[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.13' (ECDSA) to the list of known hosts. 2020/08/30 01:49:19 parsed 1 programs 2020/08/30 01:49:19 executed programs: 0 syzkaller login: [ 1048.328221][ T6854] IPVS: ftp: loaded support on port[0] = 21 [ 1048.481052][ T6854] chnl_net:caif_netlink_parms(): no params data found [ 1048.536733][ T6854] bridge0: port 1(bridge_slave_0) entered blocking state [ 1048.544595][ T6854] bridge0: port 1(bridge_slave_0) entered disabled state [ 1048.553385][ T6854] device bridge_slave_0 entered promiscuous mode [ 1048.562766][ T6854] bridge0: port 2(bridge_slave_1) entered blocking state [ 1048.569835][ T6854] bridge0: port 2(bridge_slave_1) entered disabled state [ 1048.578218][ T6854] device bridge_slave_1 entered promiscuous mode [ 1048.598355][ T6854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1048.609152][ T6854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1048.634055][ T6854] team0: Port device team_slave_0 added [ 1048.642484][ T6854] team0: Port device team_slave_1 added [ 1048.659418][ T6854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1048.666862][ T6854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1048.693649][ T6854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1048.706403][ T6854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1048.713838][ T6854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1048.740371][ T6854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1048.767879][ T6854] device hsr_slave_0 entered promiscuous mode [ 1048.774622][ T6854] device hsr_slave_1 entered promiscuous mode [ 1048.872764][ T6854] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1048.884074][ T6854] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1048.893038][ T6854] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1048.903804][ T6854] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1048.928463][ T6854] bridge0: port 2(bridge_slave_1) entered blocking state [ 1048.935638][ T6854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1048.943381][ T6854] bridge0: port 1(bridge_slave_0) entered blocking state [ 1048.950536][ T6854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1048.995046][ T6854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1049.009944][ T2588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1049.022272][ T2588] bridge0: port 1(bridge_slave_0) entered disabled state [ 1049.030728][ T2588] bridge0: port 2(bridge_slave_1) entered disabled state [ 1049.038489][ T2588] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1049.052708][ T6854] 8021q: adding VLAN 0 to HW filter on device team0 [ 1049.066303][ T2877] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1049.074960][ T2877] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.082177][ T2877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1049.101098][ T2588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1049.109415][ T2588] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.116527][ T2588] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1049.131603][ T2877] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1049.140058][ T2877] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1049.150021][ T2877] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1049.163063][ T7074] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1049.177227][ T6854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1049.189032][ T6854] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1049.197027][ T7074] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1049.220024][ T6854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1049.227594][ T7074] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1049.236593][ T7074] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1049.263139][ T6823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1049.275710][ T2877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1049.285910][ T2877] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1049.294205][ T2877] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1049.303189][ T6854] device veth0_vlan entered promiscuous mode [ 1049.316672][ T6854] device veth1_vlan entered promiscuous mode [ 1049.338762][ T6823] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1049.347959][ T6823] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1049.356959][ T6823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1049.367931][ T6854] device veth0_macvtap entered promiscuous mode [ 1049.378202][ T6854] device veth1_macvtap entered promiscuous mode [ 1049.397910][ T6854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1049.405793][ T2877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1049.415904][ T2877] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1049.427705][ T6854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1049.436166][ T6823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1049.448104][ T6854] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.458599][ T6854] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.467412][ T6854] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.476236][ T6854] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.302160][ T6823] Bluetooth: hci0: command 0x0409 tx timeout 2020/08/30 01:49:24 executed programs: 69 [ 1052.380788][ T6831] Bluetooth: hci0: command 0x041b tx timeout [ 1054.470417][ T6831] Bluetooth: hci0: command 0x040f tx timeout [ 1056.540294][ T2877] Bluetooth: hci0: command 0x0419 tx timeout 2020/08/30 01:49:29 executed programs: 210 2020/08/30 01:49:34 executed programs: 357 2020/08/30 01:49:39 executed programs: 494 2020/08/30 01:49:44 executed programs: 643 2020/08/30 01:49:49 executed programs: 789 2020/08/30 01:49:54 executed programs: 929 2020/08/30 01:49:59 executed programs: 1075 2020/08/30 01:50:04 executed programs: 1223 2020/08/30 01:50:09 executed programs: 1365 2020/08/30 01:50:14 executed programs: 1508 2020/08/30 01:50:19 executed programs: 1644 2020/08/30 01:50:24 executed programs: 1788 2020/08/30 01:50:29 executed programs: 1933 2020/08/30 01:50:34 executed programs: 2070 2020/08/30 01:50:39 executed programs: 2220 2020/08/30 01:50:44 executed programs: 2364 2020/08/30 01:50:49 executed programs: 2502 2020/08/30 01:50:54 executed programs: 2646 2020/08/30 01:50:59 executed programs: 2790 2020/08/30 01:51:04 executed programs: 2932 2020/08/30 01:51:09 executed programs: 3148 2020/08/30 01:51:14 executed programs: 3427 [ 1165.197303][T20504] ------------[ cut here ]------------ [ 1165.202820][T20504] ODEBUG: free active (active state 1) object type: rcu_head hint: 0x0 [ 1165.211412][T20504] WARNING: CPU: 0 PID: 20504 at lib/debugobjects.c:485 debug_print_object+0x160/0x250 [ 1165.220937][T20504] Modules linked in: [ 1165.224819][T20504] CPU: 0 PID: 20504 Comm: syz-executor.0 Not tainted 5.9.0-rc2-next-20200828-syzkaller #0 [ 1165.234678][T20504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1165.244721][T20504] RIP: 0010:debug_print_object+0x160/0x250 [ 1165.250506][T20504] Code: dd c0 70 94 88 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 bf 00 00 00 48 8b 14 dd c0 70 94 88 48 c7 c7 20 66 94 88 e8 ab 58 a4 fd <0f> 0b 83 05 93 b0 1b 07 01 48 83 c4 20 5b 5d 41 5c 41 5d c3 48 89 [ 1165.270092][T20504] RSP: 0018:ffffc90007b07dd0 EFLAGS: 00010082 [ 1165.276141][T20504] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 1165.284102][T20504] RDX: ffff8880a6ea6580 RSI: ffffffff815daa77 RDI: fffff52000f60fac [ 1165.292051][T20504] RBP: 0000000000000001 R08: 0000000000000001 R09: ffff8880ae620f8b [ 1165.299998][T20504] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff89c674c0 [ 1165.307971][T20504] R13: 0000000000000000 R14: dead000000000100 R15: dffffc0000000000 [ 1165.315940][T20504] FS: 00007f36a85ca700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 1165.324856][T20504] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1165.331425][T20504] CR2: 0000000000000000 CR3: 00000000a969c000 CR4: 00000000001506f0 [ 