Warning: Permanently added '10.128.1.33' (ECDSA) to the list of known hosts. 2020/09/01 08:05:47 parsed 1 programs 2020/09/01 08:05:47 executed programs: 0 syzkaller login: [ 1050.087402][ T6871] IPVS: ftp: loaded support on port[0] = 21 [ 1050.244006][ T6871] chnl_net:caif_netlink_parms(): no params data found [ 1050.306377][ T6871] bridge0: port 1(bridge_slave_0) entered blocking state [ 1050.313875][ T6871] bridge0: port 1(bridge_slave_0) entered disabled state [ 1050.322514][ T6871] device bridge_slave_0 entered promiscuous mode [ 1050.331649][ T6871] bridge0: port 2(bridge_slave_1) entered blocking state [ 1050.339148][ T6871] bridge0: port 2(bridge_slave_1) entered disabled state [ 1050.346979][ T6871] device bridge_slave_1 entered promiscuous mode [ 1050.367591][ T6871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1050.378330][ T6871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1050.400725][ T6871] team0: Port device team_slave_0 added [ 1050.408791][ T6871] team0: Port device team_slave_1 added [ 1050.427648][ T6871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1050.435797][ T6871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1050.462184][ T6871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1050.475273][ T6871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1050.482288][ T6871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1050.508838][ T6871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1050.535979][ T6871] device hsr_slave_0 entered promiscuous mode [ 1050.542678][ T6871] device hsr_slave_1 entered promiscuous mode [ 1050.636851][ T6871] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1050.647700][ T6871] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1050.657968][ T6871] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1050.667779][ T6871] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1050.690783][ T6871] bridge0: port 2(bridge_slave_1) entered blocking state [ 1050.697943][ T6871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1050.705725][ T6871] bridge0: port 1(bridge_slave_0) entered blocking state [ 1050.712783][ T6871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1050.758143][ T6871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1050.771725][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1050.782482][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 1050.791462][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 1050.799935][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1050.813443][ T6871] 8021q: adding VLAN 0 to HW filter on device team0 [ 1050.825942][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1050.834821][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 1050.841868][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1050.855378][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1050.863726][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 1050.870930][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1050.895902][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1050.906284][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1050.915335][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1050.923841][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1050.937267][ T6871] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1050.949158][ T6871] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1050.958514][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1050.977295][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1050.984899][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1051.000174][ T6871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1051.019936][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1051.039617][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1051.048986][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1051.057702][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1051.068412][ T6871] device veth0_vlan entered promiscuous mode [ 1051.081212][ T6871] device veth1_vlan entered promiscuous mode [ 1051.102998][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1051.111884][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1051.120460][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1051.131723][ T6871] device veth0_macvtap entered promiscuous mode [ 1051.142141][ T6871] device veth1_macvtap entered promiscuous mode [ 1051.160259][ T6871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1051.168230][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1051.178491][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1051.191391][ T6871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1051.199400][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1051.211815][ T6871] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.221315][ T6871] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.230414][ T6871] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.239792][ T6871] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.105546][ T17] Bluetooth: hci0: command 0x0409 tx timeout 2020/09/01 08:05:52 executed programs: 86 [ 1054.184416][ T5] Bluetooth: hci0: command 0x041b tx timeout [ 1056.264065][ T6841] Bluetooth: hci0: command 0x040f tx timeout [ 1058.353588][ T7094] Bluetooth: hci0: command 0x0419 tx timeout 2020/09/01 08:05:57 executed programs: 238 2020/09/01 08:06:02 executed programs: 396 2020/09/01 08:06:07 executed programs: 554 2020/09/01 08:06:12 executed programs: 715 2020/09/01 08:06:17 executed programs: 871 2020/09/01 08:06:22 executed programs: 1033 2020/09/01 08:06:27 executed programs: 1187 2020/09/01 08:06:32 executed programs: 1338 2020/09/01 08:06:37 executed programs: 1495 2020/09/01 08:06:42 executed programs: 1661 2020/09/01 08:06:47 executed programs: 1822 2020/09/01 08:06:52 executed programs: 1975 2020/09/01 08:06:57 executed programs: 2127 2020/09/01 08:07:02 executed programs: 2279 2020/09/01 08:07:07 executed programs: 2444 2020/09/01 08:07:12 executed programs: 2597 2020/09/01 08:07:17 executed programs: 2753 2020/09/01 08:07:22 executed programs: 2906 2020/09/01 08:07:27 executed programs: 3066 2020/09/01 08:07:32 executed programs: 3229 2020/09/01 08:07:37 executed programs: 3379 2020/09/01 08:07:42 executed programs: 3529 2020/09/01 08:07:47 executed programs: 3680 [ 1173.852017][ T7094] Bluetooth: hci0: command 0x0406 tx timeout 2020/09/01 08:07:52 executed programs: 3824 2020/09/01 08:07:57 executed programs: 3981 2020/09/01 08:08:02 executed programs: 4140 2020/09/01 08:08:07 executed programs: 4289 2020/09/01 08:08:12 executed programs: 4439 2020/09/01 08:08:17 executed programs: 4596 2020/09/01 08:08:22 executed programs: 4750 [ 1205.820498][T24229] ------------[ cut here ]------------ [ 1205.826125][T24229] ODEBUG: free active (active state 1) object type: rcu_head hint: 0x0 [ 1205.835120][T24229] WARNING: CPU: 1 PID: 24229 at lib/debugobjects.c:485 debug_print_object+0x160/0x250 [ 1205.844676][T24229] Modules linked in: [ 1205.848602][T24229] CPU: 1 PID: 24229 Comm: syz-executor.0 Not tainted 5.9.0-rc2-next-20200828-syzkaller #0 [ 1205.858499][T24229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1205.868806][T24229] RIP: 0010:debug_print_object+0x160/0x250 [ 1205.874619][T24229] Code: dd c0 70 94 88 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 bf 00 00 00 48 8b 14 dd c0 70 94 88 48 c7 c7 20 66 94 88 e8 ab 58 a4 fd <0f> 0b 83 05 93 b0 1b 07 01 48 83 c4 20 5b 5d 41 5c 41 5d c3 48 89 [ 1205.894360][T24229] RSP: 0018:ffffc900093c7ba8 EFLAGS: 00010086 [ 1205.900440][T24229] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 1205.908429][T24229] RDX: ffff888096e38340 RSI: ffffffff815daa77 RDI: fffff52001278f67 [ 1205.916533][T24229] RBP: 0000000000000001 R08: 0000000000000001 R09: ffff8880ae720f8b [ 1205.924546][T24229] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff89c674c0 [ 1205.932626][T24229] R13: 0000000000000000 R14: dead000000000100 R15: dffffc0000000000 [ 1205.940620][T24229] FS: 00007f7b2fea9700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 1205.949559][T24229] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1205.956139][T24229] CR2: 00007f7b2fe87db8 CR3: 00000000a6e32000 CR4: 00000000001506e0 [ 1205.964416][T24229] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1205.972870][T24229] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1205.980891][T24229] Call Trace: [ 1205.984879][T24229] debug_check_no_obj_freed+0x301/0x41c [ 1205.990668][T24229] kmem_cache_free.part.0+0x16d/0x1f0 [ 1205.996158][T24229] task_work_run+0xdd/0x190 [ 1206.000878][T24229] get_signal+0xd89/0x1f00 [ 1206.005365][T24229] arch_do_signal+0x82/0x2520 [ 1206.010161][T24229] ? lock_downgrade+0x830/0x830 [ 1206.015316][T24229] ? __ia32_sys_epoll_create+0x1e0/0x1e0 [ 1206.020953][T24229] ? copy_siginfo_to_user32+0xa0/0xa0 [ 1206.026319][T24229] ? ep_unregister_pollwait.constprop.0+0x3c0/0x3c0 [ 1206.033073][T24229] ? __might_fault+0x190/0x1d0 [ 1206.037913][T24229] ? exit_to_user_mode_prepare+0xb9/0x1c0 [ 1206.043817][T24229] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 1206.049796][T24229] exit_to_user_mode_prepare+0x15d/0x1c0 [ 1206.055550][T24229] syscall_exit_to_user_mode+0x59/0x2b0 [ 1206.061392][T24229] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1206.067364][T24229] RIP: 0033:0x45d5b9 [ 1206.071255][T24229] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1206.091029][T24229] RSP: 002b:00007f7b2fea8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1206.099525][T24229] RAX: 0000000000000000 RBX: 0000000000002ac0 RCX: 000000000045d5b9 [ 1206.107488][T24229] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000004 [ 1206.115455][T24229] RBP: 000000000118cf88 R08: 0000000000000000 R09: 0000000000000000 [ 1206.123418][T24229] R10: 0000000020000040 R11: 0000000000000246 R12: 000000000118cf4c [ 1206.131680][T24229] R13: 00007ffc086fc4af R14: 00007f7b2fea99c0 R15: 000000000118cf4c [ 1206.139815][T24229] Kernel panic - not syncing: panic_on_warn set ... [ 1206.146657][T24229] CPU: 1 PID: 24229 Comm: syz-executor.0 Not tainted 5.9.0-rc2-next-20200828-syzkaller #0 [ 1206.156842][T24229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1206.166899][T24229] Call Trace: [ 1206.170342][T24229] dump_stack+0x18f/0x20d [ 1206.174705][T24229] panic+0x2e3/0x75c [ 1206.178746][T24229] ? __warn_printk+0xf3/0xf3 [ 1206.183417][T24229] ? __warn.cold+0x1d/0xc1 [ 1206.188041][T24229] ? __warn.cold+0x14/0xc1 [ 1206.192672][T24229] ? debug_print_object+0x160/0x250 [ 1206.197862][T24229] __warn.cold+0x38/0xc1 [ 1206.202240][T24229] ? debug_print_object+0x160/0x250 [ 1206.207432][T24229] report_bug+0x1bd/0x210 [ 1206.211852][T24229] handle_bug+0x38/0x90 [ 1206.216008][T24229] exc_invalid_op+0x14/0x40 [ 1206.220711][T24229] asm_exc_invalid_op+0x12/0x20 [ 1206.225980][T24229] RIP: 0010:debug_print_object+0x160/0x250 [ 1206.231955][T24229] Code: dd c0 70 94 88 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 bf 00 00 00 48 8b 14 dd c0 70 94 88 48 c7 c7 20 66 94 88 e8 ab 58 a4 fd <0f> 0b 83 05 93 b0 1b 07 01 48 83 c4 20 5b 5d 41 5c 41 5d c3 48 89 [ 1206.251813][T24229] RSP: 0018:ffffc900093c7ba8 EFLAGS: 00010086 [ 1206.257900][T24229] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 1206.265889][T24229] RDX: ffff888096e38340 RSI: ffffffff815daa77 RDI: fffff52001278f67 [ 1206.274292][T24229] RBP: 0000000000000001 R08: 0000000000000001 R09: ffff8880ae720f8b [ 1206.282376][T24229] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff89c674c0 [ 1206.290344][T24229] R13: 0000000000000000 R14: dead000000000100 R15: dffffc0000000000 [ 1206.298375][T24229] ? vprintk_func+0x97/0x1a6 [ 1206.303006][T24229] ? debug_print_object+0x160/0x250 [ 1206.308268][T24229] debug_check_no_obj_freed+0x301/0x41c [ 1206.313891][T24229] kmem_cache_free.part.0+0x16d/0x1f0 [ 1206.319352][T24229] task_work_run+0xdd/0x190 [ 1206.323855][T24229] get_signal+0xd89/0x1f00 [ 1206.328271][T24229] arch_do_signal+0x82/0x2520 [ 1206.333010][T24229] ? lock_downgrade+0x830/0x830 [ 1206.337889][T24229] ? __ia32_sys_epoll_create+0x1e0/0x1e0 [ 1206.343565][T24229] ? copy_siginfo_to_user32+0xa0/0xa0 [ 1206.349001][T24229] ? ep_unregister_pollwait.constprop.0+0x3c0/0x3c0 [ 1206.355593][T24229] ? __might_fault+0x190/0x1d0 [ 1206.360478][T24229] ? exit_to_user_mode_prepare+0xb9/0x1c0 [ 1206.366227][T24229] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 1206.372202][T24229] exit_to_user_mode_prepare+0x15d/0x1c0 [ 1206.377830][T24229] syscall_exit_to_user_mode+0x59/0x2b0 [ 1206.383370][T24229] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1206.389253][T24229] RIP: 0033:0x45d5b9 [ 1206.393225][T24229] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1206.413082][T24229] RSP: 002b:00007f7b2fea8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1206.421582][T24229] RAX: 0000000000000000 RBX: 0000000000002ac0 RCX: 000000000045d5b9 [ 1206.429665][T24229] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000004 [ 1206.437753][T24229] RBP: 000000000118cf88 R08: 0000000000000000 R09: 0000000000000000 [ 1206.445834][T24229] R10: 0000000020000040 R11: 0000000000000246 R12: 000000000118cf4c [ 1206.453938][T24229] R13: 00007ffc086fc4af R14: 00007f7b2fea99c0 R15: 000000000118cf4c [ 1206.463673][T24229] Kernel Offset: disabled [ 1206.468156][T24229] Rebooting in 86400 seconds..