[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.121' (ECDSA) to the list of known hosts. 2020/08/16 17:13:10 parsed 1 programs 2020/08/16 17:13:10 executed programs: 0 syzkaller login: [ 1048.285983][ T6852] IPVS: ftp: loaded support on port[0] = 21 [ 1048.435874][ T6852] chnl_net:caif_netlink_parms(): no params data found [ 1048.487313][ T6852] bridge0: port 1(bridge_slave_0) entered blocking state [ 1048.495240][ T6852] bridge0: port 1(bridge_slave_0) entered disabled state [ 1048.504333][ T6852] device bridge_slave_0 entered promiscuous mode [ 1048.513597][ T6852] bridge0: port 2(bridge_slave_1) entered blocking state [ 1048.521272][ T6852] bridge0: port 2(bridge_slave_1) entered disabled state [ 1048.528937][ T6852] device bridge_slave_1 entered promiscuous mode [ 1048.549344][ T6852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1048.561584][ T6852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1048.584147][ T6852] team0: Port device team_slave_0 added [ 1048.591526][ T6852] team0: Port device team_slave_1 added [ 1048.609877][ T6852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1048.616877][ T6852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1048.644071][ T6852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1048.656822][ T6852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1048.664366][ T6852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1048.691045][ T6852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1048.718488][ T6852] device hsr_slave_0 entered promiscuous mode [ 1048.725288][ T6852] device hsr_slave_1 entered promiscuous mode [ 1048.820809][ T6852] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1048.835271][ T6852] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1048.844663][ T6852] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1048.858307][ T6852] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1048.884400][ T6852] bridge0: port 2(bridge_slave_1) entered blocking state [ 1048.891623][ T6852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1048.899341][ T6852] bridge0: port 1(bridge_slave_0) entered blocking state [ 1048.907533][ T6852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1048.955996][ T6852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1048.969096][ T6829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1048.980749][ T6829] bridge0: port 1(bridge_slave_0) entered disabled state [ 1048.988762][ T6829] bridge0: port 2(bridge_slave_1) entered disabled state [ 1048.997827][ T6829] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1049.011659][ T6852] 8021q: adding VLAN 0 to HW filter on device team0 [ 1049.024169][ T6821] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1049.032972][ T6821] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.040096][ T6821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1049.060283][ T6829] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1049.068723][ T6829] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.075854][ T6829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1049.084512][ T6829] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1049.100062][ T6829] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1049.107955][ T6829] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1049.117285][ T6829] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1049.130677][ T6852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1049.143039][ T6852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1049.153103][ T7072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1049.170954][ T6821] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1049.178437][ T6821] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1049.193176][ T6852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1049.212375][ T7072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1049.232344][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1049.241054][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1049.248817][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1049.260899][ T6852] device veth0_vlan entered promiscuous mode [ 1049.273492][ T6852] device veth1_vlan entered promiscuous mode [ 1049.294326][ T7072] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1049.302939][ T7072] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1049.312116][ T7072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1049.323788][ T6852] device veth0_macvtap entered promiscuous mode [ 1049.333760][ T6852] device veth1_macvtap entered