][ T6587] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 80.524820][ T6864] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.537493][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.546462][ T2795] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.553631][ T2795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.574884][ T6587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.584732][ T6587] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.591817][ T6587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.614152][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.622983][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.632388][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.646250][ T6864] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.658447][ T6864] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.667463][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.676751][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.695726][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.703287][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.720717][ T6864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.741206][ T6587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.765229][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.775984][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.784723][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.794481][ T6864] device veth0_vlan entered promiscuous mode [ 80.808721][ T6864] device veth1_vlan entered promiscuous mode [ 80.830421][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 80.839628][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 80.848717][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.860763][ T6864] device veth0_macvtap entered promiscuous mode [ 80.871888][ T6864] device veth1_macvtap entered promiscuous mode [ 80.891145][ T6864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.899082][ T6587] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.909802][ T6587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.922189][ T6864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.929863][ T6587] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.939038][ T6587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.951142][ T6864] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.962903][ T6864] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.979584][ T6864] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.990643][ T6864] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.764758][ T6587] Bluetooth: hci0: command 0x0409 tx timeout 2020/08/27 19:37:05 executed programs: 62 [ 83.844110][ T2595] Bluetooth: hci0: command 0x041b tx timeout [ 85.924039][ T2595] Bluetooth: hci0: command 0x040f tx timeout [ 87.795711][ T7662] general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] PREEMPT SMP KASAN [ 87.807461][ T7662] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 87.815855][ T7662] CPU: 1 PID: 7662 Comm: syz-executor.0 Not tainted 5.9.0-rc2-syzkaller #0 [ 87.824437][ T7662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 87.834506][ T7662] RIP: 0010:__sock_release+0xbb/0x280 [ 87.839880][ T7662] Code: ff df 48 c1 ea 03 80 3c 02 00 0f 85 a5 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 63 20 49 8d 7c 24 10 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 8e 01 00 00 48 89 df 41 ff 54 24 10 48 8d 7b 18 [ 87.859661][ T7662] RSP: 0018:ffffc9000a91fe00 EFLAGS: 00010202 [ 87.865808][ T7662] RAX: dffffc0000000000 RBX: ffff888084e4b540 RCX: 1ffff92001523f62 [ 87.873820][ T7662] RDX: 0000000000000002 RSI: 0000000000000004 RDI: 0000000000000010 [ 87.881809][ T7662] RBP: ffff888084e4b6e0 R08: ffff888084e4b6e0 R09: ffff888084e4b6f3 [ 87.889763][ T7662] R10: ffffed10109c96de R11: 0000000000000000 R12: 0000000000000000 [ 87.897950][ T7662] R13: ffff888084e4b560 R14: 0000000000000000 R15: ffff888086b4dd38 [ 87.906436][ T7662] FS: 0000000000000000(0000) GS:ffff8880ae700000(0063) knlGS:000000000a4e8900 [ 87.915380][ T7662] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 87.922421][ T7662] CR2: 00000000f7792db0 CR3: 00000000a26cc000 CR4: 00000000001506e0 [ 87.930434][ T7662] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 87.938816][ T7662] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 87.946879][ T7662] Call Trace: [ 87.950377][ T7662] sock_close+0x18/0x20 [ 87.954543][ T7662] __fput+0x285/0x920 [ 87.958536][ T7662] ? __sock_release+0x280/0x280 [ 87.963541][ T7662] task_work_run+0xdd/0x190 [ 87.968288][ T7662] exit_to_user_mode_prepare+0x195/0x1c0 [ 87.974136][ T7662] syscall_exit_to_user_mode+0x59/0x2b0 [ 87.979823][ T7662] __do_fast_syscall_32+0x63/0x80 [ 87.984856][ T7662] do_fast_syscall_32+0x2f/0x70 [ 87.989710][ T7662] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 87.996182][ T7662] RIP: 0023:0xf7fb9549 [ 88.000250][ T7662] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 88.020197][ T7662] RSP: 002b:00000000ffe101ec EFLAGS: 00000292 ORIG_RAX: 0000000000000006 [ 88.029615][ T7662] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 88.037576][ T7662] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 88.045542][ T7662] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 88.053505][ T7662] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 88.061591][ T7662] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 88.069963][ T7662] Modules linked in: [ 88.074816][ T2595] Bluetooth: hci0: command 0x0419 tx timeout [ 88.081495][ T7662] ---[ end trace 4b0eaddb14ff000c ]--- [ 88.087667][ T7662] RIP: 0010:__sock_release+0xbb/0x280 [ 88.093059][ T7662] Code: ff df 48 c1 ea 03 80 3c 02 00 0f 85 a5 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 63 20 49 8d 7c 24 10 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 8e 01 00 00 48 89 df 41 ff 54 24 10 48 8d 7b 18 [ 88.112947][ T7662] RSP: 0018:ffffc9000a91fe00 EFLAGS: 00010202 [ 88.119099][ T7662] RAX: dffffc0000000000 RBX: ffff888084e4b540 RCX: 1ffff92001523f62 [ 88.127167][ T7662] RDX: 0000000000000002 RSI: 0000000000000004 RDI: 0000000000000010 [ 88.135202][ T7662] RBP: ffff888084e4b6e0 R08: ffff888084e4b6e0 R09: ffff888084e4b6f3 [ 88.143304][ T7662] R10: ffffed10109c96de R11: 0000000000000000 R12: 0000000000000000 [ 88.151308][ T7662] R13: ffff888084e4b560 R14: 0000000000000000 R15: ffff888086b4dd38 [ 88.159389][ T7662] FS: 0000000000000000(0000) GS:ffff8880ae700000(0063) knlGS:000000000a4e8900 [ 88.168416][ T7662] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 88.175222][ T7662] CR2: 00000000f7792db0 CR3: 00000000a26cc000 CR4: 00000000001506e0 [ 88.183695][ T7662] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 88.192068][ T7662] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 88.200377][ T7662] Kernel panic - not syncing: Fatal exception [ 88.207646][ T7662] Kernel Offset: disabled [ 88.211976][ T7662] Rebooting in 86400 seconds..