[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.60' (ECDSA) to the list of known hosts. 2020/08/16 22:16:37 parsed 1 programs 2020/08/16 22:16:38 executed programs: 0 syzkaller login: [ 147.660993][ T6855] IPVS: ftp: loaded support on port[0] = 21 [ 147.804911][ T6855] chnl_net:caif_netlink_parms(): no params data found [ 147.866037][ T6855] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.876090][ T6855] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.885359][ T6855] device bridge_slave_0 entered promiscuous mode [ 147.894766][ T6855] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.901940][ T6855] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.910062][ T6855] device bridge_slave_1 entered promiscuous mode [ 147.929810][ T6855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.940931][ T6855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.963905][ T6855] team0: Port device team_slave_0 added [ 147.971142][ T6855] team0: Port device team_slave_1 added [ 147.988618][ T6855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.995972][ T6855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.022087][ T6855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.035041][ T6855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.041983][ T6855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.068909][ T6855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.095716][ T6855] device hsr_slave_0 entered promiscuous mode [ 148.102355][ T6855] device hsr_slave_1 entered promiscuous mode [ 148.191729][ T6855] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 148.202876][ T6855] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 148.213314][ T6855] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 148.222138][ T6855] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 148.247474][ T6855] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.254643][ T6855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.262329][ T6855] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.269456][ T6855] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.314082][ T6855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.330358][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 148.344607][ T17] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.354381][ T17] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.364091][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 148.378481][ T6855] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.391297][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 148.400334][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.407562][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.425503][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 148.434763][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.441808][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.465216][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 148.474827][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 148.490962][ T6855] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 148.503384][ T6855] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 148.515544][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 148.524618][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 148.533557][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 148.542850][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 148.560348][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 148.568455][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 148.580704][ T6855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.602866][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 148.624619][ T7075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 148.633859][ T7075] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 148.641511][ T7075] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 148.651169][ T6855] device veth0_vlan entered promiscuous mode [ 148.664558][ T6855] device veth1_vlan entered promiscuous mode [ 148.686382][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 148.694675][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 148.703973][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 148.714951][ T6855] device veth0_macvtap entered promiscuous mode [ 148.726315][ T6855] device veth1_macvtap entered promiscuous mode [ 148.745293][ T6855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.753981][ T7075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 148.764137][ T7075] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 148.775840][ T6855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.783584][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 148.792049][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 148.806198][ T6855] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.815347][ T6855] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.825519][ T6855] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.834589][ T6855] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.683607][ T7076] Bluetooth: hci0: command 0x0409 tx timeout 2020/08/16 22:16:43 executed programs: 76 [ 151.763829][ T7076] Bluetooth: hci0: command 0x041b tx timeout [ 153.842532][ T7075] Bluetooth: hci0: command 0x040f tx timeout [ 155.922251][ T7075] Bluetooth: hci0: command 0x0419 tx timeout 2020/08/16 22:16:48 executed programs: 230 2020/08/16 22:16:53 executed programs: 378 2020/08/16 22:16:58 executed programs: 522 2020/08/16 22:17:03 executed programs: 758 2020/08/16 22:17:08 executed programs: 1137 [ 178.642729][ T0] NOHZ: local_softirq_pending 08 2020/08/16 22:17:13 executed programs: 1487 2020/08/16 22:17:18 executed programs: 1846 2020/08/16 22:17:23 executed programs: 2213 2020/08/16 22:17:28 executed programs: 2578 2020/08/16 22:17:33 executed programs: 2953 2020/08/16 22:17:38 executed programs: 3328 2020/08/16 22:17:43 executed programs: 3710 [ 214.501557][T20495] mm ffff8880a9592dc0 mmap ffff888090a40c60 seqnum 0 task_size 140737488351232 [ 214.501557][T20495] get_unmapped_area ffffffff8129caa0 [ 214.501557][T20495] mmap_base 140561563619328 mmap_legacy_base 47071231549440 highest_vm_end 140733187506176 [ 214.501557][T20495] pgd ffff88809cd19000 mm_users 2 mm_count 2 pgtables_bytes 65536 map_count 17 [ 214.501557][T20495] hiwater_rss 19 hiwater_vm 38f7 total_vm 3918 locked_vm 0 [ 214.501557][T20495] pinned_vm 0 data_vm 23ab exec_vm 144 stack_vm 21 [ 214.501557][T20495] start_code 400000 end_code 541f9b start_data 742ea8 end_data 74aa50 [ 214.501557][T20495] start_brk 1c44000 brk 1c66000 start_stack 7ffeffa52500 [ 214.501557][T20495] arg_start 7ffeffa53e9e arg_end 7ffeffa53eb3 env_start 7ffeffa53eb3 env_end 7ffeffa53fe3 [ 214.501557][T20495] binfmt ffffffff89d6d3a0 flags cd core_state ffffc90008db7bf8 [ 214.501557][T20495] ioctx_table 0000000000000000 [ 214.501557][T20495] owner ffff88809dc1a200 exe_file ffff88809f5beac0 [ 214.592495][T20495] ------------[ cut here ]------------ [ 214.597958][T20495] kernel BUG at mm/khugepaged.c:469! [ 214.606275][T20495] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 214.612367][T20495] CPU: 0 PID: 20495 Comm: syz-executor.0 Not tainted 5.8.0-next-20200814-syzkaller #0 [ 214.621897][T20495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 214.631953][T20495] RIP: 0010:__khugepaged_enter+0x306/0x3d0 [ 214.637916][T20495] Code: e4 49 81 fe e0 bd d2 89 74 2a e8 a5 59 bb ff 44 89 e0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 e8 92 59 bb ff 48 89 ef e8 1a be e9 ff <0f> 0b 41 bc f4 ff ff ff eb d6 e8 7b 59 bb ff 31 c9 ba 01 00 00 00 [ 214.657505][T20495] RSP: 0000:ffffc90008f6fcc0 EFLAGS: 00010286 [ 214.663555][T20495] RAX: 0000000000000367 RBX: 0000000000000002 RCX: 0000000000000000 [ 214.671516][T20495] RDX: ffff88809dc1a200 RSI: ffffffff815da8f7 RDI: fffff520011edf37 [ 214.679470][T20495] RBP: ffff8880a9592dc0 R08: 0000000000000367 R09: ffff8880ae6318e7 [ 214.687434][T20495] R10: 0000000000000000 R11: 000000000009e018 R12: ffff8880a6b930b0 [ 214.695869][T20495] R13: ffff8880a9592e1c R14: 0000000020000000 R15: ffffc90008f6fdf8 [ 214.703824][T20495] FS: 0000000001c44940(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 214.712738][T20495] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 214.719304][T20495] CR2: 0000000020000100 CR3: 000000009cd19000 CR4: 00000000001506f0 [ 214.727254][T20495] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 214.735204][T20495] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 214.743150][T20495] Call Trace: [ 214.746425][T20495] do_huge_pmd_anonymous_page+0xaa1/0x2230 [ 214.752220][T20495] handle_mm_fault+0x36dd/0x45e0 [ 214.757141][T20495] ? apply_to_existing_page_range+0x40/0x40 [ 214.763011][T20495] ? vmacache_update+0xce/0x140 [ 214.767837][T20495] do_user_addr_fault+0x598/0xbf0 [ 214.772969][T20495] exc_page_fault+0xa8/0x160 [ 214.777541][T20495] ? asm_exc_page_fault+0x8/0x30 [ 214.782538][T20495] asm_exc_page_fault+0x1e/0x30 [ 214.787361][T20495] RIP: 0033:0x40066c [ 214.791233][T20495] Code: 06 e9 49 01 00 00 48 8b 44 24 10 48 0b 44 24 28 75 1f 48 8b 14 24 48 8b 7c 24 20 be 04 00 00 00 e8 59 5f 00 00 48 8b 74 24 08 <89> 06 e9 1e 01 00 00 48 8b 44 24 08 48 8b 14 24 be 04 00 00 00 8b [ 214.810814][T20495] RSP: 002b:00007ffeffa51ea0 EFLAGS: 00010202 [ 214.816946][T20495] RAX: ffffffffffffffff RBX: 0000000000000000 RCX: 0000000000000000 [ 214.824897][T20495] RDX: 0000000000000000 RSI: 0000000020000100 RDI: ffffffffffffffff [ 214.832847][T20495] RBP: 0000000001190090 R08: 0000000000000000 R09: 0000000000000000 [ 214.840985][T20495] R10: 00007ffeffa51fc0 R11: 0000000000000246 R12: 0000000001190098 [ 214.848932][T20495] R13: 0000000000034621 R14: fffffffffffffffe R15: 000000000118cf4c [ 214.856880][T20495] Modules linked in: [ 214.868484][T20495] ---[ end trace ced96f95e3db19f6 ]--- [ 214.874022][T20495] RIP: 0010:__khugepaged_enter+0x306/0x3d0 [ 214.879813][T20495] Code: e4 49 81 fe e0 bd d2 89 74 2a e8 a5 59 bb ff 44 89 e0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 e8 92 59 bb ff 48 89 ef e8 1a be e9 ff <0f> 0b 41 bc f4 ff ff ff eb d6 e8 7b 59 bb ff 31 c9 ba 01 00 00 00 [ 214.900210][T20495] RSP: 0000:ffffc90008f6fcc0 EFLAGS: 00010286 [ 214.906413][T20495] RAX: 0000000000000367 RBX: 0000000000000002 RCX: 0000000000000000 [ 214.915149][T20495] RDX: ffff88809dc1a200 RSI: ffffffff815da8f7 RDI: fffff520011edf37 [ 214.923214][T20495] RBP: ffff8880a9592dc0 R08: 0000000000000367 R09: ffff8880ae6318e7 [ 214.931468][T20495] R10: 0000000000000000 R11: 000000000009e018 R12: ffff8880a6b930b0 [ 214.939505][T20495] R13: ffff8880a9592e1c R14: 0000000020000000 R15: ffffc90008f6fdf8 [ 214.947629][T20495] FS: 0000000001c44940(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 214.956857][T20495] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 214.963493][T20495] CR2: 00007f81f403f048 CR3: 000000009cd19000 CR4: 00000000001506e0 [ 214.971601][T20495] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 214.979614][T20495] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 214.987788][T20495] Kernel panic - not syncing: Fatal exception [ 214.995405][T20495] Kernel Offset: disabled [ 214.999734][T20495] Rebooting in 86400 seconds..