[[0;32m OK [0m] Started Getty on tty2. [[0;32m OK [0m] Started Getty on tty1. [[0;32m OK [0m] Started Serial Getty on ttyS0. [[0;32m OK [0m] Reached target Login Prompts. [[0;32m OK [0m] Started OpenBSD Secure Shell server. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.27' (ECDSA) to the list of known hosts. 2021/01/30 06:13:47 parsed 1 programs 2021/01/30 06:13:47 executed programs: 0 syzkaller login: [ 69.737694][ T8448] IPVS: ftp: loaded support on port[0] = 21 [ 69.875160][ T8448] chnl_net:caif_netlink_parms(): no params data found [ 69.924849][ T8448] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.932288][ T8448] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.940644][ T8448] device bridge_slave_0 entered promiscuous mode [ 69.949673][ T8448] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.956877][ T8448] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.964543][ T8448] device bridge_slave_1 entered promiscuous mode [ 69.986499][ T8448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.997685][ T8448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.020002][ T8448] team0: Port device team_slave_0 added [ 70.027577][ T8448] team0: Port device team_slave_1 added [ 70.046079][ T8448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.053009][ T8448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.079472][ T8448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.091998][ T8448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.099047][ T8448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.125568][ T8448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.152871][ T8448] device hsr_slave_0 entered promiscuous mode [ 70.160876][ T8448] device hsr_slave_1 entered promiscuous mode [ 70.260626][ T8448] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.270483][ T8448] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.280606][ T8448] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.290981][ T8448] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.316494][ T8448] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.323643][ T8448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.331415][ T8448] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.338561][ T8448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.384191][ T8448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.399589][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.409923][ T2944] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.419336][ T2944] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.428247][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 70.441401][ T8448] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.451905][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.461618][ T2944] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.468740][ T2944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.487424][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.496601][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.503658][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.517402][ T4834] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.526336][ T4834] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.545843][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.554130][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.563162][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.573652][ T8448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.591483][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.600726][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.613428][ T8448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.632587][ T4834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.652322][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.661366][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.669650][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.680529][ T8448] device veth0_vlan entered promiscuous mode [ 70.694353][ T8448] device veth1_vlan entered promiscuous mode [ 70.716999][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.724882][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.733582][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.744872][ T8448] device veth0_macvtap entered promiscuous mode [ 