[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.38' (ECDSA) to the list of known hosts. 2021/04/30 12:15:21 parsed 1 programs 2021/04/30 12:15:21 executed programs: 0 syzkaller login: [ 1580.360025][ T37] audit: type=1400 audit(1619784921.533:8): avc: denied { execmem } for pid=8435 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 1581.508159][ T8436] IPVS: ftp: loaded support on port[0] = 21 [ 1581.716774][ T8436] chnl_net:caif_netlink_parms(): no params data found [ 1581.767940][ T8436] bridge0: port 1(bridge_slave_0) entered blocking state [ 1581.776079][ T8436] bridge0: port 1(bridge_slave_0) entered disabled state [ 1581.785762][ T8436] device bridge_slave_0 entered promiscuous mode [ 1581.796638][ T8436] bridge0: port 2(bridge_slave_1) entered blocking state [ 1581.803903][ T8436] bridge0: port 2(bridge_slave_1) entered disabled state [ 1581.812666][ T8436] device bridge_slave_1 entered promiscuous mode [ 1581.832804][ T8436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1581.844388][ T8436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1581.867258][ T8436] team0: Port device team_slave_0 added [ 1581.875703][ T8436] team0: Port device team_slave_1 added [ 1581.894309][ T8436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1581.901350][ T8436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1581.927572][ T8436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1581.941463][ T8436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1581.948412][ T8436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1581.974668][ T8436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1582.000496][ T8436] device hsr_slave_0 entered promiscuous mode [ 1582.007150][ T8436] device hsr_slave_1 entered promiscuous mode [ 1582.117640][ T8436] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1582.128142][ T8436] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1582.139893][ T8436] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1582.150434][ T8436] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1582.177125][ T8436] bridge0: port 2(bridge_slave_1) entered blocking state [ 1582.184310][ T8436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1582.192225][ T8436] bridge0: port 1(bridge_slave_0) entered blocking state [ 1582.199417][ T8436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1582.244963][ T8436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1582.259044][ T8657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1582.271857][ T8657] bridge0: port 1(bridge_slave_0) entered disabled state [ 1582.282727][ T8657] bridge0: port 2(bridge_slave_1) entered disabled state [ 1582.291002][ T8657] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1582.306635][ T8436] 8021q: adding VLAN 0 to HW filter on device team0 [ 1582.317006][ T8411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1582.327013][ T8411] bridge0: port 1(bridge_slave_0) entered blocking state [ 1582.334220][ T8411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1582.347027][ T8411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1582.356000][ T8411] bridge0: port 2(bridge_slave_1) entered blocking state [ 1582.363099][ T8411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1582.383754][ T8657] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1582.393120][ T8657] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1582.405759][ T8411] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1582.419133][ T8657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1582.434390][ T8436] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1582.446642][ T8436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1582.455565][ T8657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1582.474625][ T8657] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1582.482712][ T8657] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1582.496351][ T8436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1582.515835][ T8411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1582.539212][ T8436] device veth0_vlan entered promiscuous mode [ 1582.547161][ T8658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1582.557495][ T8658] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1582.565796][ T8658] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1582.579512][ T8436] device veth1_vlan entered promiscuous mode [ 1582.603315][ T8658] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1582.611783][ T8658] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1582.620196][ T8658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1582.631895][ T8436] device veth0_macvtap entered promiscuous mode [ 1582.642590][ T8436] device veth1_macvtap entered promiscuous mode [ 1582.660407][ T8436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1582.667780][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1582.678886][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1582.693156][ T8436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1582.701473][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1582.711271][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1582.723533][ T8436] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1582.732485][ T8436] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1582.741813][ T8436] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1582.751059][ T8436] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1582.871662][ T292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1582.885604][ T292] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1582.918531][ T8657] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1582.934709][ T292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1582.956397][ T292] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1582.967032][ T8658] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1583.491355][ T8659] Bluetooth: hci0: command 0x0409 tx timeout 2021/04/30 12:15:26 executed programs: 57 [ 1585.560336][ T8659] Bluetooth: hci0: command 0x041b tx timeout [ 1586.781254][ T9026] ------------[ cut here ]------------ [ 1586.787222][ T9026] WARNING: CPU: 1 PID: 9026 at kernel/tracepoint.c:291 tracepoint_add_func+0x1fb/0xa90 [ 1586.801658][ T9026] Modules linked in: [ 1586.805698][ T9026] CPU: 1 PID: 9026 Comm: syz-executor.0 Not tainted 5.12.0-syzkaller #0 [ 1586.816398][ T9026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1586.829589][ T9026] RIP: 0010:tracepoint_add_func+0x1fb/0xa90 [ 1586.835739][ T9026] Code: 44 24 18 48 8b 5d 08 80 38 00 0f 85 62 07 00 00 48 8b 44 24 10 48 3b 58 08 0f 85 71 ff ff ff 41 bc ef ff ff ff e8 75 5f fe ff <0f> 0b e9 ac 02 00 00 e8 69 5f fe ff 41 83 c6 02 e8 60 5f fe ff 44 [ 1586.857297][ T9026] RSP: 0018:ffffc90001657ab8 EFLAGS: 00010293 [ 1586.864563][ T9026] RAX: 0000000000000000 RBX: ffffc90000cb9000 RCX: 0000000000000000 [ 1586.874556][ T9026] RDX: ffff88801a4de000 RSI: ffffffff8175335b RDI: ffff88801d5a4618 [ 1586.883066][ T9026] RBP: ffff88801d5a4610 R08: 0000000000000000 R09: 0000000000000000 [ 1586.891502][ T9026] R10: ffffffff8175358a R11: 0000000000000000 R12: 00000000ffffffef [ 1586.900974][ T9026] R13: ffff88801d5a4610 R14: 0000000000000000 R15: dffffc0000000000 [ 1586.909860][ T9026] FS: 00007fe001a22700(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 1586.918825][ T9026] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1586.926138][ T9026] CR2: 00007fe7b9f1f028 CR3: 000000001cc41000 CR4: 00000000001506e0 [ 1586.935988][ T9026] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1586.944179][ T9026] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1586.952423][ T9026] Call Trace: [ 1586.955706][ T9026] ? __bpf_trace_block_bio+0xc0/0xc0 [ 1586.961127][ T9026] ? __bpf_trace_block_bio+0xc0/0xc0 [ 1586.966495][ T9026] tracepoint_probe_register+0x9c/0xe0 [ 1586.972432][ T9026] ? tracepoint_probe_register_prio+0xe0/0xe0 [ 1586.978543][ T9026] ? __bpf_trace_block_bio+0xc0/0xc0 [ 1586.983986][ T9026] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1586.990314][ T9026] ? anon_inode_getfile+0x14e/0x1e0 [ 1586.995624][ T9026] bpf_probe_register+0x15a/0x1c0 [ 1587.001145][ T9026] bpf_raw_tracepoint_open+0x34a/0x720 [ 1587.006677][ T9026] ? bpf_tracing_prog_attach+0x9a0/0x9a0 [ 1587.012610][ T9026] ? __might_fault+0xd3/0x180 [ 1587.017400][ T9026] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 1587.023360][ T9026] ? selinux_bpf+0xe7/0x120 [ 1587.028067][ T9026] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1587.035232][ T9026] __do_sys_bpf+0x2586/0x4f40 [ 1587.040133][ T9026] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1587.046201][ T9026] ? bpf_link_get_from_fd+0x110/0x110 [ 1587.051637][ T9026] ? find_held_lock+0x2d/0x110 [ 1587.056439][ T9026] ? __context_tracking_exit+0xb8/0xe0 [ 1587.062159][ T9026] ? lock_downgrade+0x6e0/0x6e0 [ 1587.067046][ T9026] ? syscall_enter_from_user_mode+0x27/0x70 [ 1587.073122][ T9026] do_syscall_64+0x3a/0xb0 [ 1587.077790][ T9026] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1587.083862][ T9026] RIP: 0033:0x4665f9 [ 1587.087775][ T9026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1587.107569][ T9026] RSP: 002b:00007fe001a22188 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1587.116295][ T9026] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1587.124362][ T9026] RDX: 0000000000000010 RSI: 0000000020000100 RDI: 0000000000000011 [ 1587.132549][ T9026] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1587.141459][ T9026] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1587.150200][ T9026] R13: 00007ffdf705e59f R14: 00007fe001a22300 R15: 0000000000022000 [ 1587.158350][ T9026] Kernel panic - not syncing: panic_on_warn set ... [ 1587.164939][ T9026] CPU: 1 PID: 9026 Comm: syz-executor.0 Not tainted 5.12.0-syzkaller #0 [ 1587.173252][ T9026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1587.183291][ T9026] Call Trace: [ 1587.186563][ T9026] dump_stack+0x141/0x1d7 [ 1587.190955][ T9026] panic+0x306/0x73d [ 1587.194846][ T9026] ? __warn_printk+0xf3/0xf3 [ 1587.199423][ T9026] ? __warn.cold+0x1a/0x44 [ 1587.203823][ T9026] ? tracepoint_add_func+0x1fb/0xa90 [ 1587.209094][ T9026] __warn.cold+0x35/0x44 [ 1587.213325][ T9026] ? tracepoint_add_func+0x1fb/0xa90 [ 1587.218595][ T9026] report_bug+0x1bd/0x210 [ 1587.222977][ T9026] handle_bug+0x3c/0x60 [ 1587.227135][ T9026] exc_invalid_op+0x14/0x40 [ 1587.231636][ T9026] asm_exc_invalid_op+0x12/0x20 [ 1587.236498][ T9026] RIP: 0010:tracepoint_add_func+0x1fb/0xa90 [ 1587.242413][ T9026] Code: 44 24 18 48 8b 5d 08 80 38 00 0f 85 62 07 00 00 48 8b 44 24 10 48 3b 58 08 0f 85 71 ff ff ff 41 bc ef ff ff ff e8 75 5f fe ff <0f> 0b e9 ac 02 00 00 e8 69 5f fe ff 41 83 c6 02 e8 60 5f fe ff 44 [ 1587.262015][ T9026] RSP: 0018:ffffc90001657ab8 EFLAGS: 00010293 [ 1587.268073][ T9026] RAX: 0000000000000000 RBX: ffffc90000cb9000 RCX: 0000000000000000 [ 1587.276027][ T9026] RDX: ffff88801a4de000 RSI: ffffffff8175335b RDI: ffff88801d5a4618 [ 1587.283980][ T9026] RBP: ffff88801d5a4610 R08: 0000000000000000 R09: 0000000000000000 [ 1587.291931][ T9026] R10: ffffffff8175358a R11: 0000000000000000 R12: 00000000ffffffef [ 1587.299889][ T9026] R13: ffff88801d5a4610 R14: 0000000000000000 R15: dffffc0000000000 [ 1587.307842][ T9026] ? tracepoint_add_func+0x42a/0xa90 [ 1587.313131][ T9026] ? tracepoint_add_func+0x1fb/0xa90 [ 1587.318416][ T9026] ? tracepoint_add_func+0x1fb/0xa90 [ 1587.323681][ T9026] ? __bpf_trace_block_bio+0xc0/0xc0 [ 1587.328964][ T9026] ? __bpf_trace_block_bio+0xc0/0xc0 [ 1587.334246][ T9026] tracepoint_probe_register+0x9c/0xe0 [ 1587.339688][ T9026] ? tracepoint_probe_register_prio+0xe0/0xe0 [ 1587.345736][ T9026] ? __bpf_trace_block_bio+0xc0/0xc0 [ 1587.351023][ T9026] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1587.357270][ T9026] ? anon_inode_getfile+0x14e/0x1e0 [ 1587.362457][ T9026] bpf_probe_register+0x15a/0x1c0 [ 1587.367465][ T9026] bpf_raw_tracepoint_open+0x34a/0x720 [ 1587.372913][ T9026] ? bpf_tracing_prog_attach+0x9a0/0x9a0 [ 1587.378535][ T9026] ? __might_fault+0xd3/0x180 [ 1587.383196][ T9026] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 1587.389090][ T9026] ? selinux_bpf+0xe7/0x120 [ 1587.393592][ T9026] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1587.399816][ T9026] __do_sys_bpf+0x2586/0x4f40 [ 1587.404480][ T9026] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1587.410449][ T9026] ? bpf_link_get_from_fd+0x110/0x110 [ 1587.415803][ T9026] ? find_held_lock+0x2d/0x110 [ 1587.420552][ T9026] ? __context_tracking_exit+0xb8/0xe0 [ 1587.425997][ T9026] ? lock_downgrade+0x6e0/0x6e0 [ 1587.430832][ T9026] ? syscall_enter_from_user_mode+0x27/0x70 [ 1587.436710][ T9026] do_syscall_64+0x3a/0xb0 [ 1587.441112][ T9026] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1587.446986][ T9026] RIP: 0033:0x4665f9 [ 1587.450860][ T9026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1587.470466][ T9026] RSP: 002b:00007fe001a22188 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1587.478859][ T9026] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1587.486822][ T9026] RDX: 0000000000000010 RSI: 0000000020000100 RDI: 0000000000000011 [ 1587.494774][ T9026] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1587.502725][ T9026] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1587.510679][ T9026] R13: 00007ffdf705e59f R14: 00007fe001a22300 R15: 0000000000022000 [ 1587.519421][ T9026] Kernel Offset: disabled [ 1587.523850][ T9026] Rebooting in 86400 seconds..