[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.43' (ECDSA) to the list of known hosts. 2020/09/04 20:08:15 parsed 1 programs 2020/09/04 20:08:16 executed programs: 0 syzkaller login: [ 1047.298100][ T6891] IPVS: ftp: loaded support on port[0] = 21 [ 1047.471069][ T6891] chnl_net:caif_netlink_parms(): no params data found [ 1047.531642][ T6891] bridge0: port 1(bridge_slave_0) entered blocking state [ 1047.539481][ T6891] bridge0: port 1(bridge_slave_0) entered disabled state [ 1047.548365][ T6891] device bridge_slave_0 entered promiscuous mode [ 1047.558826][ T6891] bridge0: port 2(bridge_slave_1) entered blocking state [ 1047.566210][ T6891] bridge0: port 2(bridge_slave_1) entered disabled state [ 1047.574339][ T6891] device bridge_slave_1 entered promiscuous mode [ 1047.596693][ T6891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1047.608170][ T6891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1047.633686][ T6891] team0: Port device team_slave_0 added [ 1047.641388][ T6891] team0: Port device team_slave_1 added [ 1047.661633][ T6891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1047.668866][ T6891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1047.697132][ T6891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1047.710271][ T6891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1047.718725][ T6891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1047.747181][ T6891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1047.777199][ T6891] device hsr_slave_0 entered promiscuous mode [ 1047.784982][ T6891] device hsr_slave_1 entered promiscuous mode [ 1047.895477][ T6891] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1047.907637][ T6891] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1047.918195][ T6891] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1047.930386][ T6891] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1047.959493][ T6891] bridge0: port 2(bridge_slave_1) entered blocking state [ 1047.968251][ T6891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1047.976493][ T6891] bridge0: port 1(bridge_slave_0) entered blocking state [ 1047.984070][ T6891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1048.040595][ T6891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1048.058725][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1048.070541][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1048.080918][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1048.090461][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1048.105135][ T6891] 8021q: adding VLAN 0 to HW filter on device team0 [ 1048.118555][ T6860] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1048.127694][ T6860] bridge0: port 1(bridge_slave_0) entered blocking state [ 1048.134857][ T6860] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1048.154671][ T6860] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1048.164859][ T6860] bridge0: port 2(bridge_slave_1) entered blocking state [ 1048.171963][ T6860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1048.196513][ T7113] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1048.206569][ T7113] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1048.216220][ T7113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1048.227579][ T7113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1048.236479][ T7113] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1048.248678][ T6891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1048.270465][ T7113] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1048.281096][ T7113] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1048.296225][ T6891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1048.317609][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1048.340387][ T7113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1048.349178][ T7113] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1048.357923][ T7113] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1048.371669][ T6891] device veth0_vlan entered promiscuous mode [ 1048.385520][ T6891] device veth1_vlan entered promiscuous mode [ 1048.409967][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1048.420097][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1048.429196][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1048.440692][ T6891] device veth0_macvtap entered promiscuous mode [ 1048.452480][ T6891] device veth1_macvtap entered promiscuous mode [ 1048.461226][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1048.483368][ T6891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1048.494684][ T7113] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1048.506199][ T7113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1048.519315][ T6891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1048.528659][ T7113] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1048.538906][ T7113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1048.551110][ T6891] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.560742][ T6891] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.574264][ T6891] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.583166][ T6891] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.296566][ T7114] Bluetooth: hci0: command 0x0409 tx timeout 2020/09/04 20:08:21 executed programs: 39 [ 1051.363615][ T23] Bluetooth: hci0: command 0x041b tx timeout [ 1053.443641][ T23] Bluetooth: hci0: command 0x040f tx timeout [ 1055.523559][ T23] Bluetooth: hci0: command 0x0419 tx timeout 2020/09/04 20:08:26 executed programs: 121 2020/09/04 20:08:31 executed programs: 200 2020/09/04 20:08:36 executed programs: 281 2020/09/04 20:08:41 executed programs: 365 [ 1173.991376][ T7113] Bluetooth: hci0: command 0x0406 tx timeout [ 1230.786620][ T1171] INFO: task syz-executor.0:11348 can't die for more than 143 seconds. [ 1230.795330][ T1171] task:syz-executor.0 state:D stack:28936 pid:11348 ppid: 6891 flags:0x00004004 [ 1230.822775][ T1171] Call Trace: [ 1230.826255][ T1171] __schedule+0xea9/0x2230 [ 1230.831986][ T1171] ? io_schedule_timeout+0x140/0x140 [ 1230.840248][ T1171] schedule+0xd0/0x2a0 [ 1230.844344][ T1171] schedule_timeout+0x1d8/0x250 [ 1230.851770][ T1171] ? usleep_range+0x170/0x170 [ 1230.858743][ T1171] ? lock_downgrade+0x830/0x830 [ 1230.863845][ T1171] ? do_raw_spin_lock+0x120/0x2b0 [ 1230.870460][ T1171] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1230.875919][ T1171] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 1230.884593][ T1171] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1230.890895][ T1171] wait_for_completion+0x163/0x260 [ 1230.896033][ T1171] ? wait_for_completion_interruptible+0x2e0/0x2e0 [ 1230.905568][ T1171] ? io_wq_create+0x678/0xa10 [ 1230.911135][ T1171] io_uring_setup+0x1495/0x29a0 [ 1230.916014][ T1171] ? io_sq_thread+0xe00/0xe00 [ 1230.923271][ T1171] ? io_issue_sqe+0x5bb0/0x5bb0 [ 1230.929545][ T1171] ? io_wake_function+0x2e0/0x2e0 [ 1230.934736][ T1171] ? put_timespec64+0xcb/0x120 [ 1230.942377][ T1171] ? ns_to_timespec64+0xc0/0xc0 [ 1230.949880][ T1171] ? check_preemption_disabled+0x50/0x130 [ 1230.955820][ T1171] ? syscall_enter_from_user_mode+0x20/0x290 [ 1230.964799][ T1171] ? lockdep_hardirqs_on+0x53/0x100 [ 1230.971416][ T1171] do_syscall_64+0x2d/0x70 [ 1230.975927][ T1171] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1230.984520][ T1171] RIP: 0033:0x45d5b9 [ 1230.989452][ T1171] Code: Bad RIP value. [ 1230.993746][ T1171] RSP: 002b:00007f3283a1bbf8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1231.004907][ T1171] RAX: ffffffffffffffda RBX: 0000000020000300 RCX: 000000000045d5b9 [ 1231.013897][ T1171] RDX: 0000000020ffc000 RSI: 0000000020000300 RDI: 0000000000000001 [ 1231.024063][ T1171] RBP: 000000000118cf98 R08: 0000000000000000 R09: 0000000000000000 [ 1231.033000][ T1171] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020ffc000 [ 1231.043538][ T1171] R13: 0000000020ff7000 R14: 0000000000000000 R15: 0000000000000000 [ 1231.053832][ T1171] INFO: task syz-executor.0:11348 blocked for more than 143 seconds. [ 1231.066033][ T1171] Not tainted 5.9.0-rc3-next-20200903-syzkaller #0 [ 1231.073952][ T1171] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1231.084951][ T1171] task:syz-executor.0 state:D stack:28936 pid:11348 ppid: 6891 flags:0x00004004 [ 1231.095727][ T1171] Call Trace: [ 1231.101398][ T1171] __schedule+0xea9/0x2230 [ 1231.105854][ T1171] ? io_schedule_timeout+0x140/0x140 [ 1231.112415][ T1171] schedule+0xd0/0x2a0 [ 1231.118719][ T1171] schedule_timeout+0x1d8/0x250 [ 1231.123622][ T1171] ? usleep_range+0x170/0x170 [ 1231.129683][ T1171] ? lock_downgrade+0x830/0x830 [ 1231.134551][ T1171] ? do_raw_spin_lock+0x120/0x2b0 [ 1231.142186][ T1171] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1231.148241][ T1171] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 1231.154241][ T1171] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1231.162114][ T1171] wait_for_completion+0x163/0x260 [ 1231.169229][ T1171] ? wait_for_completion_interruptible+0x2e0/0x2e0 [ 1231.175826][ T1171] ? io_wq_create+0x678/0xa10 [ 1231.183375][ T1171] io_uring_setup+0x1495/0x29a0 [ 1231.189085][ T1171] ? io_sq_thread+0xe00/0xe00 [ 1231.193812][ T1171] ? io_issue_sqe+0x5bb0/0x5bb0 [ 1231.201415][ T1171] ? io_wake_function+0x2e0/0x2e0 [ 1231.207392][ T1171] ? put_timespec64+0xcb/0x120 [ 1231.212172][ T1171] ? ns_to_timespec64+0xc0/0xc0 [ 1231.219689][ T1171] ? check_preemption_disabled+0x50/0x130 [ 1231.225525][ T1171] ? syscall_enter_from_user_mode+0x20/0x290 [ 1231.232870][ T1171] ? lockdep_hardirqs_on+0x53/0x100 [ 1231.240299][ T1171] do_syscall_64+0x2d/0x70 [ 1231.244769][ T1171] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1231.253010][ T1171] RIP: 0033:0x45d5b9 [ 1231.259145][ T1171] Code: Bad RIP value. [ 1231.263230][ T1171] RSP: 002b:00007f3283a1bbf8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1231.273011][ T1171] RAX: ffffffffffffffda RBX: 0000000020000300 RCX: 000000000045d5b9 [ 1231.283990][ T1171] RDX: 0000000020ffc000 RSI: 0000000020000300 RDI: 0000000000000001 [ 1231.293050][ T1171] RBP: 000000000118cf98 R08: 0000000000000000 R09: 0000000000000000 [ 1231.303267][ T1171] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020ffc000 [ 1231.312130][ T1171] R13: 0000000020ff7000 R14: 0000000000000000 R15: 0000000000000000 [ 1231.322380][ T1171] INFO: task io_uring-sq:11353 blocked for more than 143 seconds. [ 1231.331229][ T1171] Not tainted 5.9.0-rc3-next-20200903-syzkaller #0 [ 1231.342723][ T1171] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1231.352389][ T1171] task:io_uring-sq state:D stack:31048 pid:11353 ppid: 2 flags:0x00004000 [ 1231.364011][ T1171] Call Trace: [ 1231.368530][ T1171] __schedule+0xea9/0x2230 [ 1231.373097][ T1171] ? io_schedule_timeout+0x140/0x140 [ 1231.381456][ T1171] ? _raw_spin_unlock_irqrestore+0x6f/0x90 [ 1231.389179][ T1171] schedule+0xd0/0x2a0 [ 1231.393310][ T1171] ? __do_sys_io_uring_enter+0x1940/0x1940 [ 1231.401781][ T1171] schedule_preempt_disabled+0xf/0x20 [ 1231.408150][ T1171] kthread+0x2ac/0x4a0 [ 1231.412250][ T1171] ? __kthread_bind_mask+0xc0/0xc0 [ 1231.420298][ T1171] ret_from_fork+0x1f/0x30 [ 1231.424788][ T1171] [ 1231.424788][ T1171] Showing all locks held in the system: [ 1231.434957][ T1171] 1 lock held by khungtaskd/1171: [ 1231.442273][ T1171] #0: ffffffff89c67500 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 1231.453184][ T1171] 1 lock held by in:imklog/6564: [ 1231.460552][ T1171] #0: ffff8880a1fad370 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 [ 1231.470784][ T1171] [ 1231.473125][ T1171] ============================================= [ 1231.473125][ T1171] [ 1231.485889][ T1171] NMI backtrace for cpu 1 [ 1231.490509][ T1171] CPU: 1 PID: 