[ OK ] Started Daily apt download activities. [ OK ] Started Daily apt upgrade and clean activities. [ OK ] Reached target Timers. Starting getty on tty2-tty6 if dbus and logind are not available... [ OK ] Started Regular background program processing daemon. [ OK ] Started System Logging Service. [ OK ] Started Permit User Sessions. [ OK ] Found device /dev/ttyS0. [ OK ] Started OpenBSD Secure Shell server. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. [ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.28' (ECDSA) to the list of known hosts. syzkaller login: [ 62.882439][ T28] audit: type=1400 audit(1597834367.488:8): avc: denied { execmem } for pid=6857 comm="syz-executor039" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 62.900506][ T6858] IPVS: ftp: loaded support on port[0] = 21 [ 63.006130][ T6858] chnl_net:caif_netlink_parms(): no params data found [ 63.057775][ T6858] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.065643][ T6858] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.074778][ T6858] device bridge_slave_0 entered promiscuous mode [ 63.084131][ T6858] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.091247][ T6858] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.100588][ T6858] device bridge_slave_1 entered promiscuous mode [ 63.121142][ T6858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.132114][ T6858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.156147][ T6858] team0: Port device team_slave_0 added [ 63.164068][ T6858] team0: Port device team_slave_1 added [ 63.181608][ T6858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.188659][ T6858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.215651][ T6858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.228282][ T6858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.236211][ T6858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.262170][ T6858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.288397][ T6858] device hsr_slave_0 entered promiscuous mode [ 63.295099][ T6858] device hsr_slave_1 entered promiscuous mode [ 63.394410][ T6858] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.405399][ T6858] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.415092][ T6858] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.425872][ T6858] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.449740][ T6858] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.456885][ T6858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.464714][ T6858] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.471769][ T6858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.516448][ T6858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.530356][ T2588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.540537][ T2588] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.550087][ T2588] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.558130][ T2588] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 63.570498][ T6858] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.582433][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.590804][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.597898][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.625611][ T7067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.636099][ T7067] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.643232][ T7067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.651263][ T7067] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.661408][ T7067] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.670003][ T7067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.682701][ T6858] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.694014][ T6858] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.703013][ T2812] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.710822][ T2812] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.732846][ T2812] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.740249][ T2812] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.749991][ T6858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.770305][ T2812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.790285][ T2588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.799238][ T2588] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.807530][ T2588] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.817993][ T6858] device veth0_vlan entered promiscuous mode [ 63.830036][ T6858] device veth1_vlan entered promiscuous mode [ 63.850179][ T2588] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.858972][ T2588] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.867692][ T2588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.879340][ T6858] device veth0_macvtap entered promiscuous mode [ 63.889368][ T6858] device veth1_macvtap entered promiscuous mode [ 63.907177][ T6858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.914828][ T2812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.924809][ T2812] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.937418][ T6858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.944899][ T2588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.957285][ T6858] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.966349][ T6858] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.975365][ T6858] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.985978][ T6858] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.033440][ C1] divide_error: 0000 [#1] PREEMPT SMP KASAN [ 64.039346][ C1] CPU: 1 PID: 6858 Comm: syz-executor039 Not tainted 5.9.0-rc1-syzkaller #0 [ 64.048026][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 64.058060][ C1] RIP: 0010:tabledist.part.0+0x22a/0x2a0 [ 64.063701][ C1] Code: 4c 01 f0 48 c1 e8 20 41 89 45 00 41 89 c6 e8 2d 87 0e fb 48 85 db 0f 85 6d fe ff ff e8 1f 87 0e fb 8d 4c 2d 00 44 89 f0 31 d2 f1 49 29 ec 49 01 d4 e9 2b ff ff ff e8 04 87 0e fb 48 81 eb 00 [ 64.083287][ C1] RSP: 0018:ffffc90000da8078 EFLAGS: 00010246 [ 64.089322][ C1] RAX: 000000004dc52184 RBX: 0000000000000000 RCX: 0000000000000000 [ 64.097265][ C1] RDX: 0000000000000000 RSI: ffffffff8665ba61 RDI: 0000000000000005 [ 64.105207][ C1] RBP: ffffffff80000000 R08: 0000000000000000 R09: ffffffff8ab21acf [ 64.113208][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 64.121148][ C1] R13: ffff8880a8ecb37c R14: 000000004dc52184 R15: 0000000000000000 [ 64.129096][ C1] FS: 0000000000000000(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 64.137996][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.144550][ C1] CR2: 00000000004c96c8 CR3: 0000000009a8d000 CR4: 00000000001506e0 [ 64.152505][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 64.160460][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 64.168403][ C1] Call Trace: [ 64.171658][ C1] [ 64.174484][ C1] netem_enqueue+0x45e/0x350f [ 64.179180][ C1] ? lock_release+0x8e0/0x8e0 [ 64.183829][ C1] ? do_raw_spin_lock+0x120/0x2b0 [ 64.188822][ C1] ? netem_dump+0x1120/0x1120 [ 64.193528][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 64.198440][ C1] __dev_queue_xmit+0x1878/0x2d60 [ 64.203439][ C1] ? lock_acquire+0x1f1/0xad0 [ 64.208088][ C1] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 64.213368][ C1] ? mark_lock+0xbc/0x1710 [ 64.217755][ C1] ? mark_held_locks+0x9f/0xe0 [ 64.222494][ C1] ? ip_finish_output2+0x12f7/0x21f0 [ 64.227750][ C1] ? lockdep_hardirqs_on_prepare+0x19c/0x530 [ 64.233718][ C1] ip_finish_output2+0x1523/0x21f0 [ 64.238802][ C1] ? ip_frag_next+0x9a0/0x9a0 [ 64.243449][ C1] __ip_finish_output+0x779/0xcb0 [ 64.248444][ C1] ? ip_fragment.constprop.0+0x240/0x240 [ 64.254048][ C1] ? __ip_finish_output+0xcb0/0xcb0 [ 64.259218][ C1] ? lock_is_held_type+0xbb/0xf0 [ 64.264124][ C1] ip_finish_output+0x34/0x1f0 [ 64.268868][ C1] ip_output+0x196/0x310 [ 64.273085][ C1] ip_local_out+0xaf/0x1a0 [ 64.277905][ C1] iptunnel_xmit+0x5a0/0x9b0 [ 64.282466][ C1] ? erspan_xmit+0x21d0/0x2760 [ 64.287200][ C1] geneve_xmit+0x11a2/0x2d30 [ 64.291763][ C1] ? geneve_fill_metadata_dst+0x910/0x910 [ 64.298494][ C1] ? skb_crc32c_csum_help+0x70/0x70 [ 64.303664][ C1] ? lock_acquire+0x1f1/0xad0 [ 64.308313][ C1] ? __dev_queue_xmit+0x1da/0x2d60 [ 64.313398][ C1] ? lock_is_held_type+0xbb/0xf0 [ 64.318309][ C1] dev_hard_start_xmit+0x193/0x950 [ 64.323412][ C1] __dev_queue_xmit+0x2091/0x2d60 [ 64.328408][ C1] ? neigh_resolve_output+0x2ec/0x6a0 [ 64.333749][ C1] ? find_held_lock+0x2d/0x110 [ 64.338482][ C1] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 64.343736][ C1] ? mark_held_locks+0x9f/0xe0 [ 64.348467][ C1] ? read_seqcount_t_begin+0xdf/0x270 [ 64.353809][ C1] ? memcpy+0x39/0x60 [ 64.357760][ C1] neigh_resolve_output+0x3fe/0x6a0 [ 64.362974][ C1] ip6_finish_output2+0x8b6/0x17b0 [ 64.368059][ C1] __ip6_finish_output+0x447/0xab0 [ 64.373159][ C1] ip6_finish_output+0x34/0x1f0 [ 64.377977][ C1] ip6_output+0x1db/0x520 [ 64.382277][ C1] mld_sendpack+0x92a/0xdb0 [ 64.386752][ C1] ? igmp6_group_queried+0x370/0x370 [ 64.392008][ C1] ? __local_bh_enable_ip+0xd1/0x190 [ 64.397271][ C1] ? lockdep_hardirqs_on_prepare+0x19c/0x530 [ 64.403220][ C1] ? mld_ifc_timer_expire+0x5f8/0xf10 [ 64.408558][ C1] ? trace_hardirqs_on+0x5f/0x220 [ 64.413573][ C1] mld_ifc_timer_expire+0x60a/0xf10 [ 64.418742][ C1] call_timer_fn+0x1ac/0x760 [ 64.423311][ C1] ? mld_send_initial_cr.part.0+0x150/0x150 [ 64.429171][ C1] ? msleep_interruptible+0x130/0x130 [ 64.434517][ C1] ? _raw_spin_unlock_irq+0x1f/0x80 [ 64.439795][ C1] ? lockdep_hardirqs_on_prepare+0x19c/0x530 [ 64.445744][ C1] ? trace_hardirqs_on+0x5f/0x220 [ 64.450737][ C1] ? mld_send_initial_cr.part.0+0x150/0x150 [ 64.456599][ C1] __run_timers.part.0+0x67c/0xaa0 [ 64.461692][ C1] ? call_timer_fn+0x760/0x760 [ 64.466442][ C1] ? clockevents_program_event+0x12b/0x350 [ 64.472230][ C1] ? mark_held_locks+0x9f/0xe0 [ 64.476971][ C1] ? sched_clock_cpu+0x18/0x1b0 [ 64.481791][ C1] run_timer_softirq+0xae/0x1a0 [ 64.486698][ C1] __do_softirq+0x2de/0xa24 [ 64.491184][ C1] asm_call_on_stack+0xf/0x20 [ 64.495827][ C1] [ 64.498755][ C1] do_softirq_own_stack+0x9d/0xd0 [ 64.503751][ C1] irq_exit_rcu+0x1f3/0x230 [ 64.508225][ C1] sysvec_apic_timer_interrupt+0x51/0xf0 [ 64.513830][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 64.519778][ C1] RIP: 0010:__local_bh_enable_ip+0x101/0x190 [ 64.525730][ C1] Code: 89 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 0f 85 8b 00 00 00 48 83 3d f0 56 6f 08 00 74 2f fb 66 0f 1f 44 00 00 <65> 8b 05 48 1f bb 7e 85 c0 74 46 5b 5d c3 0f 0b e9 4a ff ff ff 48 [ 64.545314][ C1] RSP: 0018:ffffc90005857840 EFLAGS: 00000286 [ 64.551355][ C1] RAX: 1ffffffff136c6c3 RBX: 0000000000000200 RCX: 0000000000000006 [ 64.559300][ C1] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: ffffffff8146df01 [ 64.567244][ C1] RBP: ffffffff867a09c7 R08: 0000000000000001 R09: ffffffff8c5f09ff [ 64.575284][ C1] R10: fffffbfff18be13f R11: 0000000000000000 R12: ffffffff89a6bc80 [ 64.583226][ C1] R13: 0000000000002a08 R14: 0000000000000000 R15: 0000000000000001 [ 64.591176][ C1] ? nf_ct_iterate_cleanup+0x77/0x330 [ 64.596535][ C1] ? __local_bh_enable_ip+0xd1/0x190 [ 64.601789][ C1] nf_ct_iterate_cleanup+0x9e/0x330 [ 64.606958][ C1] ? nf_ct_port_nlattr_to_tuple+0x1d0/0x1d0 [ 64.612822][ C1] nf_ct_iterate_cleanup_net+0x113/0x170 [ 64.618436][ C1] ? iterate_cleanup_work+0x130/0x130 [ 64.623777][ C1] ? nf_ct_iterate_cleanup+0x330/0x330 [ 64.629202][ C1] ? iterate_cleanup_work+0x130/0x130 [ 64.634569][ C1] ? nf_tables_flowtable_event+0x31/0x460 [ 64.640260][ C1] masq_device_event+0xae/0xe0 [ 64.645016][ C1] notifier_call_chain+0xb5/0x200 [ 64.650025][ C1] call_netdevice_notifiers_info+0xb5/0x130 [ 64.655891][ C1] dev_close_many+0x30b/0x650 [ 64.660539][ C1] ? lockdep_hardirqs_off+0x89/0xc0 [ 64.665706][ C1] ? napi_watchdog+0xc0/0xc0 [ 64.670264][ C1] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 64.676052][ C1] ? __mod_timer+0x82a/0xd90 [ 64.680616][ C1] rollback_registered_many+0x3a8/0x1210 [ 64.686223][ C1] ? mark_lock+0xbc/0x1710 [ 64.690616][ C1] ? linkwatch_fire_event+0x8c/0x1d0 [ 64.695878][ C1] ? flush_backlog+0x640/0x640 [ 64.700613][ C1] ? mark_held_locks+0x9f/0xe0 [ 64.705350][ C1] ? queue_delayed_work_on+0xee/0x210 [ 64.710693][ C1] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 64.716644][ C1] ? trace_hardirqs_on+0x5f/0x220 [ 64.721673][ C1] unregister_netdevice_queue+0x2dd/0x570 [ 64.727362][ C1] ? unregister_netdevice_many+0x50/0x50 [ 64.732962][ C1] ? linkwatch_schedule_work+0x181/0x1c0 [ 64.738563][ C1] ? linkwatch_fire_event+0x65/0x1d0 [ 64.743826][ C1] __tun_detach+0xff6/0x1310 [ 64.748391][ C1] ? lock_is_held_type+0xbb/0xf0 [ 64.753302][ C1] tun_chr_close+0xd9/0x180 [ 64.757817][ C1] __fput+0x285/0x920 [ 64.761769][ C1] ? __tun_detach+0x1310/0x1310 [ 64.766699][ C1] task_work_run+0xdd/0x190 [ 64.771175][ C1] do_exit+0xb7d/0x29f0 [ 64.775303][ C1] ? mm_update_next_owner+0x7a0/0x7a0 [ 64.780646][ C1] ? lock_is_held_type+0xbb/0xf0 [ 64.785555][ C1] do_group_exit+0x125/0x310 [ 64.790112][ C1] __x64_sys_exit_group+0x3a/0x50 [ 64.795107][ C1] do_syscall_64+0x2d/0x70 [ 64.799494][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 64.805355][ C1] RIP: 0033:0x442698 [ 64.809258][ C1] Code: Bad RIP value. [ 64.813297][ C1] RSP: 002b:00007ffda47b5238 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 64.821708][ C1] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000442698 [ 64.829655][ C1] RDX: 0000000000000001 RSI: 000000000000003c RDI: 0000000000000001 [ 64.837598][ C1] RBP: 00000000004c9690 R08: 00000000000000e7 R09: ffffffffffffffd0 [ 64.845540][ C1] R10: 00000000bb1414ac R11: 0000000000000246 R12: 0000000000000001 [ 64.853484][ C1] R13: 00000000006dca60 R14: 0000000000000000 R15: 0000000000000000 [ 64.861426][ C1] Modules linked in: [ 64.865359][ C1] ---[ end trace 17561209e22e946a ]--- [ 64.870820][ C1] RIP: 0010:tabledist.part.0+0x22a/0x2a0 [ 64.876482][ C1] Code: 4c 01 f0 48 c1 e8 20 41 89 45 00 41 89 c6 e8 2d 87 0e fb 48 85 db 0f 85 6d fe ff ff e8 1f 87 0e fb 8d 4c 2d 00 44 89 f0 31 d2 f1 49 29 ec 49 01 d4 e9 2b ff ff ff e8 04 87 0e fb 48 81 eb 00 [ 64.896120][ C1] RSP: 0018:ffffc90000da8078 EFLAGS: 00010246 [ 64.902216][ C1] RAX: 000000004dc52184 RBX: 0000000000000000 RCX: 0000000000000000 [ 64.910188][ C1] RDX: 0000000000000000 RSI: ffffffff8665ba61 RDI: 0000000000000005 [ 64.918175][ C1] RBP: ffffffff80000000 R08: 0000000000000000 R09: ffffffff8ab21acf [ 64.927379][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 64.935362][ C1] R13: ffff8880a8ecb37c R14: 000000004dc52184 R15: 0000000000000000 [ 64.943371][ C1] FS: 0000000000000000(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 64.952327][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.958905][ C1] CR2: 00000000004c96c8 CR3: 0000000009a8d000 CR4: 00000000001506e0 [ 64.966916][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 64.974923][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 64.982923][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 64.991321][ C1] Kernel Offset: disabled [ 64.995634][ C1] Rebooting in 86400 seconds..