[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 88.823049][ T27] audit: type=1800 audit(1582331103.809:25): pid=9472 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 88.852198][ T27] audit: type=1800 audit(1582331103.809:26): pid=9472 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 88.880988][ T27] audit: type=1800 audit(1582331103.809:27): pid=9472 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.219' (ECDSA) to the list of known hosts. syzkaller login: [ 99.978252][ T9625] IPVS: ftp: loaded support on port[0] = 21 [ 100.027307][ T9625] chnl_net:caif_netlink_parms(): no params data found [ 100.063549][ T9625] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.071059][ T9625] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.078950][ T9625] device bridge_slave_0 entered promiscuous mode [ 100.087512][ T9625] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.094717][ T9625] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.102733][ T9625] device bridge_slave_1 entered promiscuous mode [ 100.119756][ T9625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.130700][ T9625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.150089][ T9625] team0: Port device team_slave_0 added [ 100.157262][ T9625] team0: Port device team_slave_1 added [ 100.172617][ T9625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.179623][ T9625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.205706][ T9625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.218095][ T9625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.225215][ T9625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.251250][ T9625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.334005][ T9625] device hsr_slave_0 entered promiscuous mode [ 100.392292][ T9625] device hsr_slave_1 entered promiscuous mode [ 100.503031][ T9625] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.545221][ T9625] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.604698][ T9625] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.644901][ T9625] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.697572][ T9625] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.704839][ T9625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.712943][ T9625] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.720023][ T9625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.761777][ T9625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.776736][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.787335][ T17] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.795398][ T17] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.803887][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 100.816538][ T9625] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.828579][ T2790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.837134][ T2790] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.844298][ T2790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.854792][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.864027][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.871060][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.894043][ T2790] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 100.903110][ T2790] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 100.913945][ T2790] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 100.921686][ T2790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.933996][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.946099][ T9625] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 100.965380][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.973543][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.986402][ T9625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.004114][ T2790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 101.023363][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 101.031847][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.041131][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.048971][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.058587][ T9625] device veth0_vlan entered promiscuous mode [ 101.071322][ T9625] device veth1_vlan entered promiscuous mode [ 101.091809][ T2790] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 101.100891][ T2790] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 101.109170][ T2790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 101.117714][ T2790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 101.128910][ T9625] device veth0_macvtap entered promiscuous mode [ 101.138817][ T9625] device veth1_macvtap entered promiscuous mode [ 101.155240][ T9625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.163221][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 101.171246][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 