Warning: Permanently added '10.128.10.5' (ECDSA) to the list of known hosts. 2020/07/07 17:55:43 parsed 1 programs 2020/07/07 17:55:43 executed programs: 0 [ 1041.626624][ T28] audit: type=1400 audit(1594144543.683:8): avc: denied { execmem } for pid=6832 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 1041.658975][ T6833] IPVS: ftp: loaded support on port[0] = 21 [ 1041.764351][ T6833] chnl_net:caif_netlink_parms(): no params data found [ 1041.813641][ T6833] bridge0: port 1(bridge_slave_0) entered blocking state [ 1041.821419][ T6833] bridge0: port 1(bridge_slave_0) entered disabled state [ 1041.830546][ T6833] device bridge_slave_0 entered promiscuous mode [ 1041.839587][ T6833] bridge0: port 2(bridge_slave_1) entered blocking state [ 1041.846696][ T6833] bridge0: port 2(bridge_slave_1) entered disabled state [ 1041.855848][ T6833] device bridge_slave_1 entered promiscuous mode [ 1041.875652][ T6833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1041.886673][ T6833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1041.908143][ T6833] team0: Port device team_slave_0 added [ 1041.915584][ T6833] team0: Port device team_slave_1 added [ 1041.933674][ T6833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1041.940688][ T6833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1041.967429][ T6833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1041.980261][ T6833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1041.987204][ T6833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1042.013951][ T6833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1042.071494][ T6833] device hsr_slave_0 entered promiscuous mode [ 1042.118589][ T6833] device hsr_slave_1 entered promiscuous mode [ 1042.263304][ T6833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1042.311498][ T6833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1042.370982][ T6833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1042.410806][ T6833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1042.475833][ T6833] bridge0: port 2(bridge_slave_1) entered blocking state [ 1042.483052][ T6833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1042.491182][ T6833] bridge0: port 1(bridge_slave_0) entered blocking state [ 1042.498343][ T6833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1042.544280][ T6833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1042.559560][ T6963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1042.571590][ T6963] bridge0: port 1(bridge_slave_0) entered disabled state [ 1042.580280][ T6963] bridge0: port 2(bridge_slave_1) entered disabled state [ 1042.588090][ T6963] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1042.602785][ T6833] 8021q: adding VLAN 0 to HW filter on device team0 [ 1042.614229][ T6801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1042.623576][ T6801] bridge0: port 1(bridge_slave_0) entered blocking state [ 1042.630707][ T6801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1042.643873][ T6963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1042.652678][ T6963] bridge0: port 2(bridge_slave_1) entered blocking state [ 1042.659793][ T6963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1042.684002][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1042.693268][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1042.702182][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1042.717930][ T6833] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1042.728778][ T6833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1042.741300][ T6801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1042.751124][ T6801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1042.759957][ T6801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1042.778855][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1042.787486][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1042.802390][ T6833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1042.821484][ T6801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1042.830172][ T6801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1042.855252][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1042.864918][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1042.875951][ T6833] device veth0_vlan entered promiscuous mode [ 1042.883043][ T6963] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1042.891241][ T6963] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1042.905149][ T6833] device veth1_vlan entered promiscuous mode [ 1042.926149][ T6801] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1042.935090][ T6801] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1042.943782][ T6801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1042.952811][ T6801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1042.963666][ T6833] device veth0_macvtap entered promiscuous mode [ 1042.974320][ T6833] device veth1_macvtap entered promiscuous mode [ 1042.991371][ T6833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1043.000382][ T6801] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1043.013954][ T6801] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1043.023213][ T6801] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1043.033223][ T6801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1043.045594][ T6833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1043.054464][ T6963] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1043.063491][ T6963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1043.577325][ T7055] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 1043.577336][ T7055] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1043.577349][ T7055] CPU: 0 PID: 7055 Comm: syz-executor.0 Not tainted 5.8.0-rc3-syzkaller #0 [ 1043.577356][ T7055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1043.577494][ T7055] RIP: 0010:__switch_to_asm+0x0/0x40 [ 1043.577508][ T7055] Code: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 <00> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1043.577515][ T7055] RSP: 0018:ffffc90001fdf328 EFLAGS: 00010046 [ 1043.577525][ T7055] RAX: dffffc0000000000 RBX: ffff8880ae635e18 RCX: 0000000000000000 [ 1043.577533][ T7055] RDX: 1ffff11015cc6bc2 RSI: ffff8880a02402c0 RDI: ffff8880a451a300 [ 1043.577541][ T7055] RBP: ffffc90001fdf3f8 R08: 0000000000000001 R09: ffff8880a451abc8 [ 1043.577548][ T7055] R10: fffffbfff155cb29 R11: 00000000fa83b2da R12: ffff8880ae635e00 [ 1043.577556][ T7055] R13: ffff8880a451a300 R14: ffff8880a02402c0 R15: ffff8880a451a730 [ 