[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.46' (ECDSA) to the list of known hosts. syzkaller login: [ 33.368824] IPVS: ftp: loaded support on port[0] = 21 [ 33.437913] chnl_net:caif_netlink_parms(): no params data found [ 33.550593] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.557549] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.564681] device bridge_slave_0 entered promiscuous mode [ 33.572858] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.579518] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.586463] device bridge_slave_1 entered promiscuous mode [ 33.604943] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 33.613606] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 33.632305] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 33.640281] team0: Port device team_slave_0 added [ 33.645767] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 33.653602] team0: Port device team_slave_1 added [ 33.670517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.676992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.702264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.713616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.720056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.745382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.758513] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 33.766169] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 33.785747] device hsr_slave_0 entered promiscuous mode [ 33.792018] device hsr_slave_1 entered promiscuous mode [ 33.798532] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 33.805526] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 33.872619] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.879065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.885847] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.892243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.922950] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 33.930097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.939843] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 33.948891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.958633] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.965674] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.973099] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 33.983658] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 33.989971] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.999577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.007434] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.013776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.023804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.031944] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.038340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.053741] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.061508] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.071746] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.085469] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.095945] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.107213] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 34.113603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.121773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.129732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.142989] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 34.150424] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.157963] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.168999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.182188] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 34.191837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.224845] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 34.232838] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 34.240156] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 34.249526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.257730] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.264619] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.273550] device veth0_vlan entered promiscuous mode [ 34.282589] device veth1_vlan entered promiscuous mode [ 34.288829] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 34.298693] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 34.310007] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 34.319368] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.327813] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.335001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.345300] device veth0_macvtap entered promiscuous mode [ 