[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.183' (ECDSA) to the list of known hosts. 2020/10/09 13:05:04 parsed 1 programs 2020/10/09 13:05:04 executed programs: 0 syzkaller login: [ 237.448644] audit: type=1400 audit(1602248704.350:8): avc: denied { execmem } for pid=6382 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 238.592361] IPVS: ftp: loaded support on port[0] = 21 [ 238.672444] chnl_net:caif_netlink_parms(): no params data found [ 238.773794] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.780569] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.787530] device bridge_slave_0 entered promiscuous mode [ 238.795732] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.802921] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.810394] device bridge_slave_1 entered promiscuous mode [ 238.826805] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 238.835514] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 238.854022] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 238.861209] team0: Port device team_slave_0 added [ 238.866611] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 238.874181] team0: Port device team_slave_1 added [ 238.888545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.894902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.920155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.931788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.938012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.964718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.975414] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 238.983103] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 239.001461] device hsr_slave_0 entered promiscuous mode [ 239.007046] device hsr_slave_1 entered promiscuous mode [ 239.013572] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 239.020755] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 239.082996] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.089450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.096203] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.102610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.132273] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 239.138379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.147226] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 239.155590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 239.164647] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.181845] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.192433] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 239.198483] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.207143] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 239.214994] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.221373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.230566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 239.238078] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.244466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.260637] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 239.268217] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 239.276513] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 239.289085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 239.296465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 239.306599] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 239.312694] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 239.324712] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 239.333000] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 239.340065] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 239.350631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.402973] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 239.412241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 239.443000] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 239.450906] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 239.457298] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 239.466929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 239.475610] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 239.482540] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 239.491161] device veth0_vlan entered promiscuous mode [ 239.500706] device veth1_vlan entered promiscuous mode [ 239.507250] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 239.516105] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 239.526885] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 239.536359] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 239.543928] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 239.551639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 239.561590] device veth0_macvtap entered promiscuous mode [ 239.567578] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 239.575358] device veth1_macvtap entered promiscuous mode [ 239.583894] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 239.592868] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 239.602386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.609583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 239.617487] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 239.627100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.633980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 239.659119] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 239.744077] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 239.760109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.767310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.781137] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 239.787947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.796097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.803547] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 239.811851] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 240.599712] Bluetooth: hci0 command 0x0409 tx timeout [ 240.856366] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 240.856369] Modules linked in: [ 240.856380] CPU: 1 PID: 6383 Comm: syz-executor.0 Not tainted 4.14.198-syzkaller #0 [ 240.856384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 240.856389] task: ffff88809accc080 task.stack: ffff888097a48000 [ 240.856403] RIP: 0010:do_syscall_64+0x6f/0x640 [ 240.856406] RSP: 0018:ffff888097a4ff00 EFLAGS: 00010082 [ 240.856413] RAX: dffffc0000000000 RBX: 00000000000000e4 RCX: 0000000000000000 [ 240.856417] RDX: 1ffffffff0fa2d23 RSI: 0000000000000001 RDI: ffff88809accc904 [ 240.856422] RBP: ffff888097a4ff58 R08: 0000000000000000 R09: 0000000000000000 [ 240.856425] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff87d16918 [ 240.856430] R13: ffff888097a4ffd0 R14: ffff88809accc080 R15: 0000000000000000 [ 240.856436] FS: 0000000002808940(0000) GS:ffff8880aeb00000(0000) knlGS:0000000000000000 [ 240.856440] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 240.856445] CR2: 0000000001188080 CR3: 000000009f8ec000 CR4: 00000000001406e0 [ 240.856452] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 240.856456] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 240.856458] Call Trace: [ 240.856523] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 240.856532] RIP: 0033:0x460c8a [ 240.981399] RSP: 002b:00007ffed64c7908 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4 [ 240.981408] RAX: ffffffffffffffda RBX: 000000000003acd5 RCX: 0000000000460c8a [ 240.981411] RDX: 0000000000000000 RSI: 00007ffed64c7910 RDI: 0000000000000001 [ 240.981415] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000002808940 [ 240.981418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 240.981421] R13: 00007ffed64c7970 R14: 000000000003aca3 R15: 00007ffed64c7980 [ 240.981429] Code: 8b 5d 78 e8 34 8c 46 00 4c 89 e2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 52 04 00 00 48 83 3d 19 fb d0 06 00 <0f> 00 70 07 77 00 e8 06 29 5b 00 fb 66 0f 1f 44 00 00 48 b8 00 [ 240.981515] RIP: do_syscall_64+0x6f/0x640 RSP: ffff888097a4ff00 [ 240.981528] ---[ end trace 3e38ba637253157a ]--- [ 240.981533] Kernel panic - not syncing: Fatal exception [ 240.981552] invalid opcode: 0000 [#2] PREEMPT SMP KASAN [ 240.981557] Modules linked in: [ 240.981568] CPU: 0 PID: 6680 Comm: syz-executor.0 Tainted: G D 4.14.198-syzkaller #0 [ 240.981572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 240.981577] task: ffff888092b9a600 task.stack: ffff888091f90000 [ 240.981585] RIP: 0010:do_syscall_64+0x6f/0x640 [ 240.981589] RSP: 0018:ffff888091f97f00 EFLAGS: 00010082 [ 240.981595] RAX: dffffc0000000000 RBX: 00000000000000e4 RCX: 1ffffffff1027c74 [ 240.981600] RDX: 1ffffffff0fa2d23 RSI: 00007ffed64c7760 RDI: ffffffff81006ddc [ 240.981604] RBP: ffff888091f97f58 R08: 0000000000000000 R09: 0000000000000000 [ 240.981608] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff87d16918 [ 240.981612] R13: ffff888091f97fd0 R14: ffff888092b9a600 R15: 0000000000000000 [ 240.981619] FS: 0000000002808940(0000) GS:ffff8880aea00000(0000) knlGS:0000000000000000 [ 240.981623] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 240.981628] CR2: 000000000118c000 CR3: 0000000093586000 CR4: 00000000001406f0 [ 240.981636] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 240.981640] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 240.981642] Call Trace: [ 240.981665] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 240.981671] RIP: 0033:0x460c8a [ 240.981675] RSP: 002b:00007ffed64c7758 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4 [ 240.981682] RAX: ffffffffffffffda RBX: 000000000000002d RCX: 0000000000460c8a [ 240.981686] RDX: 0000000000000000 RSI: 00007ffed64c7760 RDI: 0000000000000001 [ 240.981690] RBP: 000000000118bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 240.981695] R10: 00007ffed64c7860 R11: 0000000000000246 R12: 000000000003ad01 [ 240.981699] R13: 000000000003acd4 R14: 00000000000003e8 R15: 000000000118bfd4 [ 240.981707] Code: 8b 5d 78 e8 34 8c 46 00 4c 89 e2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 52 04 00 00 48 83 3d 19 fb d0 06 00 <0f> 00 70 07 77 00 e8 06 29 5b 00 fb 66 0f 1f 44 00 00 48 b8 00 [ 240.981857] RIP: do_syscall_64+0x6f/0x640 RSP: ffff888091f97f00 [ 240.981861] ---[ end trace 3e38ba637253157b ]--- [ 242.068564] Shutting down cpus with NMI [ 242.069752] Kernel Offset: disabled [ 242.357514] Rebooting in 86400 seconds..