[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.23' (ECDSA) to the list of known hosts. 2020/08/29 10:01:25 parsed 1 programs 2020/08/29 10:01:26 executed programs: 0 syzkaller login: [ 1050.632356][ T6869] IPVS: ftp: loaded support on port[0] = 21 [ 1050.779815][ T6869] chnl_net:caif_netlink_parms(): no params data found [ 1050.828503][ T6869] bridge0: port 1(bridge_slave_0) entered blocking state [ 1050.837231][ T6869] bridge0: port 1(bridge_slave_0) entered disabled state [ 1050.846546][ T6869] device bridge_slave_0 entered promiscuous mode [ 1050.855466][ T6869] bridge0: port 2(bridge_slave_1) entered blocking state [ 1050.862916][ T6869] bridge0: port 2(bridge_slave_1) entered disabled state [ 1050.871005][ T6869] device bridge_slave_1 entered promiscuous mode [ 1050.891892][ T6869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1050.902638][ T6869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1050.925018][ T6869] team0: Port device team_slave_0 added [ 1050.932415][ T6869] team0: Port device team_slave_1 added [ 1050.950323][ T6869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1050.957251][ T6869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1050.983488][ T6869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1050.996356][ T6869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1051.003434][ T6869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1051.029487][ T6869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1051.056967][ T6869] device hsr_slave_0 entered promiscuous mode [ 1051.063676][ T6869] device hsr_slave_1 entered promiscuous mode [ 1051.160836][ T6869] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1051.171106][ T6869] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1051.182240][ T6869] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1051.191013][ T6869] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1051.217034][ T6869] bridge0: port 2(bridge_slave_1) entered blocking state [ 1051.224197][ T6869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1051.231942][ T6869] bridge0: port 1(bridge_slave_0) entered blocking state [ 1051.239081][ T6869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1051.285139][ T6869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1051.298353][ T6838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1051.309509][ T6838] bridge0: port 1(bridge_slave_0) entered disabled state [ 1051.317502][ T6838] bridge0: port 2(bridge_slave_1) entered disabled state [ 1051.326040][ T6838] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1051.339677][ T6869] 8021q: adding VLAN 0 to HW filter on device team0 [ 1051.351761][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1051.360557][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 1051.367584][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1051.393245][ T2598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1051.402380][ T2598] bridge0: port 2(bridge_slave_1) entered blocking state [ 1051.409486][ T2598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1051.417496][ T2598] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1051.427857][ T2598] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1051.443642][ T6869] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1051.454869][ T6869] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1051.468157][ T6846] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1051.476332][ T6846] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1051.485081][ T6846] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1051.495169][ T6846] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1051.512068][ T6838] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1051.519705][ T6838] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1051.533846][ T6869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1051.553091][ T6846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1051.575894][ T6869] device veth0_vlan entered promiscuous mode [ 1051.583069][ T6846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1051.592820][ T6846] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1051.600839][ T6846] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1051.614284][ T6869] device veth1_vlan entered promiscuous mode [ 1051.635830][ T6838] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1051.644585][ T6838] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1051.653590][ T6838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1051.665861][ T6869] device veth0_macvtap entered promiscuous mode [ 1051.676007][ T6869] device veth1_macvtap entered promiscuous mode [ 1051.694029][ T6869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1051.701659][ T6846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1051.711839][ T6846] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1051.723771][ T6869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1051.732161][ T7089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1051.743456][ T6869] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.754895][ T6869] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.764098][ T6869] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.773180][ T6869] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.610099][ T6846] Bluetooth: hci0: command 0x0409 tx timeout 2020/08/29 10:01:31 executed programs: 80 [ 1054.689025][ T2598] Bluetooth: hci0: command 0x041b tx timeout [ 1056.769672][ T2598] Bluetooth: hci0: command 0x040f tx timeout [ 1058.848993][ T6846] Bluetooth: hci0: command 0x0419 tx timeout 2020/08/29 10:01:36 executed programs: 227 2020/08/29 10:01:41 executed programs: 382 2020/08/29 10:01:46 executed programs: 539 2020/08/29 10:01:51 executed programs: 688 2020/08/29 10:01:56 executed programs: 844 2020/08/29 10:02:01 executed programs: 991 2020/08/29 10:02:06 executed programs: 1141 2020/08/29 10:02:11 executed programs: 1284 2020/08/29 10:02:16 executed programs: 1427 2020/08/29 10:02:21 executed programs: 1577 2020/08/29 10:02:26 executed programs: 1731 2020/08/29 10:02:31 executed programs: 1878 2020/08/29 10:02:36 executed programs: 2027 2020/08/29 10:02:41 executed programs: 2176 2020/08/29 10:02:46 executed programs: 2325 2020/08/29 10:02:51 executed programs: 2459 2020/08/29 10:02:56 executed programs: 2616 2020/08/29 10:03:01 executed programs: 2765 2020/08/29 10:03:06 executed programs: 2918 2020/08/29 10:03:11 executed programs: 3071 2020/08/29 10:03:16 executed programs: 3216 2020/08/29 10:03:21 executed programs: 3364 2020/08/29 10:03:26 executed programs: 3507 [ 1173.899546][ T6846] Bluetooth: hci0: command 0x0406 tx timeout 2020/08/29 10:03:31 executed programs: 3650 2020/08/29 10:03:36 executed programs: 3798 2020/08/29 10:03:41 executed programs: 3943 2020/08/29 10:03:46 executed programs: 4096 2020/08/29 10:03:51 executed programs: 4241 2020/08/29 10:03:56 executed programs: 4387 2020/08/29 10:04:01 executed programs: 4534 2020/08/29 10:04:06 executed programs: 4685 2020/08/29 10:04:11 executed programs: 4830 2020/08/29 10:04:16 executed programs: 4985 2020/08/29 10:04:21 executed programs: 5122 2020/08/29 10:04:26 executed programs: 5271 2020/08/29 10:04:31 executed programs: 5424 2020/08/29 10:04:37 executed programs: 5573 2020/08/29 10:04:42 executed programs: 5717 2020/08/29 10:04:47 executed programs: 5861 2020/08/29 10:04:52 executed programs: 6007 2020/08/29 10:04:57 executed programs: 6145 2020/08/29 10:05:02 executed programs: 6293 2020/08/29 10:05:07 executed programs: 6430 2020/08/29 10:05:12 executed programs: 6571 2020/08/29 10:05:17 executed programs: 6709 2020/08/29 10:05:22 executed programs: 6855 2020/08/29 10:05:27 executed programs: 6996 2020/08/29 10:05:32 executed programs: 7138 2020/08/29 10:05:37 executed programs: 7292 [ 1304.635425][ T1916] ------------[ cut here ]------------ [ 1304.640909][ T1916] ODEBUG: free active (active state 1) object type: rcu_head hint: 0x0 [ 1304.649520][ T1916] WARNING: CPU: 1 PID: 1916 at lib/debugobjects.c:485 debug_print_object+0x160/0x250 [ 1304.658957][ T1916] Kernel panic - not syncing: panic_on_warn set ... [ 1304.665992][ T1916] CPU: 1 PID: 1916 Comm: syz-executor.0 Not tainted 5.9.0-rc2-syzkaller #0 [ 1304.674577][ T1916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1304.684667][ T1916] Call Trace: [ 1304.687969][ T1916] dump_stack+0x18f/0x20d [ 1304.692343][ T1916] panic+0x2e3/0x75c [ 1304.696223][ T1916] ? __warn_printk+0xf3/0xf3 [ 1304.700913][ T1916] ? console_unlock+0x7f0/0xf30 [ 1304.705747][ T1916] ? __warn.cold+0x5/0x4a [ 1304.710055][ T1916] ? __warn+0xd6/0x1f2 [ 1304.714108][ T1916] ? debug_print_object+0x160/0x250 [ 1304.719297][ T1916] __warn.cold+0x20/0x4a [ 1304.723551][ T1916] ? debug_print_object+0x160/0x250 [ 1304.728738][ T1916] report_bug+0x1bd/0x210 [ 1304.733126][ T1916] handle_bug+0x38/0x90 [ 1304.737278][ T1916] ? __warn_printk+0xc6/0xf3 [ 1304.741847][ T1916] exc_invalid_op+0x14/0x40 [ 1304.746352][ T1916] asm_exc_invalid_op+0x12/0x20 [ 1304.751185][ T1916] RIP: 0010:debug_print_object+0x160/0x250 [ 1304.756976][ T1916] Code: dd a0 26 94 88 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 bf 00 00 00 48 8b 14 dd a0 26 94 88 48 c7 c7 00 1c 94 88 e8 12 38 a6 fd <0f> 0b 83 05 93 4f 13 07 01 48 83 c4 20 5b 5d 41 5c 41 5d c3 48 89 [ 1304.776567][ T1916] RSP: 0018:ffffc90002a8fdd0 EFLAGS: 00010082 [ 1304.782610][ T1916] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 1304.790562][ T1916] RDX: ffff8880a8888280 RSI: ffffffff815dafc7 RDI: fffff52000551fac [ 1304.798513][ T1916] RBP: 0000000000000001 R08: 0000000000000001 R09: ffff8880ae720f8b [ 1304.806465][ T1916] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff89bd6780 [ 1304.814423][ T1916] R13: 0000000000000000 R14: dead000000000100 R15: dffffc0000000000 [ 1304.822384][ T1916] ? vprintk_func+0x97/0x1a6 [ 1304.826959][ T1916] debug_check_no_obj_freed+0x301/0x41c [ 1304.832543][ T1916] kmem_cache_free.part.0+0x16d/0x1f0 [ 1304.837921][ T1916] task_work_run+0xdd/0x190 [ 1304.842484][ T1916] exit_to_user_mode_prepare+0x195/0x1c0 [ 1304.848119][ T1916] syscall_exit_to_user_mode+0x59/0x2b0 [ 1304.853652][ T1916] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1304.859532][ T1916] RIP: 0033:0x45d5b9 [ 1304.863416][ T1916] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1304.883084][ T1916] RSP: 002b:00007f7e3f83ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1304.891473][ T1916] RAX: 0000000000000000 RBX: 0000000000002ac0 RCX: 000000000045d5b9 [ 1304.899430][ T1916] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000007 [ 1304.907400][ T1916] RBP: 000000000118cf88 R08: 0000000000000000 R09: 0000000000000000 [ 1304.915367][ T1916] R10: 0000000020000140 R11: 0000000000000246 R12: 000000000118cf4c [ 1304.923335][ T1916] R13: 00007ffcbb776cef R14: 00007f7e3f83f9c0 R15: 000000000118cf4c [ 1304.932577][ T1916] Kernel Offset: disabled [ 1304.936945][ T1916] Rebooting in 86400 seconds..