[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.209' (ECDSA) to the list of known hosts. 2020/03/26 18:33:46 parsed 1 programs 2020/03/26 18:33:47 executed programs: 0 syzkaller login: [ 113.814604][ T7135] IPVS: ftp: loaded support on port[0] = 21 [ 113.909787][ T7135] chnl_net:caif_netlink_parms(): no params data found [ 113.955374][ T7135] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.963344][ T7135] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.971676][ T7135] device bridge_slave_0 entered promiscuous mode [ 113.980923][ T7135] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.988064][ T7135] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.996829][ T7135] device bridge_slave_1 entered promiscuous mode [ 114.016958][ T7135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.027902][ T7135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.050758][ T7135] team0: Port device team_slave_0 added [ 114.058219][ T7135] team0: Port device team_slave_1 added [ 114.075361][ T7135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.082530][ T7135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.108533][ T7135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.121501][ T7135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.128532][ T7135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.154654][ T7135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.222311][ T7135] device hsr_slave_0 entered promiscuous mode [ 114.259710][ T7135] device hsr_slave_1 entered promiscuous mode [ 114.372912][ T7135] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 114.422741][ T7135] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 114.481991][ T7135] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 114.541197][ T7135] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 114.594761][ T7135] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.601967][ T7135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.609978][ T7135] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.617069][ T7135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.663245][ T7135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.676318][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 114.687025][ T2783] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.696042][ T2783] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.705426][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 114.720088][ T7135] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.731280][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 114.740473][ T2808] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.747517][ T2808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.770607][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 114.779690][ T2783] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.786734][ T2783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.795252][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 114.804849][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 114.820171][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 114.829438][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 114.843328][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 114.854077][ T7135] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 114.873216][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 114.880870][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 114.894504][ T7135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.912744][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 114.921470][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 114.947316][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 114.956166][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 114.966272][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 114.975286][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 114.985325][ T7135] device veth0_vlan entered promiscuous mode [ 114.997723][ T7135] device veth1_vlan entered promiscuous mode [ 115.018648][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 115.026706][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 115.035052][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 115.043654][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 115.055513][ T7135] device veth0_macvtap entered promiscuous mode [ 115.066441][ T7135] device veth1_macvtap entered promiscuous mode [ 115.083998][ T7135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.091985][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 115.101377][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 115.109975][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 115.119140][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 115.133230][ T7135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.141930][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 115.151731][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 115.372538][ C0] hrtimer: interrupt took 25843 ns [ 115.681926][ T7349] BUG: sleeping function called from invalid context at arch/x86/mm/fault.c:1422 [ 115.681989][ T7349] in_atomic(): 0, irqs_disabled(): 1, non_block: 0, pid: 7349, name: syz-executor.0 [ 115.681997][ T7349] 1 lock held by syz-executor.0/7349: [ 115.682001][ T7349] #0: ffff888094614f58 (&mm->mmap_sem#2){++++}, at: do_page_fault+0x34c/0x12da [ 115.682039][ T7349] irq event stamp: 1732 [ 115.682053][ T7349] hardirqs last enabled at (1731): [] __free_object+0x8b3/0xee0 [ 115.682070][ T7349] hardirqs last disabled at (1732): [] do_syscall_64+0x204/0x7d0 [ 115.682086][ T7349] softirqs last enabled at (1498): [] fpu__copy+0x173/0x8b0 [ 115.682099][ T7349] softirqs last disabled at (1496): [] fpu__copy+0xa1/0x8b0 [ 115.682114][ T7349] CPU: 1 PID: 7349 Comm: syz-executor.0 Not tainted 5.6.0-rc7-syzkaller #0 [ 115.682120][ T7349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 115.682125][ T7349] Call Trace: [ 115.682143][ T7349] dump_stack+0x188/0x20d [ 115.682168][ T7349] ___might_sleep.cold+0x1f4/0x23d [ 115.682188][ T7349] do_page_fault+0x379/0x12da [ 115.682220][ T7349] page_fault+0x39/0x40 [ 115.682234][ T7349] RIP: 0010:do_syscall_64+0x35c/0x7d0 [ 115.682247][ T7349] Code: 80 3c 02 00 0f 85 f9 03 00 00 4c 8b 2b 31 ff 45 89 ec 41 81 e4 0e 38 00 00 44 89 e6 e8 8d 82 71 00 45 85 e4 0f 85 00 00 00 00 <00> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 115.682254][ T7349] RSP: 0018:ffffc90001daff28 EFLAGS: 00010046 [ 115.682270][ T7349] RAX: 0000000000000000 RBX: ffff88809a760480 RCX: ffffffff8100a403 [ 115.682278][ T7349] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 115.682286][ T7349] RBP: ffffc90001daff58 R08: ffff88809a760480 R09: ffffed10134ec091 [ 115.682294][ T7349] R10: ffffed10134ec090 R11: ffff88809a760487 R12: 0000000000000000 [ 115.682301][ T7349] R13: 0000000000004000 R14: 0000000000000000 R15: 0000000000000000 [ 115.682327][ T7349] ? do_syscall_64+0x353/0x7d0 [ 115.682350][ T7349] ? do_syscall_64+0x353/0x7d0 [ 115.682369][ T7349] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 115.682379][ T7349] RIP: 0033:0x45ad11 [ 115.682391][ T7349] Code: 75 14 b8 23 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 d4 d1 fb ff c3 48 83 ec 08 e8 ea 46 00 00 48 89 04 24 b8 23 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 33 47 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 115.682398][ T7349] RSP: 002b:00007ffe94602fd0 EFLAGS: 00000293 ORIG_RAX: 0000000000000023 [ 115.682409][ T7349] RAX: 0000000000000000 RBX: 000000000001c696 RCX: 000000000045ad11 [ 115.682416][ T7349] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ffe94602fe0 [ 115.682424][ T7349] RBP: 0000000000000001 R08: 00ffffffffffffff R09: 00ffffffffffffff [ 115.682431][ T7349] R10: 00007ffe946030d0 R11: 0000000000000293 R12: 000000000076bf00 [ 115.682439][ T7349] R13: 000000000076c900 R14: 000000000001c418 R15: 000000000076c04c [ 115.682481][ T7349] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 115.682488][ T7349] #PF: supervisor write access in kernel mode [ 115.682493][ T7349] #PF: error_code(0x0002) - not-present page [ 115.682497][ T7349] PGD 8ead4067 P4D 8ead4067 PUD 8ead5067 PMD 0 [ 115.682516][ T7349] Oops: 0002 [#1] PREEMPT SMP KASAN [ 115.682527][ T7349] CPU: 1 PID: 7349 Comm: syz-executor.0 Tainted: G W 5.6.0-rc7-syzkaller #0 [ 115.682533][ T7349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 115.682545][ T7349] RIP: 0010:do_syscall_64+0x35c/0x7d0 [ 115.682556][ T7349] Code: 80 3c 02 00 0f 85 f9 03 00 00 4c 8b 2b 31 ff 45 89 ec 41 81 e4 0e 38 00 00 44 89 e6 e8 8d 82 71 00 45 85 e4 0f 85 00 00 00 00 <00> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 115.682562][ T7349] RSP: 0018:ffffc90001daff28 EFLAGS: 00010046 [ 115.682570][ T7349] RAX: 0000000000000000 RBX: ffff88809a760480 RCX: ffffffff8100a403 [ 115.682577][ T7349] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 115.682584][ T7349] RBP: ffffc90001daff58 R08: ffff88809a760480 R09: ffffed10134ec091 [ 115.682591][ T7349] R10: ffffed10134ec090 R11: ffff88809a760487 R12: 0000000000000000 [ 115.682597][ T7349] R13: 0000000000004000 R14: 0000000000000000 R15: 0000000000000000 [ 115.682606][ T7349] FS: 0000000001808940(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 115.682614][ T7349] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 115.682620][ T7349] CR2: 0000000000000000 CR3: 00000000981cf000 CR4: 00000000001406e0 [ 115.682630][ T7349] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 115.682637][ T7349] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 115.682641][ T7349] Call Trace: [ 115.682656][ T7349] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 115.682664][ T7349] RIP: 0033:0x45ad11 [ 115.682674][ T7349] Code: 75 14 b8 23 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 d4 d1 fb ff c3 48 83 ec 08 e8 ea 46 00 00 48 89 04 24 b8 23 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 33 47 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 115.682680][ T7349] RSP: 002b:00007ffe94602fd0 EFLAGS: 00000293 ORIG_RAX: 0000000000000023 [ 115.682689][ T7349] RAX: 0000000000000000 RBX: 000000000001c696 RCX: 000000000045ad11 [ 115.682695][ T7349] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ffe94602fe0 [ 115.682702][ T7349] RBP: 0000000000000001 R08: 00ffffffffffffff R09: 00ffffffffffffff [ 115.682709][ T7349] R10: 00007ffe946030d0 R11: 0000000000000293 R12: 000000000076bf00 [ 115.682715][ T7349] R13: 000000000076c900 R14: 000000000001c418 R15: 000000000076c04c [ 115.682730][ T7349] Modules linked in: [ 115.682738][ T7349] CR2: 0000000000000000 [ 115.682750][ T7349] ---[ end trace 21d25b92a50b6eb6 ]--- [ 115.682763][ T7349] RIP: 0010:do_syscall_64+0x35c/0x7d0 [ 115.682773][ T7349] Code: 80 3c 02 00 0f 85 f9 03 00 00 4c 8b 2b 31 ff 45 89 ec 41 81 e4 0e 38 00 00 44 89 e6 e8 8d 82 71 00 45 85 e4 0f 85 00 00 00 00 <00> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 115.682779][ T7349] RSP: 0018:ffffc90001daff28 EFLAGS: 00010046 [ 115.682787][ T7349] RAX: 0000000000000000 RBX: ffff88809a760480 RCX: ffffffff8100a403 [ 115.682793][ T7349] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 115.682800][ T7349] RBP: ffffc90001daff58 R08: ffff88809a760480 R09: ffffed10134ec091 [ 115.682807][ T7349] R10: ffffed10134ec090 R11: ffff88809a760487 R12: 0000000000000000 [ 115.682813][ T7349] R13: 0000000000004000 R14: 0000000000000000 R15: 0000000000000000 [ 115.682822][ T7349] FS: 0000000001808940(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 115.682828][ T7349] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 115.682835][ T7349] CR2: 0000000000000000 CR3: 00000000981cf000 CR4: 00000000001406e0 [ 115.682841][ T7349] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 115.682847][ T7349] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 115.682852][ T7349] Kernel panic - not syncing: Fatal exception [ 115.684067][ T7349] Kernel Offset: disabled [ 116.331430][ T7349] Rebooting in 86400 seconds..