34.352116] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 34.360728] device veth1_macvtap entered promiscuous mode [ 34.370944] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 34.380301] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 34.390719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.398110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.406715] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.418422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.429022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.544676] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 34.552246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.564214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.580178] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready executing program [ 34.589616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.602830] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.611288] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.618439] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.637653] FAULT_INJECTION: forcing a failure. [ 34.637653] name failslab, interval 1, probability 0, space 0, times 1 [ 34.649948] CPU: 0 PID: 8345 Comm: syz-executor377 Not tainted 4.19.211-syzkaller #0 [ 34.657954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 34.667294] Call Trace: [ 34.669871] dump_stack+0x1fc/0x2ef [ 34.673524] should_fail.cold+0xa/0xf [ 34.677322] ? setup_fault_attr+0x200/0x200 [ 34.681636] ? lock_acquire+0x170/0x3c0 [ 34.685598] __should_failslab+0x115/0x180 [ 34.689837] should_failslab+0x5/0x10 [ 34.693691] __kmalloc+0x2ab/0x3c0 [ 34.697229] ? ieee80211_assign_beacon+0x141/0x9f0 [ 34.702152] ieee80211_assign_beacon+0x141/0x9f0 [ 34.706902] ? __ieee80211_vif_copy_chanctx_to_vlans+0x148/0x2e0 [ 34.713037] ieee80211_start_ap+0xa44/0x1730 [ 34.717432] ? check_preemption_disabled+0x41/0x280 [ 34.722436] nl80211_start_ap+0x12dc/0x2110 [ 34.726745] ? nl80211_set_beacon+0x8f0/0x8f0 [ 34.731251] ? nl80211_pre_doit+0xa2/0x620 [ 34.735467] ? __cfg80211_rdev_from_attrs+0x700/0x700 [ 34.740667] genl_family_rcv_msg+0x642/0xc40 [ 34.745080] ? genl_rcv+0x40/0x40 [ 34.748522] ? genl_rcv_msg+0x12f/0x160 [ 34.752482] ? mutex_trylock+0x1a0/0x1a0 [ 34.756579] ? __radix_tree_lookup+0x216/0x370 [ 34.761162] genl_rcv_msg+0xbf/0x160 [ 34.764928] netlink_rcv_skb+0x160/0x440 [ 34.768987] ? genl_family_rcv_msg+0xc40/0xc40 [ 34.773563] ? netlink_ack+0xae0/0xae0 [ 34.777435] ? genl_rcv+0x15/0x40 [ 34.780875] genl_rcv+0x24/0x40 [ 34.784231] netlink_unicast+0x4d5/0x690 [ 34.788278] ? netlink_sendskb+0x110/0x110 [ 34.792562] ? _copy_from_iter_full+0x229/0x7c0 [ 34.797233] ? __phys_addr_symbol+0x2c/0x70 [ 34.801544] ? __check_object_size+0x17b/0x3e0 [ 34.806116] netlink_sendmsg+0x6c3/0xc50 [ 34.810182] ? aa_af_perm+0x230/0x230 [ 34.814082] ? nlmsg_notify+0x1f0/0x1f0 [ 34.818082] ? kernel_recvmsg+0x220/0x220 [ 34.822334] ? nlmsg_notify+0x1f0/0x1f0 [ 34.826314] sock_sendmsg+0xc3/0x120 [ 34.830035] ___sys_sendmsg+0x7bb/0x8e0 [ 34.834015] ? check_preemption_disabled+0x41/0x280 [ 34.839015] ? copy_msghdr_from_user+0x440/0x440 [ 34.843758] ? proc_fail_nth_write+0x95/0x1d0 [ 34.848238] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 34.853152] ? mark_held_locks+0xf0/0xf0 [ 34.857196] ? __vfs_write+0xff/0x770 [ 34.860983] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 34.865910] ? common_file_perm+0x4e5/0x850 [ 34.870216] ? kernel_read+0x110/0x110 [ 34.874085] ? vm_insert_page+0x9c0/0x9c0 [ 34.878226] ? fsnotify+0x84e/0xe10 [ 34.881846] ? vfs_write+0x3d7/0x540 [ 34.885632] ? __fdget+0x1a0/0x230 [ 34.889165] __x64_sys_sendmsg+0x132/0x220 [ 34.893419] ? __sys_sendmsg+0x1b0/0x1b0 [ 34.897466] ? vfs_write+0x393/0x540 [ 34.901170] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 34.906525] ? trace_hardirqs_off_caller+0x6e/0x210 [ 34.911524] ? do_syscall_64+0x21/0x620 [ 34.915480] do_syscall_64+0xf9/0x620 [ 34.919278] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 34.924447] RIP: 0033:0x7f9188533449 [ 34.928168] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 34.947072] RSP: 002b:00007fff3bfdb268 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 34.954763] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f9188533449 [ 34.962035] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 34.969291] RBP: 00007fff3bfdb2e0 R08: 0000000000000001 R09: 000000000000000a [ 34.976575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 34.983845] R13: 00007fff3bfdb320 R14: 0000000000000040 R15: 00007fff3bfdb2f0 [ 34.999491] ------------[ cut here ]------------ [ 35.004814] WARNING: CPU: 0 PID: 8345 at net/mac80211/chan.c:1754 ieee80211_vif_release_channel.cold+0x29/0x57 [ 35.014974] Kernel panic - not syncing: panic_on_warn set ... [ 35.014974] [ 35.022342] CPU: 0 PID: 8345 Comm: syz-executor377 Not tainted 4.19.211-syzkaller #0 [ 35.030221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 35.039587] Call Trace: [ 35.042167] dump_stack+0x1fc/0x2ef [ 35.045785] panic+0x26a/0x50e [ 35.049186] ? __warn_printk+0xf3/0xf3 [ 35.053085] ? ieee80211_vif_release_channel.cold+0x29/0x57 [ 35.058802] ? __probe_kernel_read+0x130/0x1b0 [ 35.063384] ? __warn.cold+0x5/0x5a [ 35.067006] ? __warn+0xe4/0x200 [ 35.070378] ? ieee80211_vif_release_channel.cold+0x29/0x57 [ 35.076076] __warn.cold+0x20/0x5a [ 35.079617] ? ieee80211_vif_release_channel.cold+0x29/0x57 [ 35.085323] report_bug+0x262/0x2b0 [ 35.089038] do_error_trap+0x1d7/0x310 [ 35.092922] ? math_error+0x310/0x310 [ 35.096732] ? __irq_work_queue_local+0x101/0x160 [ 35.101570] ? irq_work_queue+0x29/0x80 [ 35.105534] ? error_entry+0x72/0xd0 [ 35.109238] ? trace_hardirqs_off_caller+0x6e/0x210 [ 35.114337] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 35.119172] invalid_op+0x14/0x20 [ 35.122618] RIP: 0010:ieee80211_vif_release_channel.cold+0x29/0x57 [ 35.128922] Code: ff e8 1e fb 4d f9 48 c7 c7 20 1a 68 89 e8 7d 2c df ff 0f 0b e9 c8 4c 92 ff e8 06 fb 4d f9 48 c7 c7 20 1a 68 89 e8 65 2c df ff <0f> 0b b8 ff ff 37 00 4c 89 e2 48 c1 ea 03 48 c1 e0 2a 80 3c 02 00 [ 35.147825] RSP: 0018:ffff88809afd7398 EFLAGS: 00010286 [ 35.153172] RAX: 0000000000000024 RBX: ffff8880af2e5280 RCX: 0000000000000000 [ 35.160425] RDX: 0000000000000000 RSI: ffffffff814dff01 RDI: ffffed10135fae65 [ 35.167676] RBP: 0000000000000000 R08: 0000000000000024 R09: 0000000000000000 [ 35.174932] R10: 0000000000000005 R11: 0000000000000000 R12: ffff8880af2e57b0 [ 35.182190] R13: 0000000000000001 R14: 00000000fffffff4 R15: ffff8880af2e57b0 [ 35.189454] ? vprintk_func+0x81/0x180 [ 35.193341] ? ieee80211_vif_release_channel.cold+0x29/0x57 [ 35.199041] ieee80211_start_ap+0x11a0/0x1730 [ 35.203526] ? check_preemption_disabled+0x41/0x280 [ 35.208532] nl80211_start_ap+0x12dc/0x2110 [ 35.212854] ? nl80211_set_beacon+0x8f0/0x8f0 [ 35.217375] ? nl80211_pre_doit+0xa2/0x620 [ 35.221604] ? __cfg80211_rdev_from_attrs+0x700/0x700 [ 35.226778] genl_family_rcv_msg+0x642/0xc40 [ 35.231184] ? genl_rcv+0x40/0x40 [ 35.234618] ? genl_rcv_msg+0x12f/0x160 [ 35.238572] ? mutex_trylock+0x1a0/0x1a0 [ 35.242618] ? __radix_tree_lookup+0x216/0x370 [ 35.247183] genl_rcv_msg+0xbf/0x160 [ 35.250946] netlink_rcv_skb+0x160/0x440 [ 35.255154] ? genl_family_rcv_msg+0xc40/0xc40 [ 35.259731] ? netlink_ack+0xae0/0xae0 [ 35.263603] ? genl_rcv+0x15/0x40 [ 35.267044] genl_rcv+0x24/0x40 [ 35.270313] netlink_unicast+0x4d5/0x690 [ 35.274370] ? netlink_sendskb+0x110/0x110 [ 35.278587] ? _copy_from_iter_full+0x229/0x7c0 [ 35.283254] ? __phys_addr_symbol+0x2c/0x70 [ 35.287560] ? __check_object_size+0x17b/0x3e0 [ 35.292126] netlink_sendmsg+0x6c3/0xc50 [ 35.296172] ? aa_af_perm+0x230/0x230 [ 35.299968] ? nlmsg_notify+0x1f0/0x1f0 [ 35.303925] ? kernel_recvmsg+0x220/0x220 [ 35.308058] ? nlmsg_notify+0x1f0/0x1f0 [ 35.312014] sock_sendmsg+0xc3/0x120 [ 35.315710] ___sys_sendmsg+0x7bb/0x8e0 [ 35.319670] ? check_preemption_disabled+0x41/0x280 [ 35.324683] ? copy_msghdr_from_user+0x440/0x440 [ 35.329449] ? proc_fail_nth_write+0x95/0x1d0 [ 35.333933] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 35.338861] ? mark_held_locks+0xf0/0xf0 [ 35.342907] ? __vfs_write+0xff/0x770 [ 35.346700] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 35.351620] ? common_file_perm+0x4e5/0x850 [ 35.355942] ? kernel_read+0x110/0x110 [ 35.359822] ? vm_insert_page+0x9c0/0x9c0 [ 35.363958] ? fsnotify+0x84e/0xe10 [ 35.367568] ? vfs_write+0x3d7/0x540 [ 35.371263] ? __fdget+0x1a0/0x230 [ 35.374785] __x64_sys_sendmsg+0x132/0x220 [ 35.379013] ? __sys_sendmsg+0x1b0/0x1b0 [ 35.383059] ? vfs_write+0x393/0x540 [ 35.386763] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 35.392113] ? trace_hardirqs_off_caller+0x6e/0x210 [ 35.397118] ? do_syscall_64+0x21/0x620 [ 35.401083] do_syscall_64+0xf9/0x620 [ 35.404869] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 35.410041] RIP: 0033:0x7f9188533449 [ 35.413737] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 35.432621] RSP: 002b:00007fff3bfdb268 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 35.440325] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f9188533449 [ 35.447575] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 35.454830] RBP: 00007fff3bfdb2e0 R08: 0000000000000001 R09: 000000000000000a [ 35.462092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 35.469345] R13: 00007fff3bfdb320 R14: 0000000000000040 R15: 00007fff3bfdb2f0 [ 35.476844] Kernel Offset: disabled [ 35.480515] Rebooting in 86400 seconds..