[  OK  ] Reached target Graphical Interface.
         Starting Update UTMP about System Runlevel Changes...
[  OK  ] Started Update UTMP about System Runlevel Changes.
         Starting Load/Save RF Kill Switch Status...
[  OK  ] Started Load/Save RF Kill Switch Status.


Debian GNU/Linux 9 syzkaller ttyS0

Warning: Permanently added '10.128.10.27' (ECDSA) to the list of known hosts.
2020/09/03 22:01:05 parsed 1 programs
2020/09/03 22:01:05 executed programs: 0
syzkaller login: [  145.747510][ T6866] IPVS: ftp: loaded support on port[0] = 21
[  145.940846][ T6866] chnl_net:caif_netlink_parms(): no params data found
[  145.996937][ T6866] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.004514][ T6866] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.013797][ T6866] device bridge_slave_0 entered promiscuous mode
[  146.023716][ T6866] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.031568][ T6866] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.039999][ T6866] device bridge_slave_1 entered promiscuous mode
[  146.061233][ T6866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  146.072591][ T6866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  146.095936][ T6866] team0: Port device team_slave_0 added
[  146.103980][ T6866] team0: Port device team_slave_1 added
[  146.122441][ T6866] batman_adv: batadv0: Adding interface: batadv_slave_0
[  146.129512][ T6866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.157478][ T6866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  146.171167][ T6866] batman_adv: batadv0: Adding interface: batadv_slave_1
[  146.178951][ T6866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.205398][ T6866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  146.232265][ T6866] device hsr_slave_0 entered promiscuous mode
[  146.239116][ T6866] device hsr_slave_1 entered promiscuous mode
[  146.338031][ T6866] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  146.348919][ T6866] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  146.360671][ T6866] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  146.371246][ T6866] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  146.397246][ T6866] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.404514][ T6866] bridge0: port 2(bridge_slave_1) entered forwarding state
[  146.412655][ T6866] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.419814][ T6866] bridge0: port 1(bridge_slave_0) entered forwarding state
[  146.467807][ T6866] 8021q: adding VLAN 0 to HW filter on device bond0
[  146.482847][ T2582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  146.493631][ T2582] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.502456][ T2582] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.510691][ T2582] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  146.525000][ T6866] 8021q: adding VLAN 0 to HW filter on device team0
[  146.537012][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  146.546647][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.553786][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  146.577100][ T7087] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  146.587157][ T7087] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.594203][ T7087] bridge0: port 2(bridge_slave_1) entered forwarding state
[  146.603168][ T7087] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  146.622897][ T6866] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  146.634475][ T6866] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  146.649338][ T2610] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  146.658442][ T2610] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  146.667535][ T2610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  146.678306][ T2610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  146.689916][ T7088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  146.704777][ T2582] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  146.712266][ T2582] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  146.727766][ T6866] 8021q: adding VLAN 0 to HW filter on device batadv0
[  146.754327][ T7088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  146.784220][ T7088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  146.795857][ T7088] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  146.803908][ T7088] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  146.815796][ T6866] device veth0_vlan entered promiscuous mode
[  146.829282][ T6866] device veth1_vlan entered promiscuous mode
[  146.851871][ T2582] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  146.861001][ T2582] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  146.870034][ T2582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  146.881367][ T6866] device veth0_macvtap entered promiscuous mode
[  146.892678][ T6866] device veth1_macvtap entered promiscuous mode
[  146.913556][ T6866] batman_adv: batadv0: Interface activated: batadv_slave_0
[  146.922554][ T7088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  146.934137][ T7088] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  146.946046][ T6866] batman_adv: batadv0: Interface activated: batadv_slave_1
