Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.4' (ECDSA) to the list of known hosts. 2021/05/12 03:03:32 parsed 1 programs 2021/05/12 03:03:32 executed programs: 0 syzkaller login: [ 33.740559] IPVS: ftp: loaded support on port[0] = 21 [ 33.831474] chnl_net:caif_netlink_parms(): no params data found [ 33.922690] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.930469] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.938999] device bridge_slave_0 entered promiscuous mode [ 33.947719] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.955490] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.963128] device bridge_slave_1 entered promiscuous mode [ 33.981935] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 33.991664] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 34.010609] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 34.019093] team0: Port device team_slave_0 added [ 34.025726] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 34.033270] team0: Port device team_slave_1 added [ 34.049245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.056920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.083605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.097527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.106027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.135010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.146670] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 34.155571] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 34.176933] device hsr_slave_0 entered promiscuous mode [ 34.183521] device hsr_slave_1 entered promiscuous mode [ 34.191707] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 34.201363] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 34.266180] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.273234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.281003] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.288045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.317868] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 34.327086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.337280] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 34.347811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.366871] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.374157] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.384833] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 34.391337] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.401405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.409492] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.416543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.427132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.435612] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.442943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.463530] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.474138] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.485950] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 34.493761] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.502788] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.511852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.520241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.528494] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.535975] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.548470] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 34.557910] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.564921] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.575435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.627599] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 34.638191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.669387] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 34.677359] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 34.685909] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 34.695257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.703034] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.710947] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.719838] device veth0_vlan entered promiscuous mode [ 34.728798] device veth1_vlan entered promiscuous mode [ 34.735595] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 34.744212] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 34.755379] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 34.765089] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.772692] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.781154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.791058] device veth0_macvtap entered promiscuous mode [ 34.799601] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 34.810559] device veth1_macvtap entered promiscuous mode [ 34.818418] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 34.825553] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.836647] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 34.847307] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 