promiscuous mode [ 1049.351100][ T6852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1049.358484][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1049.368865][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1049.381547][ T6852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1049.392127][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1049.402643][ T6852] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.411622][ T6852] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.420958][ T6852] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.430288][ T6852] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.281010][ T5] Bluetooth: hci0: command 0x0409 tx timeout 2020/08/16 17:13:15 executed programs: 107 [ 1052.360136][ T26] Bluetooth: hci0: command 0x041b tx timeout [ 1054.439698][ T6821] Bluetooth: hci0: command 0x040f tx timeout [ 1056.519630][ T6821] Bluetooth: hci0: command 0x0419 tx timeout 2020/08/16 17:13:20 executed programs: 318 2020/08/16 17:13:25 executed programs: 535 2020/08/16 17:13:30 executed programs: 741 2020/08/16 17:13:35 executed programs: 957 2020/08/16 17:13:40 executed programs: 1167 2020/08/16 17:13:45 executed programs: 1376 2020/08/16 17:13:50 executed programs: 1587 2020/08/16 17:13:55 executed programs: 1785 2020/08/16 17:14:00 executed programs: 1991 2020/08/16 17:14:05 executed programs: 2179 2020/08/16 17:14:10 executed programs: 2382 2020/08/16 17:14:15 executed programs: 2599 2020/08/16 17:14:20 executed programs: 2794 2020/08/16 17:14:25 executed programs: 2975 2020/08/16 17:14:30 executed programs: 3169 2020/08/16 17:14:35 executed programs: 3356 2020/08/16 17:14:40 executed programs: 3553 2020/08/16 17:14:45 executed programs: 3751 2020/08/16 17:14:50 executed programs: 3950 2020/08/16 17:14:55 executed programs: 4134 2020/08/16 17:15:00 executed programs: 4319 2020/08/16 17:15:05 executed programs: 4511 2020/08/16 17:15:10 executed programs: 4689 2020/08/16 17:15:15 executed programs: 4880 [ 1173.969525][ T26] Bluetooth: hci0: command 0x0406 tx timeout 2020/08/16 17:15:20 executed programs: 5068 2020/08/16 17:15:25 executed programs: 5254 2020/08/16 17:15:30 executed programs: 5448 2020/08/16 17:15:35 executed programs: 5649 2020/08/16 17:15:40 executed programs: 5833 2020/08/16 17:15:45 executed programs: 6011 2020/08/16 17:15:50 executed programs: 6195 2020/08/16 17:15:55 executed programs: 6376 2020/08/16 17:16:00 executed programs: 6560 2020/08/16 17:16:05 executed programs: 6765 2020/08/16 17:16:10 executed programs: 7002 2020/08/16 17:16:15 executed programs: 7346 2020/08/16 17:16:20 executed programs: 7682 2020/08/16 17:16:25 executed programs: 8023 2020/08/16 17:16:30 executed programs: 8356 2020/08/16 17:16:35 executed programs: 8730 2020/08/16 17:16:40 executed programs: 9066 2020/08/16 17:16:45 executed programs: 9410 [ 1263.401021][ T0] NOHZ: local_softirq_pending 08 2020/08/16 17:16:50 executed programs: 9782 2020/08/16 17:16:55 executed programs: 10127 2020/08/16 17:17:00 executed programs: 10460 2020/08/16 17:17:05 executed programs: 10830 2020/08/16 17:17:10 executed programs: 11158 2020/08/16 17:17:15 executed programs: 11495 2020/08/16 17:17:20 executed programs: 11825 2020/08/16 17:17:25 executed programs: 12161 2020/08/16 17:17:30 executed programs: 12490 2020/08/16 17:17:35 executed programs: 12877 2020/08/16 17:17:41 executed programs: 13223 2020/08/16 17:17:46 executed programs: 13558 2020/08/16 17:17:51 executed programs: 13887 2020/08/16 17:17:56 executed programs: 14268 2020/08/16 17:18:01 executed programs: 14609 2020/08/16 17:18:06 executed programs: 14978 [ 1345.321893][ T0] NOHZ: local_softirq_pending 08 2020/08/16 17:18:11 executed programs: 15331 2020/08/16 17:18:16 executed programs: 15663 [ 1353.273387][T25292] mm ffff88809e336f00 mmap ffff88809f20d358 seqnum 0 task_size 140737488351232 [ 1353.273387][T25292] get_unmapped_area ffffffff8129caa0 [ 1353.273387][T25292] mmap_base 140321960034304 mmap_legacy_base 47310835134464 highest_vm_end 140728406458368 [ 1353.273387][T25292] pgd ffff88805f17c000 mm_users 2 mm_count 2 pgtables_bytes 65536 map_count 17 [ 1353.273387][T25292] hiwater_rss 18 hiwater_vm 38f7 total_vm 3918 locked_vm 0 [ 1353.273387][T25292] pinned_vm 0 data_vm 23ab exec_vm 144 stack_vm 21 [ 1353.273387][T25292] start_code 400000 end_code 541f9b start_data 742ea8 end_data 74aa50 [ 1353.273387][T25292] start_brk 28b1000 brk 28d3000 start_stack 7ffde2abfc20 [ 1353.273387][T25292] arg_start 7ffde2abfe9d arg_end 7ffde2abfeb2 env_start 7ffde2abfeb2 env_end 