[ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.59' (ECDSA) to the list of known hosts. syzkaller login: [ 68.511463][ T8495] IPVS: ftp: loaded support on port[0] = 21 [ 68.611963][ T8495] chnl_net:caif_netlink_parms(): no params data found [ 68.664885][ T8495] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.673340][ T8495] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.682449][ T8495] device bridge_slave_0 entered promiscuous mode [ 68.692316][ T8495] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.700341][ T8495] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.708672][ T8495] device bridge_slave_1 entered promiscuous mode [ 68.730669][ T8495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.742681][ T8495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.768608][ T8495] team0: Port device team_slave_0 added [ 68.777025][ T8495] team0: Port device team_slave_1 added [ 68.796440][ T8495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.803477][ T8495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.829842][ T8495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.843108][ T8495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.850375][ T8495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.876827][ T8495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.906637][ T8495] device hsr_slave_0 entered promiscuous mode [ 68.914429][ T8495] device hsr_slave_1 entered promiscuous mode [ 69.025654][ T8495] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.037087][ T8495] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.050856][ T8495] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.061796][ T8495] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.089195][ T8495] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.096368][ T8495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.104350][ T8495] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.111574][ T8495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.163704][ T8495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.177706][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.191126][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.199931][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.210928][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 69.224905][ T8495] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.238843][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.248608][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.255703][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.270869][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.280218][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.287279][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.309989][ T3201] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.320489][ T3201] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.340123][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.350141][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.359155][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.372691][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.394781][ T3201] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.402935][ T3201] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.416699][ T8495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.439889][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.463202][ T3201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.472579][ T3201] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.481446][ T3201] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.494349][ T8495] device veth0_vlan entered promiscuous mode [ 69.509200][ T8495] device veth1_vlan entered promiscuous mode [ 69.533575][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.544248][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.554557][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.567833][ T8495] device veth0_macvtap entered promiscuous mode [ 69.579710][ T8495] device veth1_macvtap entered promiscuous mode [ 69.590727][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.608766][ T8495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.617018][ T3201] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.630072][ T3201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.644437][ T8495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.653690][ T3201] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready executing program [ 69.662793][ T3201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.676179][ T8495] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.686459][ T8495] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.696955][ T8495] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.706634][ T8495] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.752697][ T8495] FAULT_INJECTION: forcing a failure. [ 69.752697][ T8495] name failslab, interval 1, probability 0, space 0, times 1 [ 69.765909][ T8495] CPU: 1 PID: 8495 Comm: syz-executor608 Not tainted 5.10.0-rc4-syzkaller #0 [ 69.774772][ T8495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.784823][ T8495] Call Trace: [ 69.788149][ T8495] dump_stack+0x107/0x163 [ 69.792568][ T8495] should_fail.cold+0x5/0xa [ 69.797054][ T8495] ? can_rx_register+0x16c/0x650 [ 69.802958][ T8495] ? can_rx_register+0x16c/0x650 [ 69.807893][ T8495] should_failslab+0x5/0x10 [ 69.812398][ T8495] kmem_cache_alloc+0x33b/0x460 [ 69.817250][ T8495] can_rx_register+0x16c/0x650 [ 69.821999][ T8495] ? isotp_rcv_sf.isra.0+0x3b0/0x3b0 [ 69.827271][ T8495] ? lock_downgrade+0x6d0/0x6d0 [ 69.832109][ T8495] ? can_sock_destruct+0x30/0x30 [ 69.837073][ T8495] ? mark_held_locks+0x9f/0xe0 [ 69.841845][ T8495] isotp_bind+0x476/0xc00 [ 69.846181][ T8495] ? bpf_lsm_socket_bind+0x5/0x10 [ 69.851207][ T8495] ? security_socket_bind+0x83/0xb0 [ 69.856447][ T8495] __sys_bind+0x1e9/0x250 [ 69.860915][ T8495] ? __ia32_sys_socketpair+0xf0/0xf0 [ 69.866201][ T8495] ? vfs_write+0x18e/0xa30 [ 69.870633][ T8495] __x64_sys_bind+0x6f/0xb0 [ 69.875127][ T8495] ? syscall_enter_from_user_mode+0x1d/0x50 [ 69.881028][ T8495] do_syscall_64+0x2d/0x70 [ 69.885865][ T8495] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 69.891772][ T8495] RIP: 0033:0x443749 [ 69.895653][ T8495] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb 0d fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 69.916316][ T8495] RSP: 002b:00007fffc08277a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 69.924726][ T8495] RAX: ffffffffffffffda RBX: 00007fffc0827800 RCX: 0000000000443749 [ 69.932713][ T8495] RDX: 0000000000000018 RSI: 0000000020000300 RDI: 0000000000000004 [ 69.940715][ T8495] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000001bbbbbb [ 69.948720][ T8495] R10: 0000000000000000 R11: 0000000000000246 R12: ffffffffffffffff [ 69.957407][ T8495] R13: 0000000000000005 R14: 0000000000000000 R15: 0000000000000000 [ 69.973492][ T8495] ------------[ cut here ]------------ [ 69.979287][ T8495] BUG: receive list entry not found for dev vcan0, id 001, mask C00007FF [ 69.988445][ T8495] WARNING: CPU: 0 PID: 8495 at net/can/af_can.c:546 can_rx_unregister+0x5a4/0x700 [ 69.997739][ T8495] Modules linked in: [ 70.002153][ T8495] CPU: 0 PID: 8495 Comm: syz-executor608 Not tainted 5.10.0-rc4-syzkaller #0 [ 70.011015][ T8495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.021198][ T8495] RIP: 0010:can_rx_unregister+0x5a4/0x700 [ 70.026944][ T8495] Code: 8b 7c 24 78 44 8b 64 24 68 49 c7 c5 a0 ae 56 8a e8 11 58 97 f9 44 89 f9 44 89 e2 4c 89 ee 48 c7 c7 e0 ae 56 8a e8 76 ab d3 00 <0f> 0b 48 8b 7c 24 28 e8 90 22 0f 01 e9 54 fb ff ff e8 06 cf d8 f9 [ 70.046950][ T8495] RSP: 0018:ffffc9000182f9f0 EFLAGS: 00010282 [ 70.053967][ T8495] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 70.062065][ T8495] RDX: ffff88801ffe8000 RSI: ffffffff8158f3c5 RDI: fffff52000305f30 [ 70.070161][ T8495] RBP: 0000000000000118 R08: 0000000000000001 R09: ffff8880b9e30627 [ 70.078942][ T8495] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 70.086933][ T8495] R13: ffff88801ab00000 R14: 1ffff92000305f45 R15: 00000000c00007ff [ 70.095029][ T8495] FS: 0000000000000000(0000) GS:ffff8880b9e00000(0000) knlGS:0000000000000000 [ 70.104061][ T8495] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 70.110754][ T8495] CR2: 00000000004c8928 CR3: 000000000b08e000 CR4: 00000000001506f0 [ 70.118846][ T8495] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 70.126858][ T8495] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 70.134993][ T8495] Call Trace: [ 70.138407][ T8495] ? isotp_rcv_sf.isra.0+0x3b0/0x3b0 [ 70.143720][ T8495] ? can_create+0x4d0/0x4d0 [ 70.148322][ T8495] ? mark_held_locks+0x9f/0xe0 [ 70.153145][ T8495] ? __local_bh_enable_ip+0x9c/0x110 [ 70.158529][ T8495] isotp_notifier+0x2a7/0x540 [ 70.163932][ T8495] ? isotp_tx_timer_handler+0xb80/0xb80 [ 70.169567][ T8495] call_netdevice_unregister_notifiers+0x156/0x1c0 [ 70.176111][ T8495] ? netdev_cmd_to_name+0x70/0x70 [ 70.181244][ T8495] ? down_write_killable+0x170/0x170 [ 70.186732][ T8495] unregister_netdevice_notifier+0xcd/0x170 [ 70.192728][ T8495] isotp_release+0x136/0x600 [ 70.197352][ T8495] ? isotp_sendmsg+0x1330/0x1330 [ 70.202444][ T8495] ? down_write+0xdb/0x150 [ 70.206907][ T8495] ? down_write_killable+0x170/0x170 [ 70.212290][ T8495] ? locks_remove_file+0x30d/0x560 [ 70.217567][ T8495] ? fcntl_setlk+0xf10/0xf10 [ 70.222199][ T8495] __sock_release+0xcd/0x280 [ 70.226793][ T8495] sock_close+0x18/0x20 [ 70.231063][ T8495] __fput+0x285/0x920 [ 70.235089][ T8495] ? __sock_release+0x280/0x280 [ 70.240075][ T8495] task_work_run+0xdd/0x190 [ 70.244655][ T8495] do_exit+0xb64/0x29b0 [ 70.249106][ T8495] ? mm_update_next_owner+0x7a0/0x7a0 [ 70.254527][ T8495] do_group_exit+0x125/0x310 [ 70.260111][ T8495] __x64_sys_exit_group+0x3a/0x50 [ 70.265447][ T8495] do_syscall_64+0x2d/0x70 [ 70.269993][ T8495] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 70.275912][ T8495] RIP: 0033:0x442388 [ 70.279909][ T8495] Code: Unable to access opcode bytes at RIP 0x44235e. [ 70.286791][ T8495] RSP: 002b:00007fffc0827768 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 70.295319][ T8495] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000442388 [ 70.303477][ T8495] RDX: 0000000000000001 RSI: 000000000000003c RDI: 0000000000000001 [ 70.311590][ T8495] RBP: 00000000004c88f0 R08: 00000000000000e7 R09: ffffffffffffffd0 [ 70.319875][ T8495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.327945][ T8495] R13: 00000000006dd240 R14: 0000000000000000 R15: 0000000000000000 [ 70.335962][ T8495] Kernel panic - not syncing: panic_on_warn set ... [ 70.342549][ T8495] CPU: 0 PID: 8495 Comm: syz-executor608 Not tainted 5.10.0-rc4-syzkaller #0 [ 70.351291][ T8495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.361327][ T8495] Call Trace: [ 70.364630][ T8495] dump_stack+0x107/0x163 [ 70.369060][ T8495] panic+0x306/0x73d [ 70.372951][ T8495] ? __warn_printk+0xf3/0xf3 [ 70.377534][ T8495] ? __warn.cold+0x1a/0x44 [ 70.381942][ T8495] ? __warn+0xf1/0x210 [ 70.386000][ T8495] ? can_rx_unregister+0x5a4/0x700 [ 70.391096][ T8495] __warn.cold+0x35/0x44 [ 70.395322][ T8495] ? can_rx_unregister+0x5a4/0x700 [ 70.400443][ T8495] report_bug+0x1bd/0x210 [ 70.404774][ T8495] handle_bug+0x3c/0x60 [ 70.408911][ T8495] exc_invalid_op+0x14/0x40 [ 70.413425][ T8495] asm_exc_invalid_op+0x12/0x20 [ 70.418273][ T8495] RIP: 0010:can_rx_unregister+0x5a4/0x700 [ 70.423983][ T8495] Code: 8b 7c 24 78 44 8b 64 24 68 49 c7 c5 a0 ae 56 8a e8 11 58 97 f9 44 89 f9 44 89 e2 4c 89 ee 48 c7 c7 e0 ae 56 8a e8 76 ab d3 00 <0f> 0b 48 8b 7c 24 28 e8 90 22 0f 01 e9 54 fb ff ff e8 06 cf d8 f9 [ 70.443736][ T8495] RSP: 0018:ffffc9000182f9f0 EFLAGS: 00010282 [ 70.449798][ T8495] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 70.458221][ T8495] RDX: ffff88801ffe8000 RSI: ffffffff8158f3c5 RDI: fffff52000305f30 [ 70.466342][ T8495] RBP: 0000000000000118 R08: 0000000000000001 R09: ffff8880b9e30627 [ 70.474319][ T8495] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 70.482291][ T8495] R13: ffff88801ab00000 R14: 1ffff92000305f45 R15: 00000000c00007ff [ 70.490285][ T8495] ? vprintk_func+0x95/0x1e0 [ 70.494909][ T8495] ? isotp_rcv_sf.isra.0+0x3b0/0x3b0 [ 70.500191][ T8495] ? can_create+0x4d0/0x4d0 [ 70.504685][ T8495] ? mark_held_locks+0x9f/0xe0 [ 70.509436][ T8495] ? __local_bh_enable_ip+0x9c/0x110 [ 70.514707][ T8495] isotp_notifier+0x2a7/0x540 [ 70.519399][ T8495] ? isotp_tx_timer_handler+0xb80/0xb80 [ 70.524933][ T8495] call_netdevice_unregister_notifiers+0x156/0x1c0 [ 70.531420][ T8495] ? netdev_cmd_to_name+0x70/0x70 [ 70.536437][ T8495] ? down_write_killable+0x170/0x170 [ 70.541714][ T8495] unregister_netdevice_notifier+0xcd/0x170 [ 70.547608][ T8495] isotp_release+0x136/0x600 [ 70.552184][ T8495] ? isotp_sendmsg+0x1330/0x1330 [ 70.557110][ T8495] ? down_write+0xdb/0x150 [ 70.561533][ T8495] ? down_write_killable+0x170/0x170 [ 70.566952][ T8495] ? locks_remove_file+0x30d/0x560 [ 70.572058][ T8495] ? fcntl_setlk+0xf10/0xf10 [ 70.576650][ T8495] __sock_release+0xcd/0x280 [ 70.581239][ T8495] sock_close+0x18/0x20 [ 70.585382][ T8495] __fput+0x285/0x920 [ 70.589353][ T8495] ? __sock_release+0x280/0x280 [ 70.594202][ T8495] task_work_run+0xdd/0x190 [ 70.598730][ T8495] do_exit+0xb64/0x29b0 [ 70.602893][ T8495] ? mm_update_next_owner+0x7a0/0x7a0 [ 70.608266][ T8495] do_group_exit+0x125/0x310 [ 70.612843][ T8495] __x64_sys_exit_group+0x3a/0x50 [ 70.617853][ T8495] do_syscall_64+0x2d/0x70 [ 70.622270][ T8495] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 70.628146][ T8495] RIP: 0033:0x442388 [ 70.632025][ T8495] Code: Unable to access opcode bytes at RIP 0x44235e. [ 70.638848][ T8495] RSP: 002b:00007fffc0827768 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 70.647247][ T8495] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000442388 [ 70.655225][ T8495] RDX: 0000000000000001 RSI: 000000000000003c RDI: 0000000000000001 [ 70.663180][ T8495] RBP: 00000000004c88f0 R08: 00000000000000e7 R09: ffffffffffffffd0 [ 70.671135][ T8495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.679090][ T8495] R13: 00000000006dd240 R14: 0000000000000000 R15: 0000000000000000 [ 70.687996][ T8495] Kernel Offset: disabled [ 70.692443][ T8495] Rebooting in 86400 seconds..