Warning: Permanently added '10.128.0.233' (ECDSA) to the list of known hosts. 2020/08/13 01:28:47 parsed 1 programs 2020/08/13 01:28:47 executed programs: 0 syzkaller login: [ 146.810323][ T28] audit: type=1400 audit(1597282127.992:8): avc: denied { execmem } for pid=6868 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 147.909885][ T6869] IPVS: ftp: loaded support on port[0] = 21 [ 148.125406][ T6869] chnl_net:caif_netlink_parms(): no params data found [ 148.197111][ T6869] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.206424][ T6869] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.215538][ T6869] device bridge_slave_0 entered promiscuous mode [ 148.224850][ T6869] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.232150][ T6869] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.240852][ T6869] device bridge_slave_1 entered promiscuous mode [ 148.262266][ T6869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.273260][ T6869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.297561][ T6869] team0: Port device team_slave_0 added [ 148.306306][ T6869] team0: Port device team_slave_1 added [ 148.324505][ T6869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.332566][ T6869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.358991][ T6869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.371554][ T6869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.378757][ T6869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.405339][ T6869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.433102][ T6869] device hsr_slave_0 entered promiscuous mode [ 148.439835][ T6869] device hsr_slave_1 entered promiscuous mode [ 148.540773][ T6869] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 148.552101][ T6869] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 148.563201][ T6869] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 148.573626][ T6869] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 148.598896][ T6869] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.606188][ T6869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.614286][ T6869] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.621435][ T6869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.667989][ T6869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.683836][ T2536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 148.694355][ T2536] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.703504][ T2536] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.712047][ T2536] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 148.726254][ T6869] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.739198][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 148.747762][ T2646] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.755003][ T2646] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.767344][ T2536] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 148.776250][ T2536] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.783381][ T2536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.809174][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 148.819553][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 148.828088][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 148.838180][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 148.851722][ T6869] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 148.864038][ T6869] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 148.873181][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 148.893617][ T7088] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 148.901172][ T7088] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 148.916419][ T6869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.935292][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 148.955182][ T7088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 148.964890][ T7088] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 148.973012][ T7088] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 148.985064][ T6869] device veth0_vlan entered promiscuous mode [ 148.999052][ T6869] device veth1_vlan entered promiscuous mode [ 149.022392][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 149.031388][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 149.040729][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 149.052068][ T6869] device veth0_macvtap entered promiscuous mode [ 149.063253][ T6869] device veth1_macvtap entered promiscuous mode [ 149.081493][ T6869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.090501][ T7088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 149.100956][ T7088] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 149.112556][ T6869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.121852][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 149.131133][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 149.144476][ T6869] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.155188][ T6869] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.164231][ T6869] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.173110][ T6869] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.949364][ T2646] Bluetooth: hci0: command 0x0409 tx timeout 2020/08/13 01:28:53 executed programs: 63 [ 152.028423][ T2646] Bluetooth: hci0: command 0x041b tx timeout [ 154.108716][ T17] Bluetooth: hci0: command 0x040f tx timeout [ 156.188158][ T2646] Bluetooth: hci0: command 0x0419 tx timeout 2020/08/13 01:28:58 