1165.339442][T20504] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1165.347396][T20504] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1165.355341][T20504] Call Trace: [ 1165.358619][T20504] debug_check_no_obj_freed+0x301/0x41c [ 1165.364246][T20504] kmem_cache_free.part.0+0x16d/0x1f0 [ 1165.369653][T20504] task_work_run+0xdd/0x190 [ 1165.374213][T20504] exit_to_user_mode_prepare+0x195/0x1c0 [ 1165.379923][T20504] syscall_exit_to_user_mode+0x59/0x2b0 [ 1165.385497][T20504] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1165.391385][T20504] RIP: 0033:0x45d5b9 [ 1165.395262][T20504] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1165.414862][T20504] RSP: 002b:00007f36a85c9c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1165.423255][T20504] RAX: 0000000000000000 RBX: 0000000000002ac0 RCX: 000000000045d5b9 [ 1165.431211][T20504] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000008 [ 1165.439168][T20504] RBP: 000000000118cf88 R08: 0000000000000000 R09: 0000000000000000 [ 1165.447121][T20504] R10: 0000000020000140 R11: 0000000000000246 R12: 000000000118cf4c [ 1165.455073][T20504] R13: 00007fff5765713f R14: 00007f36a85ca9c0 R15: 000000000118cf4c [ 1165.463034][T20504] Kernel panic - not syncing: panic_on_warn set ... [ 1165.469598][T20504] CPU: 0 PID: 20504 Comm: syz-executor.0 Not tainted 5.9.0-rc2-next-20200828-syzkaller #0 [ 1165.479454][T20504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1165.489484][T20504] Call Trace: [ 1165.492815][T20504] dump_stack+0x18f/0x20d [ 1165.497157][T20504] panic+0x2e3/0x75c [ 1165.501036][T20504] ? __warn_printk+0xf3/0xf3 [ 1165.505609][T20504] ? __warn.cold+0x1d/0xc1 [ 1165.510002][T20504] ? __warn.cold+0x14/0xc1 [ 1165.514410][T20504] ? debug_print_object+0x160/0x250 [ 1165.519596][T20504] __warn.cold+0x38/0xc1 [ 1165.523819][T20504] ? debug_print_object+0x160/0x250 [ 1165.528992][T20504] report_bug+0x1bd/0x210 [ 1165.533322][T20504] handle_bug+0x38/0x90 [ 1165.537468][T20504] ? __warn_printk+0xc6/0xf3 [ 1165.542036][T20504] exc_invalid_op+0x14/0x40 [ 1165.546516][T20504] asm_exc_invalid_op+0x12/0x20 [ 1165.551355][T20504] RIP: 0010:debug_print_object+0x160/0x250 [ 1165.557149][T20504] Code: dd c0 70 94 88 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 bf 00 00 00 48 8b 14 dd c0 70 94 88 48 c7 c7 20 66 94 88 e8 ab 58 a4 fd <0f> 0b 83 05 93 b0 1b 07 01 48 83 c4 20 5b 5d 41 5c 41 5d c3 48 89 [ 1165.576731][T20504] RSP: 0018:ffffc90007b07dd0 EFLAGS: 00010082 [ 1165.582782][T20504] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 1165.590731][T20504] RDX: ffff8880a6ea6580 RSI: ffffffff815daa77 RDI: fffff52000f60fac [ 1165.598702][T20504] RBP: 0000000000000001 R08: 0000000000000001 R09: ffff8880ae620f8b [ 1165.606670][T20504] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff89c674c0 [ 1165.614622][T20504] R13: 0000000000000000 R14: dead000000000100 R15: dffffc0000000000 [ 1165.622646][T20504] ? vprintk_func+0x97/0x1a6 [ 1165.627273][T20504] debug_check_no_obj_freed+0x301/0x41c [ 1165.632811][T20504] kmem_cache_free.part.0+0x16d/0x1f0 [ 1165.638165][T20504] task_work_run+0xdd/0x190 [ 1165.642655][T20504] exit_to_user_mode_prepare+0x195/0x1c0 [ 1165.648273][T20504] syscall_exit_to_user_mode+0x59/0x2b0 [ 1165.653800][T20504] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1165.659675][T20504] RIP: 0033:0x45d5b9 [ 1165.663568][T20504] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1165.683157][T20504] RSP: 002b:00007f36a85c9c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1165.691553][T20504] RAX: 0000000000000000 RBX: 0000000000002ac0 RCX: 000000000045d5b9 [ 1165.699502][T20504] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000008 [ 1165.707452][T20504] RBP: 000000000118cf88 R08: 0000000000000000 R09: 0000000000000000 [ 1165.715413][T20504] R10: 0000000020000140 R11: 0000000000000246 R12: 000000000118cf4c [ 1165.723372][T20504] R13: 00007fff5765713f R14: 00007f36a85ca9c0 R15: 000000000118cf4c [ 1165.732500][T20504] Kernel Offset: disabled [ 1165.736888][T20504] Rebooting in 86400 seconds..