70.754820][ T8448] device veth1_macvtap entered promiscuous mode [ 70.772613][ T8448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.781344][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.792030][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.803294][ T8448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.810983][ T4834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.823300][ T8448] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.832584][ T8448] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.841593][ T8448] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.850908][ T8448] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.945735][ T98] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.953732][ T98] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.973904][ T4834] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.999657][ T98] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.008741][ T98] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.020240][ T4834] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.696345][ T4834] Bluetooth: hci0: command 0x0409 tx timeout 2021/01/30 06:13:52 executed programs: 20 [ 73.775564][ T19] Bluetooth: hci0: command 0x041b tx timeout [ 75.854920][ T4834] Bluetooth: hci0: command 0x040f tx timeout [ 76.065229][ T9199] ------------[ cut here ]------------ [ 76.087809][ T9199] WARNING: CPU: 1 PID: 9199 at fs/io_uring.c:9042 io_uring_cancel_task_requests+0xe55/0x10c0 [ 76.113893][ T9199] Modules linked in: [ 76.123527][ T9199] CPU: 1 PID: 9199 Comm: syz-executor.0 Not tainted 5.11.0-rc5-next-20210129-syzkaller #0 [ 76.144645][ T9199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 76.184204][ T9199] RIP: 0010:io_uring_cancel_task_requests+0xe55/0x10c0 [ 76.191171][ T9199] Code: 00 00 e9 1c fe ff ff 48 8b 7c 24 18 e8 f4 b4 da ff e9 f2 fc ff ff 48 8b 7c 24 18 e8 e5 b4 da ff e9 64 f2 ff ff e8 db 15 97 ff <0f> 0b e9 ed f2 ff ff e8 df b4 da ff e9 c8 f5 ff ff 4c 89 ef e8 52 [ 76.234591][ T9199] RSP: 0018:ffffc90003557950 EFLAGS: 00010293 [ 76.240677][ T9199] RAX: 0000000000000000 RBX: ffff8880259fc000 RCX: 0000000000000000 [ 76.261414][ T9199] RDX: ffff8880138a3800 RSI: ffffffff81dc0a25 RDI: ffff8880259fc0d0 [ 76.284611][ T9199] RBP: ffff8880259fc0e8 R08: 0000000000000000 R09: ffff8880138a3807 [ 76.292602][ T9199] R10: ffffffff81dbfc9f R11: 0000000000000000 R12: ffff8880259fc000 [ 76.300737][ T9199] R13: ffff8880138a3800 R14: ffff88801c10b800 R15: ffff888013db2018 [ 76.308792][ T9199] FS: 0000000000000000(0000) GS:ffff8880b9e00000(0000) knlGS:0000000000000000 [ 76.317791][ T9199] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.324383][ T9199] CR2: 0000558f1227b180 CR3: 000000001a9a8000 CR4: 00000000001506f0 [ 76.332437][ T9199] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 76.340891][ T9199] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 76.349019][ T9199] Call Trace: [ 76.352318][ T9199] ? io_ring_exit_work+0x6d0/0x6d0 [ 76.375778][ T9199] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 76.381815][ T9199] io_uring_flush+0x47b/0x6e0 [ 76.394589][ T9199] ? io_uring_cancel_task_requests+0x10c0/0x10c0 [ 76.400951][ T9199] filp_close+0xb4/0x170 [ 76.415222][ T9199] put_files_struct+0x1cc/0x350 [ 76.420108][ T9199] exit_files+0x7e/0xa0 [ 76.424275][ T9199] do_exit+0xc22/0x2ae0 [ 76.444665][ T9199] ? find_held_lock+0x2d/0x110 [ 76.457056][ T9199] ? mm_update_next_owner+0x7a0/0x7a0 [ 76.469671][ T9199] ? get_signal+0x332/0x20f0 [ 76.481309][ T9199] ? lock_downgrade+0x6d0/0x6d0 [ 76.491876][ T9199] do_group_exit+0x125/0x310 [ 76.506648][ T9199] get_signal+0x427/0x20f0 [ 76.517919][ T9199] ? futex_exit_release+0x220/0x220 [ 76.528731][ T9199] ? __might_fault+0xd3/0x180 [ 76.541355][ T9199] arch_do_signal_or_restart+0x2a8/0x1eb0 [ 76.553918][ T9199] ? _copy_to_user+0xdc/0x150 [ 76.566412][ T9199] ? copy_siginfo_to_user32+0xa0/0xa0 [ 76.578990][ T9199] ? __do_sys_futex+0x2a2/0x470 [ 76.589776][ T9199] ? __do_sys_futex+0x2ab/0x470 [ 76.602988][ T9199] ? do_futex+0x1700/0x1700 [ 76.608341][ T9199] exit_to_user_mode_prepare+0x148/0x250 [ 76.614066][ T9199] syscall_exit_to_user_mode+0x19/0x50 [ 76.623011][ T9199] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 76.629821][ T9199] RIP: 0033:0x45e219 [ 76.633795][ T9199] Code: Unable to access opcode