1171 Comm: khungtaskd Not tainted 5.9.0-rc3-next-20200903-syzkaller #0 [ 1231.499982][ T1171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1231.510045][ T1171] Call Trace: [ 1231.513494][ T1171] dump_stack+0x198/0x1fd [ 1231.517923][ T1171] nmi_cpu_backtrace.cold+0x44/0xd7 [ 1231.523185][ T1171] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 1231.528825][ T1171] nmi_trigger_cpumask_backtrace+0x1b3/0x223 [ 1231.534944][ T1171] watchdog+0xd89/0xf30 [ 1231.539123][ T1171] ? trace_sched_process_hang+0x2e0/0x2e0 [ 1231.544853][ T1171] kthread+0x3b5/0x4a0 [ 1231.548922][ T1171] ? __kthread_bind_mask+0xc0/0xc0 [ 1231.554038][ T1171] ret_from_fork+0x1f/0x30 [ 1231.558731][ T1171] Sending NMI from CPU 1 to CPUs 0: [ 1231.564343][ C0] NMI backtrace for cpu 0 [ 1231.564351][ C0] CPU: 0 PID: 11349 Comm: io_uring-sq Not tainted 5.9.0-rc3-next-20200903-syzkaller #0 [ 1231.564358][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1231.564362][ C0] RIP: 0010:arch_local_irq_restore+0x34/0x50 [ 1231.564374][ C0] Code: fb 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 18 48 83 3d 91 d5 5c 08 00 74 0c 48 89 df 57 9d 0f 1f 44 00 00 5b 0f 0b 48 c7 c7 c8 3a b6 89 e8 1d f2 5b 00 eb da 90 66 2e 0f 1f [ 1231.564378][ C0] RSP: 0018:ffffc9000be07d80 EFLAGS: 00000286 [ 1231.564387][ C0] RAX: 1ffffffff136c759 RBX: 0000000000000000 RCX: ffffffff81da6c63 [ 1231.564393][ C0] RDX: dffffc0000000000 RSI: 00000000ffffffff RDI: 0000000000000286 [ 1231.564398][ C0] RBP: ffff8880a17724c0 R08: 0000000000000000 R09: ffff8880a17724c7 [ 1231.564404][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1231.564409][ C0] R13: ffff8880a1772dd0 R14: ffff8880a7cf1100 R15: 0000000000000286 [ 1231.564415][ C0] FS: 0000000000000000(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 1231.564420][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1231.564426][ C0] CR2: 00007f3e29658000 CR3: 0000000093a25000 CR4: 00000000001506f0 [ 1231.564431][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1231.564436][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1231.564439][ C0] Call Trace: [ 1231.564443][ C0] lock_is_held_type+0xbb/0xf0 [ 1231.564452][ C0] ___might_sleep+0x22b/0x2f0 [ 1231.564455][ C0] io_sq_thread+0x4c0/0xe00 [ 1231.564459][ C0] ? lock_downgrade+0x830/0x830 [ 1231.564463][ C0] ? __do_sys_io_uring_enter+0x1940/0x1940 [ 1231.564468][ C0] ? _raw_spin_unlock_irqrestore+0x6f/0x90 [ 1231.564471][ C0] ? __kthread_parkme+0x4c/0x1e0 [ 1231.564476][ C0] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 1231.564480][ C0] ? add_wait_queue_exclusive+0x180/0x180 [ 1231.564484][ C0] ? lockdep_hardirqs_on+0x53/0x100 [ 1231.564488][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 1231.564492][ C0] ? __do_sys_io_uring_enter+0x1940/0x1940 [ 1231.564495][ C0] kthread+0x3b5/0x4a0 [ 1231.564499][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1231.564503][ C0] ret_from_fork+0x1f/0x30 [ 1231.575169][ T1171] Kernel panic - not syncing: hung_task: blocked tasks [ 1231.787966][ T1171] CPU: 1 PID: 1171 Comm: khungtaskd Not tainted 5.9.0-rc3-next-20200903-syzkaller #0 [ 1231.797409][ T1171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1231.807473][ T1171] Call Trace: [ 1231.810778][ T1171] dump_stack+0x198/0x1fd [ 1231.815268][ T1171] panic+0x347/0x7c0 [ 1231.819168][ T1171] ? __warn_printk+0xf3/0xf3 [ 1231.823947][ T1171] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 1231.829594][ T1171] ? preempt_schedule_thunk+0x16/0x18 [ 1231.834972][ T1171] ? watchdog.cold+0x22d/0x24b [ 1231.839736][ T1171] ? watchdog+0xc59/0xf30 [ 1231.844069][ T1171] watchdog.cold+0x23e/0x24b [ 1231.848896][ T1171] ? trace_sched_process_hang+0x2e0/0x2e0 [ 1231.854709][ T1171] kthread+0x3b5/0x4a0 [ 1231.858785][ T1171] ? __kthread_bind_mask+0xc0/0xc0 [ 1231.863898][ T1171] ret_from_fork+0x1f/0x30 [ 1231.870847][ T1171] Kernel Offset: disabled [ 1231.875333][ T1171] Rebooting in 86400 seconds..