[  146.954800][ T2582] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  146.963835][ T2582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  146.976410][ T6866] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  146.985448][ T6866] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  146.994138][ T6866] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  147.003797][ T6866] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  147.765723][ T7085] Bluetooth: hci0: command 0x0409 tx timeout
2020/09/03 22:01:10 executed programs: 67
[  149.844985][   T23] Bluetooth: hci0: command 0x041b tx timeout
[  151.924700][ T7085] Bluetooth: hci0: command 0x040f tx timeout
[  154.004016][ T7085] Bluetooth: hci0: command 0x0419 tx timeout
2020/09/03 22:01:15 executed programs: 200
2020/09/03 22:01:20 executed programs: 334
2020/09/03 22:01:25 executed programs: 473
2020/09/03 22:01:30 executed programs: 616
2020/09/03 22:01:35 executed programs: 757
2020/09/03 22:01:40 executed programs: 887
[  180.194377][T10375] general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] PREEMPT SMP KASAN
[  180.207180][T10375] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017]
[  180.216507][T10375] CPU: 1 PID: 10375 Comm: syz-executor.0 Not tainted 5.9.0-rc1-syzkaller #0
[  180.226020][T10375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  180.236426][T10375] RIP: 0010:__sock_release+0xbb/0x280
[  180.242153][T10375] Code: ff df 48 c1 ea 03 80 3c 02 00 0f 85 a5 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 63 20 49 8d 7c 24 10 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 8e 01 00 00 48 89 df 41 ff 54 24 10 48 8d 7b 18
[  180.261999][T10375] RSP: 0018:ffffc900049a7e28 EFLAGS: 00010202
[  180.268604][T10375] RAX: dffffc0000000000 RBX: ffff888085534000 RCX: 1ffff92000934f67
[  180.277372][T10375] RDX: 0000000000000002 RSI: 0000000000000004 RDI: 0000000000000010
[  180.285794][T10375] RBP: ffff8880855341a0 R08: ffff8880855341a0 R09: ffff8880855341b3
[  180.293859][T10375] R10: ffffed1010aa6836 R11: 0000000000000000 R12: 0000000000000000
[  180.301963][T10375] R13: ffff888085534020 R14: 0000000000000000 R15: ffff8880868071b8
[  180.310529][T10375] FS:  0000000002bd1940(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000
[  180.319680][T10375] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  180.326548][T10375] CR2: 00007fa994dc8db8 CR3: 00000000a2bba000 CR4: 00000000001506e0
[  180.334683][T10375] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  180.342978][T10375] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  180.351221][T10375] Call Trace:
[  180.354697][T10375]  sock_close+0x18/0x20
[  180.358848][T10375]  __fput+0x285/0x920
[  180.363254][T10375]  ? __sock_release+0x280/0x280
[  180.368321][T10375]  task_work_run+0xdd/0x190
[  180.373276][T10375]  exit_to_user_mode_prepare+0x195/0x1c0
[  180.379113][T10375]  syscall_exit_to_user_mode+0x59/0x2b0
[  180.385168][T10375]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  180.391583][T10375] RIP: 0033:0x416f01
[  180.395783][T10375] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01
[  180.416225][T10375] RSP: 002b:00007fff7a6a5800 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[  180.425183][T10375] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000416f01
[  180.433236][T10375] RDX: 0000000000000000 RSI: 0000000000000081 RDI: 0000000000000004
[  180.441343][T10375] RBP: 0000000000000000 R08: 0000000001190390 R09: 0000000000000000
[  180.449570][T10375] R10: 00007fff7a6a58e0 R11: 0000000000000293 R12: 0000000001190398
[  180.457738][T10375] R13: 0000000000000000 R14: ffffffffffffffff R15: 000000000118cf4c
[  180.466072][T10375] Modules linked in:
[  180.473383][T10375] ---[ end trace ebfe0c120bfd6f32 ]---
[  180.478934][T10375] RIP: 0010:__sock_release+0xbb/0x280
[  180.484838][T10375] Code: ff df 48 c1 ea 03 80 3c 02 00 0f 85 a5 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 63 20 49 8d 7c 24 10 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 8e 01 00 00 48 89 df 41 ff 54 24 10 48 8d 7b 18
[  180.505229][T10375] RSP: 0018:ffffc900049a7e28 EFLAGS: 00010202
[  180.511486][T10375] RAX: dffffc0000000000 RBX: ffff888085534000 RCX: 1ffff92000934f67
[  180.519503][T10375] RDX: 0000000000000002 RSI: 0000000000000004 RDI: 0000000000000010
[  180.527919][T10375] RBP: ffff8880855341a0 R08: ffff8880855341a0 R09: ffff8880855341b3
[  180.536444][T10375] R10: ffffed1010aa6836 R11: 0000000000000000 R12: 0000000000000000
[  180.545811][T10375] R13: ffff888085534020 R14: 0000000000000000 R15: ffff8880868071b8
[  180.554517][T10375] FS:  0000000002bd1940(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000
[  180.564319][T10375] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  180.571359][T10375] CR2: 00007fa994dc8db8 CR3: 00000000a2bba000 CR4: 00000000001506e0
[  180.580302][T10375] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  180.589499][T10375] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  180.597915][T10375] Kernel panic - not syncing: Fatal exception
[  180.606264][T10375] Kernel Offset: disabled
[  180.610875][T10375] Rebooting in 86400 seconds..