1043.577567][ T7055] FS: 00007fedca8fe700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 1043.577575][ T7055] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1043.577582][ T7055] CR2: 000000000078c000 CR3: 000000009e138000 CR4: 00000000001406f0 [ 1043.577593][ T7055] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1043.577599][ T7055] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1043.577603][ T7055] Call Trace: [ 1043.577683][ T7055] __schedule+0x8e1/0x1eb0 [ 1043.577702][ T7055] ? io_schedule_timeout+0x140/0x140 [ 1043.577747][ T7055] ? sched_clock+0x2a/0x40 [ 1043.577761][ T7055] ? preempt_schedule_irq+0x88/0x150 [ 1043.577797][ T7055] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1043.577813][ T7055] preempt_schedule_irq+0xb0/0x150 [ 1043.577852][ T7055] idtentry_exit_cond_rcu+0xc0/0xf0 [ 1043.577890][ T7055] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1043.578005][ T7055] RIP: 0010:bitfill_aligned+0x119/0x200 [ 1043.578016][ T7055] Code: 3d b2 b1 fd 41 83 fc 07 76 5f 4c 89 ed e8 af b5 b1 fd 48 89 5d 00 48 89 5d 08 48 89 5d 10 48 89 5d 18 48 89 5d 20 48 89 5d 28 <48> 8d 45 38 48 89 5d 30 48 83 c5 40 48 89 18 41 83 ef 08 bf 07 00 [ 1043.578023][ T7055] RSP: 0018:ffffc90001fdf4f0 EFLAGS: 00000293 [ 1043.578032][ T7055] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff83c201e9 [ 1043.578039][ T7055] RDX: ffff8880a451a300 RSI: ffffffff83c201b1 RDI: 0000000000000005 [ 1043.578047][ T7055] RBP: ffff888001226eb8 R08: 0000000000001540 R09: 0000000000000040 [ 1043.578054][ T7055] R10: 0000000000000007 R11: 0000000000000000 R12: 0000000000000055 [ 1043.578061][ T7055] R13: ffff888001226e78 R14: 0000000000000000 R15: 000000000000004d [ 1043.578078][ T7055] ? bitfill_aligned+0x139/0x200 [ 1043.578091][ T7055] ? bitfill_aligned+0x101/0x200 [ 1043.578108][ T7055] cfb_fillrect+0x40b/0x7b0 [ 1043.578120][ T7055] ? cfb_fillrect+0x7b0/0x7b0 [ 1043.578134][ T7055] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1043.578148][ T7055] vga16fb_fillrect+0x683/0x193b [ 1043.578220][ T7055] ? memcpy+0x39/0x60 [ 1043.578234][ T7055] bit_clear_margins+0x2d5/0x4a0 [ 1043.578248][ T7055] ? bit_bmove+0x210/0x210 [ 1043.578260][ T7055] ? vga16fb_update_fix+0x4a0/0x4a0 [ 1043.578276][ T7055] fbcon_clear_margins+0x1d5/0x230 [ 1043.578289][ T7055] fbcon_switch+0xb6e/0x16c0 [ 1043.578303][ T7055] ? fbcon_scroll+0x3600/0x3600 [ 1043.578321][ T7055] ? fbcon_cursor+0x52b/0x650 [ 1043.578333][ T7055] ? kmalloc_array.constprop.0+0x20/0x20 [ 1043.578366][ T7055] ? is_console_locked+0x5/0x10 [ 1043.578378][ T7055] ? fbcon_set_origin+0x26/0x50 [ 1043.578415][ T7055] redraw_screen+0x2ae/0x770 [ 1043.578427][ T7055] ? vga16fb_update_fix+0x4a0/0x4a0 [ 1043.578437][ T7055] ? vc_init+0x440/0x440 [ 1043.578445][ T7055] ? fbcon_set_palette+0x3a8/0x490 [ 1043.578452][ T7055] fbcon_modechanged+0x575/0x710 [ 1043.578460][ T7055] fbcon_update_vcs+0x3a/0x50 [ 1043.578486][ T7055] fb_set_var+0xae8/0xd60 [ 1043.578494][ T7055] ? fb_blank+0x190/0x190 [ 1043.578501][ T7055] ? lock_release+0x8d0/0x8d0 [ 1043.578510][ T7055] ? lock_is_held_type+0xb0/0xe0 [ 1043.578519][ T7055] ? do_fb_ioctl+0x2f2/0x6c0 [ 1043.578529][ T7055] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 1043.578536][ T7055] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1043.578580][ T7055] ? trace_hardirqs_on+0x5f/0x220 [ 1043.578589][ T7055] do_fb_ioctl+0x33f/0x6c0 [ 1043.578597][ T7055] ? fb_set_suspend+0x1a0/0x1a0 [ 1043.578634][ T7055] ? tomoyo_execute_permission+0x470/0x470 [ 1043.578645][ T7055] ? lock_is_held_type+0xb0/0xe0 [ 1043.578685][ T7055] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1043.578719][ T7055] ? do_vfs_ioctl+0x27d/0x1090 [ 1043.578743][ T7055] ? __fget_files+0x294/0x400 [ 1043.578752][ T7055] fb_ioctl+0xdd/0x130 [ 1043.578759][ T7055] ? do_fb_ioctl+0x6c0/0x6c0 [ 1043.578765][ T7055] ksys_ioctl+0x11a/0x180 [ 1043.578772][ T7055] __x64_sys_ioctl+0x6f/0xb0 [ 1043.578779][ T7055] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1043.578786][ T7055] do_syscall_64+0x60/0xe0 [ 1043.578793][ T7055] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1044.653207][ T7055] BUG: unable to handle page fault for address: 0000000040000000 [ 1044.653211][ T7055] #PF: supervisor write access in kernel mode [ 1044.653214][ T7055] #PF: error_code(0x0002) - not-present page [ 1044.653216][ T7055] PGD 92f41067 P4D 92f41067 PUD 0 [ 1044.653222][ T7055] Oops: 0002 [#2] PREEMPT SMP KASAN [ 1044.653226][ T7055] CPU: 0 PID: 7055 Comm: syz-executor.0 Not tainted 5.8.0-rc3-syzkaller #0 [ 1044.653231][ T7055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1044.653233][ T7055] RIP: 0010:in_gate_area_no_mm+0x0/0x6a [ 1044.653241][ T7055] Code: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 <00> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1044.653244][ T7055] RSP: 0018:ffffc90001fde9a8 EFLAGS: 00010012 [ 1044.653249][ T7055] RAX: 0000000040000000 RBX: ffffc90001fdea48 RCX: ffffffff816a5e70 [ 1044.653252][ T7055] RDX: ffff8880a451a300 RSI: ffffffff816a5e9b RDI: 000000000045cb29 [ 1044.653255][ T7055] RBP: 000000000045cb29 R08: ffffc90001fdeb58 R09: ffffffff8c8cc109 [ 1044.653259][ T7055] R10: 000000000045cb29 R11: 0000000000000000 R12: ffffc90001fdeb58 [ 1044.653262][ T7055] R13: 0000000000000001 R14: 000000000045cb29 R15: ffffc90001fdea68 [ 1044.653266][ T7055] FS: 00007fedca8fe700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 1044.653269][ T7055] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1044.653272][ T7055] CR2: 0000000040000000 CR3: 000000009e138000 CR4: 00000000001406f0 [ 1044.653275][ T7055] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1044.653279][ T7055] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1044.653280][ T7055] Call Trace: [ 1044.653282][ T7055] kallsyms_lookup+0xc3/0x2e0 [ 1044.653284][ T7055] __sprint_symbol+0x9c/0x1c0 [ 1044.653286][ T7055] ? kallsyms_lookup+0x2e0/0x2e0 [ 1044.653289][ T7055] ? kallsyms_lookup+0xff/0x2e0 [ 1044.653291][ T7055] ? __sprint_symbol+0x12b/0x1c0 [ 1044.653293][ T7055] symbol_string+0x14c/0x370 [ 1044.653295][ T7055] ? set_precision+0x160/0x160 [ 1044.653297][ T7055] ? ip6_addr_string+0x330/0x330 [ 1044.653299][ T7055] ? symbol_string+0x297/0x370 [ 1044.653301][ T7055] ? ip6_addr_string+0x330/0x330 [ 1044.653303][ T7055] ? hex_string+0xf8/0x4c0 [ 1044.653305][ T7055] ? set_precision+0x160/0x160 [ 1044.653307][ T7055] ? number+0x7ca/0xa90 [ 1044.653309][ T7055] ? widen_string+0xd8/0x2a0 [ 1044.653311][ T7055] ? set_precision+0x160/0x160 [ 1044.653313][ T7055] ? number+0x7ca/0xa90 [ 