[ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.10.43' (ECDSA) to the list of known hosts. 2021/01/20 16:38:46 parsed 1 programs 2021/01/20 16:38:47 executed programs: 0 syzkaller login: [ 35.934301] IPVS: ftp: loaded support on port[0] = 21 [ 36.040070] chnl_net:caif_netlink_parms(): no params data found [ 36.132738] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.139269] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.147073] device bridge_slave_0 entered promiscuous mode [ 36.154348] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.160708] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.168669] device bridge_slave_1 entered promiscuous mode [ 36.186359] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 36.195168] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 36.213428] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 36.220759] team0: Port device team_slave_0 added [ 36.226657] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 36.233945] team0: Port device team_slave_1 added [ 36.249569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.255900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.281335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.293574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.299803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.325039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.335655] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 36.343344] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 36.362804] device hsr_slave_0 entered promiscuous mode [ 36.368515] device hsr_slave_1 entered promiscuous mode [ 36.374878] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 36.382126] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 36.449488] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.455955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.462868] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.469213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.501433] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 36.507550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.516440] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 36.525360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.534988] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.542650] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.549544] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 36.560749] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 36.567158] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.577540] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.585345] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.591876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.602202] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.609837] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.616270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.631570] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.639708] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 36.649736] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 36.661551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.671665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.680582] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 36.687210] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 36.700280] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 36.707990] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 36.714800] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 36.725468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.737402] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 36.748040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.782077] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 36.789028] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 36.795956] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 36.805535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.813255] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.820067] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.829436] device veth0_vlan entered promiscuous mode [ 36.838388] device veth1_vlan entered promiscuous mode [ 36.844890] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 36.854340] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 36.865470] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 36.874936] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 36.882591] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 36.889793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.899322] device veth0_macvtap entered promiscuous mode [ 36.906127] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 36.914899] device veth1_macvtap entered promiscuous mode [ 36.928104] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 36.938073] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 