bytes at RIP 0x45e1ef. [ 76.643336][ T9199] RSP: 002b:00007f557522ccf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 76.652682][ T9199] RAX: fffffffffffffe00 RBX: 000000000119bf88 RCX: 000000000045e219 [ 76.663193][ T9199] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000119bf88 [ 76.672093][ T9199] RBP: 000000000119bf80 R08: 0000000000000000 R09: 0000000000000000 [ 76.682367][ T9199] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 76.691403][ T9199] R13: 00007ffdf583202f R14: 00007f557522d9c0 R15: 000000000119bf8c [ 76.702306][ T9199] Kernel panic - not syncing: panic_on_warn set ... [ 76.708898][ T9199] CPU: 1 PID: 9199 Comm: syz-executor.0 Not tainted 5.11.0-rc5-next-20210129-syzkaller #0 [ 76.718789][ T9199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 76.728840][ T9199] Call Trace: [ 76.732116][ T9199] dump_stack+0x107/0x163 [ 76.736463][ T9199] panic+0x306/0x73d [ 76.740361][ T9199] ? __warn_printk+0xf3/0xf3 [ 76.744966][ T9199] ? __warn.cold+0x1a/0x44 [ 76.749403][ T9199] ? io_uring_cancel_task_requests+0xe55/0x10c0 [ 76.755658][ T9199] __warn.cold+0x35/0x44 [ 76.759905][ T9199] ? io_uring_cancel_task_requests+0xe55/0x10c0 [ 76.766156][ T9199] report_bug+0x1bd/0x210 [ 76.770501][ T9199] handle_bug+0x3c/0x60 [ 76.774666][ T9199] exc_invalid_op+0x14/0x40 [ 76.779176][ T9199] asm_exc_invalid_op+0x12/0x20 [ 76.784030][ T9199] RIP: 0010:io_uring_cancel_task_requests+0xe55/0x10c0 [ 76.790892][ T9199] Code: 00 00 e9 1c fe ff ff 48 8b 7c 24 18 e8 f4 b4 da ff e9 f2 fc ff ff 48 8b 7c 24 18 e8 e5 b4 da ff e9 64 f2 ff ff e8 db 15 97 ff <0f> 0b e9 ed f2 ff ff e8 df b4 da ff e9 c8 f5 ff ff 4c 89 ef e8 52 [ 76.810501][ T9199] RSP: 0018:ffffc90003557950 EFLAGS: 00010293 [ 76.816678][ T9199] RAX: 0000000000000000 RBX: ffff8880259fc000 RCX: 0000000000000000 [ 76.824678][ T9199] RDX: ffff8880138a3800 RSI: ffffffff81dc0a25 RDI: ffff8880259fc0d0 [ 76.832652][ T9199] RBP: ffff8880259fc0e8 R08: 0000000000000000 R09: ffff8880138a3807 [ 76.840626][ T9199] R10: ffffffff81dbfc9f R11: 0000000000000000 R12: ffff8880259fc000 [ 76.848598][ T9199] R13: ffff8880138a3800 R14: ffff88801c10b800 R15: ffff888013db2018 [ 76.856580][ T9199] ? io_uring_cancel_task_requests+0xcf/0x10c0 [ 76.862748][ T9199] ? io_uring_cancel_task_requests+0xe55/0x10c0 [ 76.869014][ T9199] ? io_ring_exit_work+0x6d0/0x6d0 [ 76.874133][ T9199] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 76.880162][ T9199] io_uring_flush+0x47b/0x6e0 [ 76.884847][ T9199] ? io_uring_cancel_task_requests+0x10c0/0x10c0 [ 76.891187][ T9199] filp_close+0xb4/0x170 [ 76.895436][ T9199] put_files_struct+0x1cc/0x350 [ 76.900301][ T9199] exit_files+0x7e/0xa0 [ 76.904463][ T9199] do_exit+0xc22/0x2ae0 [ 76.908632][ T9199] ? find_held_lock+0x2d/0x110 [ 76.913403][ T9199] ? mm_update_next_owner+0x7a0/0x7a0 [ 76.918786][ T9199] ? get_signal+0x332/0x20f0 [ 76.923381][ T9199] ? lock_downgrade+0x6d0/0x6d0 [ 76.928251][ T9199] do_group_exit+0x125/0x310 [ 76.932855][ T9199] get_signal+0x427/0x20f0 [ 76.937274][ T9199] ? futex_exit_release+0x220/0x220 [ 76.942477][ T9199] ? __might_fault+0xd3/0x180 [ 76.947168][ T9199] arch_do_signal_or_restart+0x2a8/0x1eb0 [ 76.952902][ T9199] ? _copy_to_user+0xdc/0x150 [ 76.957586][ T9199] ? copy_siginfo_to_user32+0xa0/0xa0 [ 76.962972][ T9199] ? __do_sys_futex+0x2a2/0x470 [ 76.967824][ T9199] ? __do_sys_futex+0x2ab/0x470 [ 76.972680][ T9199] ? do_futex+0x1700/0x1700 [ 76.977198][ T9199] exit_to_user_mode_prepare+0x148/0x250 [ 76.982852][ T9199] syscall_exit_to_user_mode+0x19/0x50 [ 76.988328][ T9199] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 76.994229][ T9199] RIP: 0033:0x45e219 [ 76.998125][ T9199] Code: Unable to access opcode bytes at RIP 0x45e1ef. [ 77.004962][ T9199] RSP: 002b:00007f557522ccf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 77.013381][ T9199] RAX: fffffffffffffe00 RBX: 000000000119bf88 RCX: 000000000045e219 [ 77.021353][ T9199] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000119bf88 [ 77.029327][ T9199] RBP: 000000000119bf80 R08: 0000000000000000 R09: 0000000000000000 [ 77.037303][ T9199] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 77.045277][ T9199] R13: 00007ffdf583202f R14: 00007f557522d9c0 R15: 000000000119bf8c [ 77.054034][ T9199] Kernel Offset: disabled [ 77.058444][ T9199] Rebooting in 86400 seconds..