executed programs: 190 2020/08/13 01:29:03 executed programs: 320 2020/08/13 01:29:08 executed programs: 450 2020/08/13 01:29:13 executed programs: 580 2020/08/13 01:29:18 executed programs: 704 2020/08/13 01:29:23 executed programs: 829 2020/08/13 01:29:28 executed programs: 958 2020/08/13 01:29:33 executed programs: 1087 2020/08/13 01:29:38 executed programs: 1211 [ 198.526954][T13445] mm ffff88809ec9c800 mmap ffff8880a8a83460 seqnum 0 task_size 140737488351232 [ 198.526954][T13445] get_unmapped_area ffffffff8129c980 [ 198.526954][T13445] mmap_base 140461190402048 mmap_legacy_base 47171604766720 highest_vm_end 140727288594432 [ 198.526954][T13445] pgd ffff8880997f8000 mm_users 2 mm_count 2 pgtables_bytes 65536 map_count 17 [ 198.526954][T13445] hiwater_rss 18 hiwater_vm 38f8 total_vm 3919 locked_vm 0 [ 198.526954][T13445] pinned_vm 0 data_vm 23ac exec_vm 144 stack_vm 21 [ 198.526954][T13445] start_code 400000 end_code 541e83 start_data 741ea8 end_data 749a50 [ 198.526954][T13445] start_brk 2563000 brk 2585000 start_stack 7ffda0099050 [ 198.526954][T13445] arg_start 7ffda0099e9d arg_end 7ffda0099eb2 env_start 7ffda0099eb2 env_end 7ffda0099fe3 [ 198.526954][T13445] binfmt ffffffff89cdbcc0 flags cd core_state ffffc90007eafbf8 [ 198.526954][T13445] ioctx_table 0000000000000000 [ 198.526954][T13445] owner ffff888086fe0140 exe_file ffff88809e4a0580 [ 198.622317][T13445] ------------[ cut here ]------------ [ 198.630689][T13445] kernel BUG at mm/khugepaged.c:469! [ 198.636014][T13445] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 198.642071][T13445] CPU: 0 PID: 13445 Comm: syz-executor.0 Not tainted 5.8.0-syzkaller #0 [ 198.652450][T13445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 198.662509][T13445] RIP: 0010:__khugepaged_enter+0x306/0x3d0 [ 198.668312][T13445] Code: e4 49 81 fe 60 aa c9 89 74 2a e8 f5 a1 bb ff 44 89 e0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 e8 e2 a1 bb ff 48 89 ef e8 2a da e9 ff <0f> 0b 41 bc f4 ff ff ff eb d6 e8 cb a1 bb ff 31 c9 ba 01 00 00 00 [ 198.687905][T13445] RSP: 0018:ffffc90007e8fcc0 EFLAGS: 00010286 [ 198.693946][T13445] RAX: 0000000000000367 RBX: 0000000000000002 RCX: 0000000000000000 [ 198.701893][T13445] RDX: ffff888086fe0140 RSI: ffffffff815dbce7 RDI: fffff52000fd1f37 [ 198.709850][T13445] RBP: ffff88809ec9c800 R08: 0000000000000367 R09: ffff8880ae7318e7 [ 198.717800][T13445] R10: 0000000000000000 R11: 0000000000034e58 R12: ffff8880a14e06e0 [ 198.725747][T13445] R13: ffff88809ec9c85c R14: 0000000020000000 R15: ffffc90007e8fdf0 [ 198.733702][T13445] FS: 0000000002563940(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 198.742608][T13445] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 198.749167][T13445] CR2: 0000560d0cb2db30 CR3: 00000000997f8000 CR4: 00000000001506f0 [ 198.757118][T13445] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 198.765093][T13445] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 198.773072][T13445] Call Trace: [ 198.776365][T13445] do_huge_pmd_anonymous_page+0xaa1/0x2230 [ 198.782162][T13445] handle_mm_fault+0x35dd/0x43f0 [ 198.787096][T13445] ? apply_to_existing_page_range+0x40/0x40 [ 198.793003][T13445] ? vmacache_update+0xce/0x140 [ 198.797842][T13445] do_user_addr_fault+0x5a2/0xd00 [ 198.802863][T13445] exc_page_fault+0xa8/0x160 [ 198.807437][T13445] ? asm_exc_page_fault+0x8/0x30 [ 198.812453][T13445] asm_exc_page_fault+0x1e/0x30 [ 198.817280][T13445] RIP: 0033:0x4443d1 [ 198.821150][T13445] Code: 8d 15 b3 81 0d 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 198.840752][T13445] RSP: 002b:00007ffda0098a28 EFLAGS: 00010202 [ 198.846812][T13445] RAX: 0000000020001240 RBX: 0000000000000000 RCX: 0000000000000054 [ 198.854763][T13445] RDX: 0000000000000007 RSI: 00000000011900b0 RDI: 0000000020001240 [ 198.862713][T13445] RBP: 0000000001190090 R08: 0000000000000000 R09: 0000000000000000 [ 198.870661][T13445] R10: 00007ffda0098b10 R11: 0000000000000246 R12: 0000000001190098 [ 198.879711][T13445] R13: 00000000000307b2 R14: fffffffffffffffe R15: 000000000118cf4c [ 198.887671][T13445] Modules linked in: [ 198.892917][T13445] ---[ end trace d64b81d1278548de ]--- [ 198.898454][T13445] RIP: 0010:__khugepaged_enter+0x306/0x3d0 [ 198.904467][T13445] Code: e4 49 81 fe 60 aa c9 89 74 2a e8 f5 a1 bb ff 44 89 e0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 e8 e2 a1 bb ff 48 89 ef e8 2a da e9 ff <0f> 0b 41 bc f4 ff ff ff eb d6 e8 cb a1 bb ff 31 c9 ba 01 00 00 00 [ 198.924356][T13445] RSP: 0018:ffffc90007e8fcc0 EFLAGS: 00010286 [ 198.930471][T13445] RAX: 0000000000000367 RBX: 0000000000000002 RCX: 0000000000000000 [ 198.938504][T13445] RDX: ffff888086fe0140 RSI: ffffffff815dbce7 RDI: fffff52000fd1f37 [ 198.946526][T13445] RBP: ffff88809ec9c800 R08: 0000000000000367 R09: ffff8880ae7318e7 [ 198.954494][T13445] R10: 0000000000000000 R11: 0000000000034e58 R12: ffff8880a14e06e0 [ 198.962512][T13445] R13: ffff88809ec9c85c R14: 0000000020000000 R15: ffffc90007e8fdf0 [ 198.970552][T13445] FS: 0000000002563940(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 198.979534][T13445] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 198.986193][T13445] CR2: 0000560d0cb2db30 CR3: 00000000997f8000 CR4: 00000000001506f0 [ 198.995136][T13445] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 199.003696][T13445] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 199.011742][T13445] Kernel panic - not syncing: Fatal exception [ 199.019482][T13445] Kernel Offset: disabled [ 199.027649][T13445] Rebooting in 86400 seconds..