[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.110' (ECDSA) to the list of known hosts. 2020/04/25 17:13:26 parsed 1 programs 2020/04/25 17:13:28 executed programs: 0 syzkaller login: [ 36.795347] audit: type=1400 audit(1587834808.918:8): avc: denied { execmem } for pid=6356 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 37.033822] IPVS: ftp: loaded support on port[0] = 21 [ 37.887356] chnl_net:caif_netlink_parms(): no params data found [ 38.003235] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.010768] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.020635] device bridge_slave_0 entered promiscuous mode [ 38.028891] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.036604] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.044182] device bridge_slave_1 entered promiscuous mode [ 38.061863] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 38.074235] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 38.092786] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 38.101020] team0: Port device team_slave_0 added [ 38.108670] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 38.117283] team0: Port device team_slave_1 added [ 38.133603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.141313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.172360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.185099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.192497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.222341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.233626] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 38.241746] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 38.294762] device hsr_slave_0 entered promiscuous mode [ 38.342263] device hsr_slave_1 entered promiscuous mode [ 38.382784] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 38.391089] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 38.457782] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.464483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.471311] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.477848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.509949] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 38.516596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.525686] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 38.535496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.555307] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.564524] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.577497] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 38.584430] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.594568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.605904] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.612541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.623672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.632820] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.640899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.657961] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 38.666494] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 38.682054] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 38.691022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.699883] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.709963] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 38.716869] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 38.731317] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 38.740536] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 38.748183] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 38.760408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.816199] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 38.828048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.857706] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 38.868264] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 38.876161] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 38.888154] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 38.912796] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 38.920110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 38.928692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.938064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.946192] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.956271] device veth0_vlan entered promiscuous mode [ 38.966071] device veth1_vlan entered promiscuous mode [ 38.979310] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 38.989893] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 39.005021] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 39.014996] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 39.022415] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 39.029742] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 39.037275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 39.045786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.056033] device veth0_macvtap entered promiscuous mode [ 39.063436] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 39.073364] device veth1_macvtap entered promiscuous mode [ 39.079463] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 39.088468] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 39.100459] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 39.110950] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 39.119052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.126619] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 39.134142] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 39.141744] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 39.150029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.162507] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 39.169855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.179296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 39.198679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2020/04/25 17:13:33 result: hanged=false err=executor 0: exit status 67 bad argument type 18446744073709551615result idx -4323460353628106753 overflows kMaxCommands (errno 0) child failed (errno 0) loop exited with status 67 bad argument type 18446744073709551615result idx -4323460353628106753 overflows kMaxCommands (errno 0) child failed (errno 0) loop exited with status 67 [ 41.074000] ------------[ cut here ]------------ [ 41.078926] WARNING: CPU: 0 PID: 6603 at kernel/cgroup/cgroup.c:2936 cgroup_apply_control_disable+0x39d/0x470 [ 41.088990] Kernel panic - not syncing: panic_on_warn set ... [ 41.088990] [ 41.096526] CPU: 0 PID: 6603 Comm: syz-executor.0 Not tainted 4.14.177-syzkaller #0 [ 41.104299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 41.113642] Call Trace: [ 41.116213] dump_stack+0x13e/0x194 [ 41.119819] panic+0x1f9/0x42d [ 41.122989] ? add_taint.cold+0x16/0x16 [ 41.126942] ? cgroup_apply_control_disable+0x39d/0x470 [ 41.132300] ? cgroup_apply_control_disable+0x39d/0x470 [ 41.138070] __warn.cold+0x2f/0x30 [ 41.142377] ? ist_end_non_atomic+0x10/0x10 [ 41.146673] ? cgroup_apply_control_disable+0x39d/0x470 [ 41.152015] report_bug+0x20a/0x248 [ 41.155967] do_error_trap+0x195/0x2d0 [ 41.159830] ? math_error+0x2d0/0x2d0 [ 41.163634] ? mark_held_locks+0xa6/0xf0 [ 41.167674] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 41.172847] invalid_op+0x1b/0x40 [ 41.176277] RIP: 0010:cgroup_apply_control_disable+0x39d/0x470 [ 41.182318] RSP: 0018:ffff8880925cf9b8 EFLAGS: 00010297 [ 41.188018] RAX: ffff8880947bc4c0 RBX: dffffc0000000000 RCX: 1ffffffff10279b4 [ 41.195263] RDX: 0000000000000000 RSI: ffffffff87da3440 RDI: ffff8880a89b8ad8 [ 41.202509] RBP: ffff8880a89b8ac0 R08: 0000000000000001 R09: 0000000000000000 [ 41.210710] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff87da3260 [ 41.217962] R13: ffffffff87ddade0 R14: ffff888094a66dc0 R15: ffff8880aa3d7840 [ 41.225394] ? cgroup_apply_control_disable+0x39d/0x470 [ 41.230736] rebind_subsystems+0x364/0xa10 [ 41.234953] ? cgroup_apply_control_disable+0x470/0x470 [ 41.240303] ? kernfs_create_root+0x28d/0x370 [ 41.244774] cgroup_setup_root+0x3b3/0x980 [ 41.248985] ? rebind_subsystems+0xa10/0xa10 [ 41.253380] cgroup1_mount+0x55f/0xd3e [ 41.257245] ? cgroup1_release_agent+0x250/0x250 [ 41.261987] ? cap_capable+0x1c4/0x230 [ 41.265862] ? security_capable+0x88/0xb0 [ 41.270007] cgroup_mount+0x145/0x8c0 [ 41.273785] ? cgroup_attach_task+0x6c0/0x6c0 [ 41.278260] mount_fs+0x92/0x2a0 [ 41.281605] vfs_kern_mount.part.0+0x5b/0x3c0 [ 41.286076] do_mount+0x3c9/0x24f0 [ 41.289600] ? copy_mount_string+0x40/0x40 [ 41.294701] ? copy_mount_options+0x18c/0x2e0 [ 41.299172] ? copy_mount_options+0x1ec/0x2e0 [ 41.303641] ? copy_mnt_ns+0x8a0/0x8a0 [ 41.307511] SyS_mount+0xa8/0x120 [ 41.310941] ? copy_mnt_ns+0x8a0/0x8a0 [ 41.314807] do_syscall_64+0x1d5/0x640 [ 41.318676] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 41.323841] RIP: 0033:0x45f27a [ 41.327006] RSP: 002b:00007ffd8201e618 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 41.334690] RAX: ffffffffffffffda RBX: 00007ffd8201e670 RCX: 000000000045f27a [ 41.342556] RDX: 00000000004cad1c RSI: 00000000004c1465 RDI: 00000000004c1428 [ 41.349803] RBP: 0000000000000000 R08: 00000000004cf6d0 R09: 000000000000001c [ 41.357048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000418390 [ 41.364293] R13: 00007ffd8201e898 R14: 0000000000000000 R15: 0000000000000000 [ 41.373223] Kernel Offset: disabled [ 41.376905] Rebooting in 86400 seconds..