1044.653315][ T7055] pointer+0x185/0x970 [ 1044.653317][ T7055] ? vsscanf+0x3ff/0x24b0 [ 1044.653319][ T7055] ? resource_string.isra.0+0x16c0/0x16c0 [ 1044.653322][ T7055] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1044.653325][ T7055] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1044.653326][ T7055] vsnprintf+0x5b2/0x14f0 [ 1044.653328][ T7055] ? pointer+0x970/0x970 [ 1044.653330][ T7055] ? lock_release+0x8d0/0x8d0 [ 1044.653332][ T7055] vscnprintf+0x29/0x80 [ 1044.653334][ T7055] vprintk_store+0x44/0x4a0 [ 1044.653336][ T7055] vprintk_emit+0x139/0x770 [ 1044.653338][ T7055] vprintk_func+0x8f/0x1a6 [ 1044.653340][ T7055] printk+0xba/0xed [ 1044.653342][ T7055] ? log_store.cold+0x16/0x16 [ 1044.653344][ T7055] ? unwind_next_frame+0xe3b/0x1f90 [ 1044.653346][ T7055] show_ip+0x22/0x30 [ 1044.653348][ T7055] show_iret_regs+0x10/0x32 [ 1044.653350][ T7055] __show_regs+0x18/0x50 [ 1044.653352][ T7055] ? is_bpf_text_address+0xcb/0x160 [ 1044.653354][ T7055] show_trace_log_lvl+0x255/0x2b4 [ 1044.653357][ T7055] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1044.653359][ T7055] die_addr.cold+0x8/0xd [ 1044.653361][ T7055] exc_general_protection+0x193/0x2d0 [ 1044.653363][ T7055] asm_exc_general_protection+0x1e/0x30 [ 1044.653366][ T7055] RIP: 0010:__switch_to_asm+0x0/0x40 [ 1044.653374][ T7055] Code: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 <00> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1044.653376][ T7055] RSP: 0018:ffffc90001fdf328 EFLAGS: 00010046 [ 1044.653381][ T7055] RAX: dffffc0000000000 RBX: ffff8880ae635e18 RCX: 0000000000000000 [ 1044.653384][ T7055] RDX: 1ffff11015cc6bc2 RSI: ffff8880a02402c0 RDI: ffff8880a451a300 [ 1044.653388][ T7055] RBP: ffffc90001fdf3f8 R08: 0000000000000001 R09: ffff8880a451abc8 [ 1044.653391][ T7055] R10: fffffbfff155cb29 R11: 00000000fa83b2da R12: ffff8880ae635e00 [ 1044.653394][ T7055] R13: ffff8880a451a300 R14: ffff8880a02402c0 R15: ffff8880a451a730 [ 1044.653396][ T7055] __schedule+0x8e1/0x1eb0 [ 1044.653399][ T7055] ? io_schedule_timeout+0x140/0x140 [ 1044.653401][ T7055] ? sched_clock+0x2a/0x40 [ 1044.653403][ T7055] ? preempt_schedule_irq+0x88/0x150 [ 1044.653405][ T7055] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1044.653408][ T7055] preempt_schedule_irq+0xb0/0x150 [ 1044.653410][ T7055] idtentry_exit_cond_rcu+0xc0/0xf0 [ 1044.653412][ T7055] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1044.653415][ T7055] RIP: 0010:bitfill_aligned+0x119/0x200 [ 1044.653423][ T7055] Code: 3d b2 b1 fd 41 83 fc 07 76 5f 4c 89 ed e8 af b5 b1 fd 48 89 5d 00 48 89 5d 08 48 89 5d 10 48 89 5d 18 48 89 5d 20 48 89 5d 28 <48> 8d 45 38 48 89 5d 30 48 83 c5 40 48 89 18 41 83 ef 08 bf 07 00 [ 1044.653425][ T7055] RSP: 0018:ffffc90001fdf4f0 EFLAGS: 00000293 [ 1044.653430][ T7055] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff83c201e9 [ 1044.653433][ T7055] RDX: ffff8880a451a300 RSI: ffffffff83c201b1 RDI: 0000000000000005 [ 1044.653437][ T7055] RBP: ffff888001226eb8 R08: 0000000000001540 R09: 0000000000000040 [ 1044.653440][ T7055] R10: 0000000000000007 R11: 0000000000000000 R12: 0000000000000055 [ 1044.653443][ T7055] R13: ffff888001226e78 R14: 0000000000000000 R15: 000000000000004d [ 1044.653445][ T7055] ? bitfill_aligned+0x139/0x200 [ 1044.653448][ T7055] ? bitfill_aligned+0x101/0x200 [ 1044.653450][ T7055] cfb_fillrect+0x40b/0x7b0 [ 1044.653452][ T7055] ? cfb_fillrect+0x7b0/0x7b0 [ 1044.653454][ T7055] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1044.653456][ T7055] vga16fb_fillrect+0x683/0x193b [ 1044.653458][ T7055] ? memcpy+0x39/0x60 [ 1044.653460][ T7055] bit_clear_margins+0x2d5/0x4a0 [ 1044.653462][ T7055] ? bit_bmove+0x210/0x210 [ 1044.653465][ T7055] ? vga16fb_update_fix+0x4a0/0x4a0 [ 1044.653467][ T7055] fbcon_clear_margins+0x1d5/0x230 [ 1044.653469][ T7055] fbcon_switch+0xb6e/0x16c0 [ 1044.653471][ T7055] ? fbcon_scroll+0x3600/0x3600 [ 1044.653473][ T7055] ? fbcon_cursor+0x52b/0x650 [ 1044.653475][ T7055] ? kmalloc_array.constprop.0+0x20/0x20 [ 1044.653478][ T7055] ? is_console_locked+0x5/0x10 [ 1044.653480][ T7055] ? fbcon_set_origin+0x26/0x50 [ 1044.653482][ T7055] redraw_screen+0x2ae/0x770 [ 1044.653484][ T7055] ? vga16fb_update_fix+0x4a0/0x4a0 [ 1044.653486][ T7055] ? vc_init+0x440/0x440 [ 1044.653488][ T7055] ? fbcon_set_palette+0x3a8/0x490 [ 1044.653490][ T7055] fbcon_modechanged+0x575/0x710 [ 1044.653492][ T7055] fbcon_update_vcs+0x3a/0x50 [ 1044.653494][ T7055] fb_set_var+0xae8/0xd60 [ 1044.653496][ T7055] ? fb_blank+0x190/0x190 [ 1044.653498][ T7055] ? lock_release+0x8d0/0x8d0 [ 1044.653500][ T7055] ? lock_is_held_type+0xb0/0xe0 [ 1044.653502][ T7055] ? do_fb_ioctl+0x2f2/0x6c0 [ 1044.653505][ T7055] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 1044.653507][ T7055] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1044.653510][ T7055] ? trace_hardirqs_on+0x5f/0x220 [ 1044.653512][ T7055] do_fb_ioctl+0x33f/0x6c0 [ 1044.653514][ T7055] ? fb_set_suspend+0x1a0/0x1a0 [ 1044.653516][ T7055] ? tomoyo_execute_permission+0x470/0x470 [ 1044.653518][ T7055] ? lock_is_held_type+0xb0/0xe0 [ 1044.653521][ T7055] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1044.653523][ T7055] ? do_vfs_ioctl+0x27d/0x1090 [ 1044.653525][ T7055] ? __fget_files+0x294/0x400 [ 1044.653527][ T7055] fb_ioctl+0xdd/0x130 [ 1044.653540][ T7055] ? do_fb_ioctl+0x6c0/0x6c0 [ 1044.653542][ T7055] ksys_ioctl+0x11a/0x180 [ 1044.653544][ T7055] __x64_sys_ioctl+0x6f/0xb0 [ 1044.653546][ T7055] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1044.653548][ T7055] do_syscall_64+0x60/0xe0 [ 1044.653551][ T7055] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1044.653554][ T7055] BUG: unable to handle page fault for address: 0000000040000000 [ 1044.653557][ T7055] #PF: supervisor write access in kernel mode [ 1044.653560][ T7055] #PF: error_code(0x0002) - not-present page [ 1044.653561][ T7055] PGD 92f41067 P4D 92f41067 PUD 0 [ 1044.653567][ T7055] Oops: 0002 [#3] PREEMPT SMP KASAN [ 1044.653571][ T7055] CPU: 0 PID: 7055 Comm: syz-executor.0 Not tainted 5.8.0-rc3-syzkaller #0 [ 1044.653575][ T7055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1044.653578][ T7055] RIP: 0010:in_gate_area_no_mm+0x0/0x6a [ 1044.653586][ T7055] Code: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 <00> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1044.653588][ T7055] RSP: 0018:ffffc90001fdde90 EFLAGS: 00010012 [ 1044.653593][ T7055] RAX: 0000000040000000 RBX: ffffc90001fddf30 RCX: ffffffff816a5e70 [ 1044.653596][ T7055] RDX: ffff8880a451a300 RSI: ffffffff816a5e9b RDI: 000000000045cb29 [ 1044.653600][ T7055] RBP: 000000000045cb29 R08: ffffc90001fde040 R09: ffff8880ae624519 [ 1044.653603][ T7055] R10: 000000000045cb29 R11: 0000000000000001 R12: ffffc90001fde040 [ 1044.653606][ T7055] R13: 0000000000000001 R14: 000000000045cb29 R15: ffffc90001fddf50 [ 1044.653610][ T7055] FS: 00007fedca8fe700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 1044.653613][ T7055] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1044.653617][ T7055] CR2: 0000000040000000 CR3: 000000009e138000 CR4: 00000000001406f0 [ 1044.653620][ T7055] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1044.653623][ T7055] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1044.653625][ T7055] Call Trace: [ 1044.653627][ T7055] kallsyms_lookup+0xc3/0x2e0 [ 1044.653629][ T7055] __sprint_symbol+0x9c/0x1c0 [ 1044.653631][ T7055] ? kallsyms_lookup+0x2e0/0x2e0 [ 1044.653633][ T7055] ? kallsyms_lookup+0xff/0x2e0 [ 1044.653635][ T7055] ? __sprint_symbol+0x12b/0x1c0 [ 1044.653637][ T7055] symbol_string+0x14c/0x370 [ 1044.653639][ T7055] ? set_precision+0x160/0x160 [ 1044.653642][ T7055] ? ip6_addr_string+0x330/0x330 [ 1044.653644][ T7055] ? symbol_string+0x297/0x370 [ 1044.653646][ T7055] ? ip6_addr_string+0x330/0x330 [ 1044.653648][ T7055] ? hex_string+0xf8/0x4c0 [ 1044.653650][ T7055] ? set_precision+0x160/0x160 [ 1044.653652][ T7055] ? number+0x7ca/0xa90 [ 1044.653654][ T7055] ? widen_string+0xd8/0x2a0 [ 1044.653656][ T7055] ? set_precision+0x160/0x160 [ 1044.653658][ T7055] ? number+0x7ca/0xa90 [ 1044.653659][ T7055] pointer+0x185/0x970 [ 1044.653661][ T7055] ? vsscanf+0x3ff/0x24b0 [ 1044.653664][ T7055] ? resource_string.isra.0+0x16c0/0x16c0 [ 1044.653666][ T7055] vsnprintf+0x5b2/0x14f0 [ 1044.653668][ T7055] ? pointer+0x970/0x970 [ 1044.653670][ T7055] ? vsnprintf+0x2cc/0x14f0 [ 1044.653671][ T7055] vscnprintf+0x29/0x80 [ 1044.653674][ T7055] printk_safe_log_store+0xf5/0x250 [ 1044.653676][ T7055] ? printk_deferred+0xf0/0xf0 [ 1044.653678][ T7055] ? irq_work_queue+0x29/0x80 [ 1044.653680][ T7055] ? printk_safe_log_store+0x1b7/0x250 [ 1044.653682][ T7055] vprintk_func+0xef/0x1a6 [ 1044.653684][ T7055] printk+0xba/0xed [ 1044.653686][ T7055] ? log_store.cold+0x16/0x16 [ 1044.653688][ T7055] ? unwind_next_frame+0xe3b/0x1f90 [ 1044.653690][ T7055] show_ip+0x22/0x30 [ 1044.653692][ T7055] show_iret_regs+0x10/0x32 [ 1044.653694][ T7055] __show_regs+0x18/0x50 [ 1044.653696][ T7055] ? is_bpf_text_address+0xcb/0x160 [ 1044.653698][ T7055] show_trace_log_lvl+0x255/0x2b4 [ 1044.653701][ T7055] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1044.653702][ T7055] __die+0x51/0x90 [ 1044.653704][ T7055] no_context+0x56b/0x9f0 [ 1044.653706][ T7055] ? pgtable_bad+0x90/0x90 [ 1044.653708][ T7055] ? put_dec+0xd0/0xd0 [ 1044.653710][ T7055] ? number+0x7ca/0xa90 [ 1044.653712][ T7055] __bad_area_nosemaphore+0xa9/0x480 [ 1044.653714][ T7055] ? put_dec+0xd0/0xd0 [ 1044.653716][ T7055] do_user_addr_fault+0x783/0xd00 [ 1044.653718][ T7055] ? trace_hardirqs_off+0x27/0x210 [ 1044.653720][ T7055] exc_page_fault+0xab/0x170 [ 1044.653722][ T7055] asm_exc_page_fault+0x1e/0x30 [ 1044.653725][ T7055] RIP: 0010:in_gate_area_no_mm+0x0/0x6a [ 1044.653729][ T7055] Code: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1044.653735][ T7055] Lost 150 message(s)!