Warning: Permanently added '10.128.1.35' (ECDSA) to the list of known hosts. 2020/08/14 15:27:53 parsed 1 programs 2020/08/14 15:27:53 executed programs: 0 syzkaller login: [ 1049.714405][ T6878] IPVS: ftp: loaded support on port[0] = 21 [ 1049.882102][ T6878] chnl_net:caif_netlink_parms(): no params data found [ 1049.947226][ T6878] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.957047][ T6878] bridge0: port 1(bridge_slave_0) entered disabled state [ 1049.965997][ T6878] device bridge_slave_0 entered promiscuous mode [ 1049.975000][ T6878] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.983231][ T6878] bridge0: port 2(bridge_slave_1) entered disabled state [ 1049.991584][ T6878] device bridge_slave_1 entered promiscuous mode [ 1050.011311][ T6878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1050.022295][ T6878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1050.044201][ T6878] team0: Port device team_slave_0 added [ 1050.051960][ T6878] team0: Port device team_slave_1 added [ 1050.070259][ T6878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1050.077423][ T6878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1050.105049][ T6878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1050.118522][ T6878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1050.125661][ T6878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1050.152374][ T6878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1050.178655][ T6878] device hsr_slave_0 entered promiscuous mode [ 1050.185872][ T6878] device hsr_slave_1 entered promiscuous mode [ 1050.279118][ T6878] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1050.293692][ T6878] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1050.303847][ T6878] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1050.316816][ T6878] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1050.343086][ T6878] bridge0: port 2(bridge_slave_1) entered blocking state [ 1050.350239][ T6878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1050.358032][ T6878] bridge0: port 1(bridge_slave_0) entered blocking state [ 1050.365096][ T6878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1050.411237][ T6878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1050.424625][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1050.436146][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 1050.444815][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 1050.453437][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1050.466340][ T6878] 8021q: adding VLAN 0 to HW filter on device team0 [ 1050.479076][ T2881] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1050.487543][ T2881] bridge0: port 1(bridge_slave_0) entered blocking state [ 1050.494831][ T2881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1050.518923][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1050.527343][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 1050.534474][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1050.543238][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1050.551993][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1050.561714][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1050.575764][ T6878] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1050.586426][ T6878] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1050.600364][ T2881] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1050.609746][ T2881] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1050.618703][ T2881] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1050.637871][ T2881] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1050.645422][ T2881] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1050.655264][ T6878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1050.675912][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1050.696431][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1050.705863][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1050.714932][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1050.727035][ T6878] device veth0_vlan entered promiscuous mode [ 1050.739230][ T6878] device veth1_vlan entered promiscuous mode [ 1050.762410][ T2881] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1050.771235][ T2881] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1050.780083][ T2881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1050.790941][ T6878] device veth0_macvtap entered promiscuous mode [ 1050.802244][ T6878] device veth1_macvtap entered promiscuous mode [ 1050.820982][ T6878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1050.830452][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1050.841029][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1050.853620][ T6878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1050.861556][ T7097] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1050.870486][ T7097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1050.883058][ T6878] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.891921][ T6878] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.900983][ T6878] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.909887][ T6878] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.758525][ T2881] Bluetooth: hci0: command 0x0409 tx timeout 2020/08/14 15:27:58 executed programs: 110 [ 1053.837493][ T6847] Bluetooth: hci0: command 0x041b tx timeout [ 1055.917455][ T6847] Bluetooth: hci0: command 0x040f tx timeout [ 1057.998244][ T2881] Bluetooth: hci0: command 0x0419 tx timeout 2020/08/14 15:28:03 executed programs: 324 2020/08/14 15:28:08 executed programs: 537 2020/08/14 15:28:13 executed programs: 747 2020/08/14 15:28:18 executed programs: 960 2020/08/14 15:28:23 executed programs: 1162 2020/08/14 15:28:28 executed programs: 1373 2020/08/14 15:28:33 executed programs: 1581 2020/08/14 15:28:38 executed programs: 1782 2020/08/14 15:28:43 executed programs: 1991 2020/08/14 15:28:48 executed programs: 2214 2020/08/14 15:28:53 executed programs: 2419 2020/08/14 15:28:58 executed programs: 2623 2020/08/14 15:29:03 executed programs: 2823 2020/08/14 15:29:08 executed programs: 3021 2020/08/14 15:29:13 executed programs: 3227 2020/08/14 15:29:18 executed programs: 3419 2020/08/14 15:29:23 executed programs: 3629 2020/08/14 15:29:28 executed programs: 3827 2020/08/14 15:29:33 executed programs: 4043 2020/08/14 15:29:38 executed programs: 4242 2020/08/14 15:29:43 executed programs: 4448 2020/08/14 15:29:48 executed programs: 4645 2020/08/14 15:29:53 executed programs: 4850 2020/08/14 15:29:58 executed programs: 5050 [ 1173.986474][ T6552] Bluetooth: hci0: command 0x0406 tx timeout 2020/08/14 15:30:03 executed programs: 5236 2020/08/14 15:30:08 executed programs: 5432 2020/08/14 15:30:13 executed programs: 5624 2020/08/14 15:30:18 executed programs: 5807 2020/08/14 15:30:23 executed programs: 5999 2020/08/14 15:30:28 executed programs: 6206 2020/08/14 15:30:33 executed programs: 6393 2020/08/14 15:30:38 executed programs: 6605 2020/08/14 15:30:43 executed programs: 6807 2020/08/14 15:30:48 executed programs: 7007 2020/08/14 15:30:53 executed programs: 7200 2020/08/14 15:30:58 executed programs: 7402 2020/08/14 15:31:03 executed programs: 7588 2020/08/14 15:31:08 executed programs: 7771 2020/08/14 15:31:13 executed programs: 7980 2020/08/14 15:31:18 executed programs: 8185 2020/08/14 15:31:23 executed programs: 8369 2020/08/14 15:31:28 executed programs: 8557 2020/08/14 15:31:34 executed programs: 8745 2020/08/14 15:31:39 executed programs: 8931 2020/08/14 15:31:44 executed programs: 9125 2020/08/14 15:31:49 executed programs: 9314 2020/08/14 15:31:54 executed programs: 9489 2020/08/14 15:31:59 executed programs: 9679 2020/08/14 15:32:04 executed programs: 9860 2020/08/14 15:32:09 executed programs: 10034 2020/08/14 15:32:14 executed programs: 10241 2020/08/14 15:32:19 executed programs: 10428 2020/08/14 15:32:24 executed programs: 10606 2020/08/14 15:32:29 executed programs: 10793 2020/08/14 15:32:34 executed programs: 10983 2020/08/14 15:32:39 executed programs: 11169 2020/08/14 15:32:44 executed programs: 11364 2020/08/14 15:32:49 executed programs: 11555 2020/08/14 15:32:54 executed programs: 11735 2020/08/14 15:32:59 executed programs: 11905 2020/08/14 15:33:04 executed programs: 12083 2020/08/14 15:33:09 executed programs: 12261 2020/08/14 15:33:14 executed programs: 12464 2020/08/14 15:33:19 executed programs: 12650 2020/08/14 15:33:24 executed programs: 12836 2020/08/14 15:33:29 executed programs: 13027 2020/08/14 15:33:34 executed programs: 13209 2020/08/14 15:33:39 executed programs: 13407 2020/08/14 15:33:44 executed programs: 13807 2020/08/14 15:33:49 executed programs: 14194 2020/08/14 15:33:54 executed programs: 14567 2020/08/14 15:33:59 executed programs: 14937 2020/08/14 15:34:04 executed programs: 15291 2020/08/14 15:34:09 executed programs: 15646 2020/08/14 15:34:14 executed programs: 16029 [ 1431.997945][T30467] mm ffff888092a10840 mmap ffff88809ea00420 seqnum 0 task_size 140737488351232 [ 1431.997945][T30467] get_unmapped_area ffffffff8129caf0 [ 1431.997945][T30467] mmap_base 140532906467328 mmap_legacy_base 47099888701440 highest_vm_end 140725202829312 [ 1431.997945][T30467] pgd ffff8880a6d6b000 mm_users 2 mm_count 2 pgtables_bytes 65536 map_count 17 [ 1431.997945][T30467] hiwater_rss 18 hiwater_vm 38f7 total_vm 3918 locked_vm 0 [ 1431.997945][T30467] pinned_vm 0 data_vm 