7ffde2abffe3 [ 1353.273387][T25292] binfmt ffffffff89d6d3a0 flags cd core_state ffffc9000abdfbf8 [ 1353.273387][T25292] ioctx_table 0000000000000000 [ 1353.273387][T25292] owner ffff88805f368100 exe_file ffff8880a28fd540 [ 1353.363786][T25292] ------------[ cut here ]------------ [ 1353.369268][T25292] kernel BUG at mm/khugepaged.c:469! [ 1353.374729][T25292] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 1353.380804][T25292] CPU: 1 PID: 25292 Comm: syz-executor.0 Not tainted 5.8.0-next-20200814-syzkaller #0 [ 1353.390355][T25292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1353.400643][T25292] RIP: 0010:__khugepaged_enter+0x306/0x3d0 [ 1353.406445][T25292] Code: e4 49 81 fe e0 bd d2 89 74 2a e8 a5 59 bb ff 44 89 e0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 e8 92 59 bb ff 48 89 ef e8 1a be e9 ff <0f> 0b 41 bc f4 ff ff ff eb d6 e8 7b 59 bb ff 31 c9 ba 01 00 00 00 [ 1353.426508][T25292] RSP: 0000:ffffc9000abbfcc0 EFLAGS: 00010286 [ 1353.432563][T25292] RAX: 0000000000000367 RBX: 0000000000000002 RCX: 0000000000000000 [ 1353.440549][T25292] RDX: ffff88805f368100 RSI: ffffffff815da8f7 RDI: fffff52001577f37 [ 1353.448504][T25292] RBP: ffff88809e336f00 R08: 0000000000000367 R09: ffff8880ae7318e7 [ 1353.456469][T25292] R10: 0000000000000000 R11: 000000000009fb38 R12: ffff8880a97ceb00 [ 1353.464431][T25292] R13: ffff88809e336f5c R14: 0000000020000000 R15: ffffc9000abbfdf8 [ 1353.472392][T25292] FS: 00000000028b1940(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 1353.481335][T25292] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1353.487905][T25292] CR2: 0000000020000180 CR3: 000000005f17c000 CR4: 00000000001506e0 [ 1353.496832][T25292] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1353.504790][T25292] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1353.512768][T25292] Call Trace: [ 1353.516062][T25292] do_huge_pmd_anonymous_page+0xaa1/0x2230 [ 1353.521938][T25292] handle_mm_fault+0x36dd/0x45e0 [ 1353.526864][T25292] ? apply_to_existing_page_range+0x40/0x40 [ 1353.532749][T25292] ? vmacache_update+0xce/0x140 [ 1353.537656][T25292] do_user_addr_fault+0x598/0xbf0 [ 1353.542724][T25292] exc_page_fault+0xa8/0x160 [ 1353.548153][T25292] ? asm_exc_page_fault+0x8/0x30 [ 1353.553106][T25292] asm_exc_page_fault+0x1e/0x30 [ 1353.557947][T25292] RIP: 0033:0x4006ec [ 1353.561830][T25292] Code: 01 e9 c9 00 00 00 48 8b 44 24 10 48 0b 44 24 28 be 08 00 00 00 48 8b 14 24 75 17 48 8b 7c 24 20 e8 d9 5e 00 00 48 8b 4c 24 08 <48> 89 01 e9 9d 00 00 00 48 8b 44 24 08 48 8b 38 e8 bf 5e 00 00 8a [ 1353.581441][T25292] RSP: 002b:00007ffde2abf5c0 EFLAGS: 00010206 [ 1353.587508][T25292] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000020000180 [ 1353.595462][T25292] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000000 [ 1353.603415][T25292] RBP: 0000000001190090 R08: 0000000000000000 R09: 0000000000000000 [ 1353.611376][T25292] R10: 00007ffde2abf6e0 R11: 0000000000000246 R12: 0000000001190098 [ 1353.619372][T25292] R13: 000000000014a66b R14: fffffffffffffffe R15: 000000000118cf4c [ 1353.627355][T25292] Modules linked in: [ 1353.631407][T25292] ---[ end trace ce2a390548827254 ]--- [ 1353.636903][T25292] RIP: 0010:__khugepaged_enter+0x306/0x3d0 [ 1353.642788][T25292] Code: e4 49 81 fe e0 bd d2 89 74 2a e8 a5 59 bb ff 44 89 e0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 e8 92 59 bb ff 48 89 ef e8 1a be e9 ff <0f> 0b 41 bc f4 ff ff ff eb d6 e8 7b 59 bb ff 31 c9 ba 01 00 00 00 [ 1353.662522][T25292] RSP: 0000:ffffc9000abbfcc0 EFLAGS: 00010286 [ 1353.668601][T25292] RAX: 0000000000000367 RBX: 0000000000000002 RCX: 0000000000000000 [ 1353.676629][T25292] RDX: ffff88805f368100 RSI: ffffffff815da8f7 RDI: fffff52001577f37 [ 1353.684693][T25292] RBP: ffff88809e336f00 R08: 0000000000000367 R09: ffff8880ae7318e7 [ 1353.692698][T25292] R10: 0000000000000000 R11: 000000000009fb38 R12: ffff8880a97ceb00 [ 1353.700735][T25292] R13: ffff88809e336f5c R14: 0000000020000000 R15: ffffc9000abbfdf8 [ 1353.708727][T25292] FS: 00000000028b1940(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 1353.717692][T25292] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1353.724342][T25292] CR2: 0000000020000180 CR3: 000000005f17c000 CR4: 00000000001506e0 [ 1353.732378][T25292] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1353.740415][T25292] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1353.748389][T25292] Kernel panic - not syncing: Fatal exception [ 1353.755662][T25292] Kernel Offset: disabled [ 1353.759984][T25292] Rebooting in 86400 seconds..