34.858596] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 34.867183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.875297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.884747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.895922] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 34.903408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.910340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.918671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.773985] Bluetooth: hci0 command 0x0409 tx timeout 2021/05/12 03:03:37 executed programs: 287 [ 37.851893] Bluetooth: hci0 command 0x041b tx timeout [ 39.930656] Bluetooth: hci0 command 0x040f tx timeout [ 42.009872] Bluetooth: hci0 command 0x0419 tx timeout 2021/05/12 03:03:42 executed programs: 863 2021/05/12 03:03:47 executed programs: 1462 [ 47.759100] kasan: CONFIG_KASAN_INLINE enabled [ 47.765298] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 47.775756] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 47.782589] Modules linked in: [ 47.786012] CPU: 1 PID: 12653 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 47.794084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 47.803779] task: ffff88809e430140 task.stack: ffff88809feb8000 [ 47.810453] RIP: 0010:ieee802154_llsec_parse_dev_addr+0x275/0x320 [ 47.817167] RSP: 0018:ffff88809febf548 EFLAGS: 00010247 [ 47.822945] RAX: dffffc0000000000 RBX: 0000000000000002 RCX: 0000000000000000 [ 47.830682] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 47.838503] RBP: ffff88809febf708 R08: 0000000000000001 R09: ffff88809febf578 [ 47.846334] R10: ffff88809febf5a7 R11: ffff88809e430140 R12: 1ffff11013fd7ea9 [ 47.854128] R13: 0000000000000000 R14: ffff88809bef70f0 R15: 0000000000000000 [ 47.862621] FS: 00007f2787c53700(0000) GS:ffff8880ba500000(0000) knlGS:0000000000000000 [ 47.871454] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 47.877323] CR2: 00007fd15528a000 CR3: 0000000093b8e000 CR4: 00000000001406e0 [ 47.885114] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 47.894534] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 47.902326] Call Trace: [ 47.905161] ? wpan_phy_sysfs_exit+0x20/0x20 [ 47.910409] ? validate_nla+0x192/0x5e0 [ 47.914466] ? nla_parse+0x157/0x1f0 [ 47.918286] ieee802154_llsec_parse_key_id+0x2f4/0x3a0 [ 47.924250] ? ieee802154_llsec_parse_dev_addr+0x320/0x320 [ 47.930415] ? is_bpf_text_address+0x91/0x150 [ 47.935824] nl802154_set_llsec_params+0x1f0/0x470 [ 47.941084] ? ieee802154_llsec_parse_key_id+0x3a0/0x3a0 [ 47.947631] ? nl802154_pre_doit+0xb2/0xb20 [ 47.953394] ? nl802154_dump_wpan_phy_done+0x40/0x40 [ 47.959530] ? nla_parse+0x157/0x1f0 [ 47.963653] genl_family_rcv_msg+0x572/0xb20 [ 47.968252] ? genl_rcv+0x40/0x40 [ 47.971839] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 47.978192] ? trace_hardirqs_on+0x10/0x10 [ 47.982963] ? sock_sendmsg+0xb5/0x100 [ 47.987112] genl_rcv_msg+0xaf/0x140 [ 47.991081] netlink_rcv_skb+0x125/0x390 [ 47.995539] ? genl_family_rcv_msg+0xb20/0xb20 [ 48.000699] ? netlink_ack+0x9a0/0x9a0 [ 48.005559] ? lock_acquire+0x170/0x3f0 [ 48.010751] genl_rcv+0x24/0x40 [ 48.014770] netlink_unicast+0x437/0x610 [ 48.019612] ? netlink_sendskb+0xd0/0xd0 [ 48.023809] ? __check_object_size+0x179/0x230 [ 48.028759] netlink_sendmsg+0x62e/0xb80 [ 48.033099] ? nlmsg_notify+0x170/0x170 [ 48.037500] ? kernel_recvmsg+0x210/0x210 [ 48.041939] ? security_socket_sendmsg+0x83/0xb0 [ 48.047106] ? nlmsg_notify+0x170/0x170 [ 48.051073] sock_sendmsg+0xb5/0x100 [ 48.054941] ___sys_sendmsg+0x6c8/0x800 [ 48.059459] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 48.065086] ? do_futex+0x12b/0x1570 [ 48.069156] ? __fget+0x1fe/0x360 [ 48.072750] ? lock_acquire+0x170/0x3f0 [ 48.077100] ? lock_downgrade+0x740/0x740 [ 48.081731] ? __fget+0x225/0x360 [ 48.085442] ? __fdget+0x196/0x1f0 [ 48.088992] ? sockfd_lookup_light+0xb2/0x160 [ 48.094324] __sys_sendmsg+0xa3/0x120 [ 48.098468] ? SyS_shutdown+0x160/0x160 [ 48.103831] SyS_sendmsg+0x27/0x40 [ 48.107363] ? __sys_sendmsg+0x120/0x120 [ 48.111784] do_syscall_64+0x1d5/0x640 [ 48.115687] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 48.121419] RIP: 0033:0x4665f9 [ 48.125031] RSP: 002b:00007f2787c53188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 48.133421] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 48.140953] RDX: 0000000004000000 RSI: 0000000020000200 RDI: 0000000000000004 [ 48.148380] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 48.156249] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 48.164241] R13: 00007ffe8ed5ea5f R14: 00007f2787c53300 R15: 0000000000022000 [ 48.171775] Code: 00 00 48 83 ec 80 5b 5d 41 5c 41 5d 41 5e 41 5f c3 e8 30 3d 7a fa 49 8d 7f 04 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 01 38 d0 7c 04 84 d2 75 67 [ 48.192805] RIP: ieee802154_llsec_parse_dev_addr+0x275/0x320 RSP: ffff88809febf548 [ 48.202537] ---[ end trace 15ca3bd9bffbc4fc ]--- [ 48.207902] Kernel panic - not syncing: Fatal exception [ 48.215334] Kernel Offset: disabled [ 48.219482] Rebooting in 86400 seconds..