23ab exec_vm 144 stack_vm 21 [ 1431.997945][T30467] start_code 400000 end_code 541f9b start_data 742ea8 end_data 74aa50 [ 1431.997945][T30467] start_brk 23ec000 brk 240e000 start_stack 7ffd23a96440 [ 1431.997945][T30467] arg_start 7ffd23a96e9e arg_end 7ffd23a96eb3 env_start 7ffd23a96eb3 env_end 7ffd23a96fe3 [ 1431.997945][T30467] binfmt ffffffff89cdc100 flags cd core_state ffffc90009127bf8 [ 1431.997945][T30467] ioctx_table 0000000000000000 [ 1431.997945][T30467] owner ffff8880a8690440 exe_file ffff8880a6d75c80 [ 1432.088980][T30467] ------------[ cut here ]------------ [ 1432.094433][T30467] kernel BUG at mm/khugepaged.c:469! [ 1432.101687][T30467] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 1432.107766][T30467] CPU: 1 PID: 30467 Comm: syz-executor.0 Not tainted 5.8.0-syzkaller #0 [ 1432.116162][T30467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1432.126448][T30467] RIP: 0010:__khugepaged_enter+0x306/0x3d0 [ 1432.132287][T30467] Code: e4 49 81 fe c0 ae c9 89 74 2a e8 45 79 bb ff 44 89 e0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 e8 32 79 bb ff 48 89 ef e8 1a d6 e9 ff <0f> 0b 41 bc f4 ff ff ff eb d6 e8 1b 79 bb ff 31 c9 ba 01 00 00 00 [ 1432.152605][T30467] RSP: 0000:ffffc9000890fcc0 EFLAGS: 00010286 [ 1432.158654][T30467] RAX: 0000000000000367 RBX: 0000000000000002 RCX: 0000000000000000 [ 1432.166688][T30467] RDX: ffff8880a8690440 RSI: ffffffff815dbc57 RDI: fffff52001121f37 [ 1432.175434][T30467] RBP: ffff888092a10840 R08: 0000000000000367 R09: ffff8880ae7318e7 [ 1432.183407][T30467] R10: 0000000000000000 R11: 0000000000032848 R12: ffff8880a8d14bb0 [ 1432.195117][T30467] R13: ffff888092a1089c R14: 0000000020000000 R15: ffffc9000890fdf8 [ 1432.203077][T30467] FS: 00000000023ec940(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 1432.212169][T30467] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1432.218740][T30467] CR2: 00007fdc616bd000 CR3: 00000000a6d6b000 CR4: 00000000001506e0 [ 1432.226795][T30467] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1432.234751][T30467] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1432.242710][T30467] Call Trace: [ 1432.246045][T30467] do_huge_pmd_anonymous_page+0xaa1/0x2230 [ 1432.252020][T30467] handle_mm_fault+0x369d/0x4590 [ 1432.257113][T30467] ? apply_to_existing_page_range+0x40/0x40 [ 1432.263010][T30467] ? vmacache_update+0xce/0x140 [ 1432.268036][T30467] do_user_addr_fault+0x598/0xbf0 [ 1432.273109][T30467] exc_page_fault+0xa8/0x160 [ 1432.277717][T30467] ? asm_exc_page_fault+0x8/0x30 [ 1432.282641][T30467] asm_exc_page_fault+0x1e/0x30 [ 1432.287486][T30467] RIP: 0033:0x444481 [ 1432.291355][T30467] Code: 8d 15 e3 81 0d 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 1432.311022][T30467] RSP: 002b:00007ffd23a95e18 EFLAGS: 00010202 [ 1432.317064][T30467] RAX: 0000000020001240 RBX: 0000000000000000 RCX: 0000000000000054 [ 1432.325535][T30467] RDX: 0000000000000007 RSI: 00000000011900b0 RDI: 0000000020001240 [ 1432.333596][T30467] RBP: 0000000001190090 R08: 0000000000000000 R09: 0000000000000000 [ 1432.341548][T30467] R10: 00007ffd23a95f00 R11: 0000000000000246 R12: 0000000001190098 [ 1432.349571][T30467] R13: 000000000015da57 R14: fffffffffffffffe R15: 000000000118cf4c [ 1432.357620][T30467] Modules linked in: [ 1432.369378][T30467] ---[ end trace bea432a78f3f58bc ]--- [ 1432.374985][T30467] RIP: 0010:__khugepaged_enter+0x306/0x3d0 [ 1432.381466][T30467] Code: e4 49 81 fe c0 ae c9 89 74 2a e8 45 79 bb ff 44 89 e0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 e8 32 79 bb ff 48 89 ef e8 1a d6 e9 ff <0f> 0b 41 bc f4 ff ff ff eb d6 e8 1b 79 bb ff 31 c9 ba 01 00 00 00 [ 1432.401629][T30467] RSP: 0000:ffffc9000890fcc0 EFLAGS: 00010286 [ 1432.408201][T30467] RAX: 0000000000000367 RBX: 0000000000000002 RCX: 0000000000000000 [ 1432.416270][T30467] RDX: ffff8880a8690440 RSI: ffffffff815dbc57 RDI: fffff52001121f37 [ 1432.425120][T30467] RBP: ffff888092a10840 R08: 0000000000000367 R09: ffff8880ae7318e7 [ 1432.433522][T30467] R10: 0000000000000000 R11: 0000000000032848 R12: ffff8880a8d14bb0 [ 1432.441995][T30467] R13: ffff888092a1089c R14: 0000000020000000 R15: ffffc9000890fdf8 [ 1432.450435][T30467] FS: 00000000023ec940(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 1432.459758][T30467] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1432.466860][T30467] CR2: 00007fdc616c2020 CR3: 00000000a6d6b000 CR4: 00000000001506e0 [ 1432.474834][T30467] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1432.483434][T30467] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1432.491851][T30467] Kernel panic - not syncing: Fatal exception [ 1432.499778][T30467] Kernel Offset: disabled [ 1432.504098][T30467] Rebooting in 86400 seconds..