[ OK ] Started Getty on tty2. [ OK ] Reached target Login Prompts. [ OK ] Started OpenBSD Secure Shell server. [ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.234' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 26.575268] BUG: unable to handle kernel paging request at ffff888001000050 [ 26.575283] IP: vga16fb_fillrect+0x910/0x1820 [ 26.575285] PGD c9cf067 P4D c9cf067 PUD c9d0067 PMD 80000000010001e1 [ 26.575294] Oops: 0003 [#1] PREEMPT SMP KASAN [ 26.575297] Modules linked in: [ 26.575311] CPU: 0 PID: 7989 Comm: syz-executor270 Not tainted 4.14.246-syzkaller #0 [ 26.575313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 26.575316] task: ffff888097172500 task.stack: ffff8880a32b0000 [ 26.575320] RIP: 0010:vga16fb_fillrect+0x910/0x1820 [ 26.575322] RSP: 0018:ffff8880a32b73e0 EFLAGS: 00010297 [ 26.575326] RAX: ffff888097172500 RBX: ffff888001000050 RCX: 00000000000000c0 [ 26.575328] RDX: 0000000000000000 RSI: ffff8880a32b7470 RDI: ffff8880a32b7480 [ 26.575331] RBP: 000000000000001b R08: 0000000000000001 R09: ffffed1047111893 [ 26.575333] R10: ffff88823888c49f R11: 0000000000000000 R12: 000000000ffeb800 [ 26.575335] R13: 00000000000000a5 R14: ffff88800100006b R15: 0000000000000000 [ 26.575338] FS: 00000000009cd300(0000) GS:ffff8880ba400000(0000) knlGS:0000000000000000 [ 26.575341] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 26.575343] CR2: ffff888001000050 CR3: 00000000b3e3a000 CR4: 00000000001406f0 [ 26.575348] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 26.575350] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 26.575351] Call Trace: [ 26.575358] ? fb_copy_cmap+0x280/0x340 [ 26.575362] ? vga16fb_setcolreg+0xfe/0x350 [ 26.575367] bit_clear_margins+0x3af/0x480 [ 26.575371] ? bit_clear+0x450/0x450 [ 26.575376] fbcon_clear_margins+0x1bb/0x300 [ 26.575380] fbcon_switch+0xde0/0x19e0 [ 26.575386] ? fbcon_event_notify+0x1760/0x1760 [ 26.575392] ? vga16fb_setcolreg+0xfe/0x350 [ 26.575398] redraw_screen+0x32c/0x790 [ 26.575403] ? con_shutdown+0x90/0x90 [ 26.575407] ? fbcon_set_palette+0x466/0x580 [ 26.575411] fbcon_modechanged+0x673/0x8d0 [ 26.575416] fbcon_event_notify+0x107/0x1760 [ 26.575423] notifier_call_chain+0x108/0x1a0 [ 26.575429] blocking_notifier_call_chain+0x79/0x90 [ 26.575435] fb_set_var+0xb3b/0xd20 [ 26.575440] ? fb_set_suspend+0x110/0x110 [ 26.575445] ? __lock_acquire+0x5fc/0x3f20 [ 26.575450] ? lock_acquire+0x170/0x3f0 [ 26.575454] ? do_fb_ioctl+0x2f1/0xa70 [ 26.575463] ? do_fb_ioctl+0x2e7/0xa70 [ 26.575468] do_fb_ioctl+0x36d/0xa70 [ 26.575473] ? register_framebuffer+0x8e0/0x8e0 [ 26.575476] ? __kernel_text_address+0x9/0x30 [ 26.575481] ? unwind_get_return_address+0x51/0x90 [ 26.575486] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 26.575491] ? __save_stack_trace+0xa0/0x160 [ 26.575497] ? check_preemption_disabled+0x35/0x240 [ 26.575503] ? kasan_slab_free+0x12d/0x1a0 [ 26.575506] ? kasan_slab_free+0xc3/0x1a0 [ 26.575511] ? kmem_cache_free+0x7c/0x2b0 [ 26.575515] ? putname+0xcd/0x110 [ 26.575519] ? do_sys_open+0x203/0x410 [ 26.575524] ? do_syscall_64+0x1d5/0x640 [ 26.575528] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 26.575532] ? path_lookupat+0x780/0x780 [ 26.575536] ? debug_check_no_obj_freed+0x2c0/0x680 [ 26.575543] ? debug_check_no_obj_freed+0x2c0/0x680 [ 26.575548] fb_ioctl+0xdd/0x130 [ 26.575552] ? do_fb_ioctl+0xa70/0xa70 [ 26.575556] do_vfs_ioctl+0x75a/0xff0 [ 26.575561] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 26.575565] ? ioctl_preallocate+0x1a0/0x1a0 [ 26.575569] ? kmem_cache_free+0x23a/0x2b0 [ 26.575573] ? putname+0xcd/0x110 [ 26.575576] ? do_sys_open+0x208/0x410 [ 26.575580] ? filp_open+0x60/0x60 [ 26.575586] ? security_file_ioctl+0x83/0xb0 [ 26.575590] SyS_ioctl+0x7f/0xb0 [ 26.575593] ? do_vfs_ioctl+0xff0/0xff0 [ 26.575597] do_syscall_64+0x1d5/0x640 [ 26.575602] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 26.575605] RIP: 0033:0x43efd9 [ 26.575607] RSP: 002b:00007ffced794e88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 26.575611] RAX: ffffffffffffffda RBX: 0000000000400488 RCX: 000000000043efd9 [ 26.575613] RDX: 0000000020000200 RSI: 0000000000004601 RDI: 0000000000000003 [ 26.575615] RBP: 0000000000402fc0 R08: 0000000000000000 R09: 0000000000400488 [ 26.575617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000403050 [ 26.575619] R13: 0000000000000000 R14: 00000000004ac018 R15: 0000000000400488 [ 26.575623] Code: 85 e4 0f 84 ea fc ff ff e8 4e 3c 18 fe 4d 63 ed 45 31 ff e8 43 3c 18 fe 41 89 ee 49 01 de 85 ed 0f 84 7c 06 00 00 e8 30 3c 18 fe <44> 88 3b 48 83 c3 01 4c 39 f3 75 ef e8 1f 3c 18 fe 4b 8d 1c 2e [ 26.575697] RIP: vga16fb_fillrect+0x910/0x1820 RSP: ffff8880a32b73e0 [ 26.575698] CR2: ffff888001000050 [ 26.575705] ---[ end trace 8c89f355b31faba4 ]--- [ 26.575707] Kernel panic - not syncing: Fatal exception [ 26.576985] Kernel Offset: disabled [ 27.020808] Rebooting in 86400 seconds..