36.948797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.955973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.964509] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.974906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.981667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.097421] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 37.104668] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.126210] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 37.126714] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.133653] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.147328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 37.154643] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.162597] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 37.191583] [ 37.193382] ********************************************************** [ 37.201418] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 37.208166] ** ** [ 37.216277] ** trace_printk() being used. Allocating extra memory. ** [ 37.223474] ** ** [ 37.231420] ** This means that this is a DEBUG kernel and it is ** [ 37.238077] ** unsafe for production use. ** [ 37.245839] ** ** [ 37.252968] ** If you see this message and you are not debugging ** [ 37.259636] ** the kernel, report this immediately to your vendor! ** [ 37.267038] ** ** [ 37.274578] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 37.281890] ********************************************************** [ 37.352648] WARNING: CPU: 0 PID: 8398 at kernel/tracepoint.c:256 tracepoint_add_func+0x254/0x820 [ 37.361657] Kernel panic - not syncing: panic_on_warn set ... [ 37.361657] [ 37.369007] CPU: 0 PID: 8398 Comm: syz-executor.0 Not tainted 4.19.169-syzkaller #0 [ 37.376806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 37.386148] Call Trace: [ 37.388745] dump_stack+0x1fc/0x2ef [ 37.392378] panic+0x26a/0x50e [ 37.395556] ? __warn_printk+0xf3/0xf3 [ 37.399431] ? tracepoint_add_func+0x254/0x820 [ 37.404022] ? __probe_kernel_read+0x130/0x1b0 [ 37.408587] ? __warn.cold+0x5/0x5a [ 37.412215] ? __warn+0xe4/0x200 [ 37.415587] ? tracepoint_add_func+0x254/0x820 [ 37.420150] __warn.cold+0x20/0x5a [ 37.423689] ? tracepoint_add_func+0x254/0x820 [ 37.428254] report_bug+0x262/0x2b0 [ 37.431879] do_error_trap+0x1d7/0x310 [ 37.435752] ? math_error+0x310/0x310 [ 37.439544] ? lock_acquire+0x170/0x3c0 [ 37.443512] ? error_entry+0x72/0xd0 [ 37.447244] ? trace_hardirqs_off_caller+0x6e/0x210 [ 37.452263] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 37.457092] invalid_op+0x14/0x20 [ 37.460534] RIP: 0010:tracepoint_add_func+0x254/0x820 [ 37.465812] Code: 44 24 20 48 8b 5b 08 80 38 00 0f 85 07 05 00 00 48 8b 44 24 08 48 3b 58 08 0f 85 2d ff ff ff 41 bc ef ff ff ff e8 fc c2 fe ff <0f> 0b e8 f5 c2 fe ff 44 89 e0 48 83 c4 38 5b 5d 41 5c 41 5d 41 5e [ 37.484717] RSP: 0018:ffff88809e117b58 EFLAGS: 00010293 [ 37.490062] RAX: ffff8880934186c0 RBX: ffffc90001a0f000 RCX: ffffffff816396f2 [ 37.497313] RDX: 0000000000000000 RSI: ffffffff81639754 RDI: ffff888093f55398 [ 37.504584] RBP: ffffffff81ec11f0 R08: 0000000000000000 R09: 000000000000000a [ 37.511853] R10: 0000000000000004 R11: 0000000063d89461 R12: 00000000ffffffef [ 37.519138] R13: 0000000000000000 R14: ffff888093f55390 R15: dffffc0000000000 [ 37.526404] ? __bpf_trace_ext4_alloc_da_blocks+0xc0/0xc0 [ 37.531927] ? tracepoint_add_func+0x1f2/0x820 [ 37.536492] ? tracepoint_add_func+0x254/0x820 [ 37.541066] ? tracepoint_add_func+0x254/0x820 [ 37.545643] ? __bpf_trace_ext4_alloc_da_blocks+0xc0/0xc0 [ 37.551193] ? __bpf_trace_ext4_alloc_da_blocks+0xc0/0xc0 [ 37.556716] tracepoint_probe_register+0x9c/0xe0 [ 37.561455] ? tracepoint_module_notify+0x5f0/0x5f0 [ 37.566517] ? __bpf_trace_ext4_alloc_da_blocks+0xc0/0xc0 [ 37.572078] bpf_probe_register+0xe6/0x140 [ 37.576308] bpf_raw_tracepoint_open+0x1bd/0x350 [ 37.581087] ? bpf_prog_release+0x50/0x50 [ 37.585222] ? __might_fault+0xef/0x1d0 [ 37.589185] ? __might_fault+0x192/0x1d0 [ 37.593267] ? security_bpf+0x83/0xb0 [ 37.597055] __se_sys_bpf+0x1069/0x3a20 [ 37.601013] ? _copy_to_user+0xb8/0x100 [ 37.604972] ? bpf_prog_load+0x1240/0x1240 [ 37.609190] ? put_timespec64+0xcb/0x120 [ 37.613233] ? __se_compat_sys_gettimeofday+0x1b0/0x1b0 [ 37.618587] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 37.623941] ? trace_hardirqs_off_caller+0x6e/0x210 [ 37.628953] ? do_syscall_64+0x21/0x620 [ 37.632911] do_syscall_64+0xf9/0x620 [ 37.636704] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 37.641986] RIP: 0033:0x45e219 [ 37.645205] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 37.664085] RSP: 002b:00007fc7d2053c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 37.671772] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 37.679021] RDX: 0000000000000010 RSI: 0000000020000180 RDI: 0000000000000011 [ 37.686269] RBP: 000000000119c068 R08: 0000000000000000 R09: 0000000000000000 [ 37.693558] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 37.700808] R13: 00007ffd649e8ccf R14: 00007fc7d20549c0 R15: 000000000119c034 [ 37.708677] Kernel Offset: disabled [ 37.712368] Rebooting in 86400 seconds..