101.179848][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 101.189023][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 101.200485][ T9625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.208153][ T2790] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 101.217737][ T2790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready executing program [ 101.450550][ T9630] infiniband syz1: set active [ 101.455999][ T9630] infiniband syz1: added vlan0 [ 101.477806][ T9630] general protection fault, probably for non-canonical address 0xdffffc0000000086: 0000 [#1] PREEMPT SMP KASAN [ 101.489575][ T9630] KASAN: null-ptr-deref in range [0x0000000000000430-0x0000000000000437] [ 101.497995][ T9630] CPU: 0 PID: 9630 Comm: syz-executor688 Not tainted 5.6.0-rc1-syzkaller #0 [ 101.506653][ T9630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 101.516714][ T9630] RIP: 0010:rds_ib_add_one+0xba/0xcb0 [ 101.522074][ T9630] Code: 03 80 3c 02 00 0f 85 6c 0a 00 00 49 8b 9d a8 06 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d bb 30 04 00 00 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 7e [ 101.541667][ T9630] RSP: 0018:ffffc900079a6f28 EFLAGS: 00010202 [ 101.547713][ T9630] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff87675b6b [ 101.555769][ T9630] RDX: 0000000000000086 RSI: ffffffff87675b89 RDI: 0000000000000430 [ 101.563732][ T9630] RBP: ffffc900079a6f60 R08: ffff8880984e0340 R09: ffffed10151d409c [ 101.571686][ T9630] R10: ffffed10151d409b R11: ffff8880a8ea04df R12: ffff8880a8ea0558 [ 101.579635][ T9630] R13: ffff8880a8ea0000 R14: ffffffff8a904fc0 R15: ffffffff8a905050 [ 101.587592][ T9630] FS: 0000000000c6a880(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 101.596544][ T9630] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 101.603150][ T9630] CR2: 0000000020000000 CR3: 000000009c4d1000 CR4: 00000000001406f0 [ 101.611104][ T9630] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 101.619096][ T9630] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 101.627082][ T9630] Call Trace: [ 101.630357][ T9630] ? rds_ib_remove_one+0x290/0x290 [ 101.635450][ T9630] add_client_context+0x3dd/0x550 [ 101.640456][ T9630] ? ib_device_get_by_netdev+0x530/0x530 [ 101.646127][ T9630] ? rxe_enable_driver+0x68/0x90 [ 101.651096][ T9630] enable_device_and_get+0x1df/0x3c0 [ 101.656404][ T9630] ? add_one_compat_dev+0x7e0/0x7e0 [ 101.661602][ T9630] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 101.667319][ T9630] ib_register_device+0xa89/0xe40 [ 101.672344][ T9630] ? enable_device_and_get+0x3c0/0x3c0 [ 101.677800][ T9630] rxe_register_device+0x52e/0x655 [ 101.682891][ T9630] rxe_add+0x122b/0x1661 [ 101.687143][ T9630] rxe_net_add+0x91/0xf0 [ 101.691366][ T9630] rxe_newlink+0x39/0x90 [ 101.695588][ T9630] nldev_newlink+0x28a/0x430 [ 101.700156][ T9630] ? nldev_set_doit+0x420/0x420 [ 101.705025][ T9630] ? apparmor_cred_prepare+0x7b0/0x7b0 [ 101.710479][ T9630] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 101.716709][ T9630] ? cap_capable+0x205/0x270 [ 101.721287][ T9630] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 101.727527][ T9630] ? ns_capable+0x20/0x30 [ 101.731843][ T9630] ? __netlink_ns_capable+0x104/0x140 [ 101.737207][ T9630] ? nldev_set_doit+0x420/0x420 [ 101.742220][ T9630] rdma_nl_rcv+0x5d9/0x980 [ 101.746626][ T9630] ? rdma_nl_multicast+0x330/0x330 [ 101.751728][ T9630] ? __kasan_check_read+0x11/0x20 [ 101.756734][ T9630] ? netlink_deliver_tap+0x248/0xbf0 [ 101.762131][ T9630] ? __kasan_check_write+0x14/0x20 [ 101.767225][ T9630] netlink_unicast+0x59e/0x7e0 [ 101.771978][ T9630] ? netlink_attachskb+0x870/0x870 [ 101.777080][ T9630] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 101.782781][ T9630] ? __check_object_size+0x3d/0x437 [ 101.788011][ T9630] netlink_sendmsg+0x91c/0xea0 [ 101.792825][ T9630] ? netlink_unicast+0x7e0/0x7e0 [ 101.797741][ T9630] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 101.803297][ T9630] ? apparmor_socket_sendmsg+0x2a/0x30 [ 101.808732][ T9630] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 101.814957][ T9630] ? security_socket_sendmsg+0x8d/0xc0 [ 101.820406][ T9630] ? netlink_unicast+0x7e0/0x7e0 [ 101.825363][ T9630] sock_sendmsg+0xd7/0x130 [ 101.829771][ T9630] ____sys_sendmsg+0x753/0x880 [ 101.834524][ T9630] ? kernel_sendmsg+0x50/0x50 [ 101.839195][ T9630] ___sys_sendmsg+0x100/0x170 [ 101.843854][ T9630] ? sendmsg_copy_msghdr+0x70/0x70 [ 101.848944][ T9630] ? do_huge_pmd_anonymous_page+0xceb/0x1a50 [ 101.854905][ T9630] ? prep_transhuge_page+0xa0/0xa0 [ 101.860048][ T9630] ? do_page_fault+0x579/0x12e1 [ 101.864919][ T9630] ? find_held_lock+0x35/0x130 [ 101.869864][ T9630] ? do_page_fault+0x579/0x12e1 [ 101.874718][ T9630] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 101.880956][ T9630] ? __fget_light+0x1ad/0x270 [ 101.885625][ T9630] ? __fdget+0x1b/0x20 [ 101.889672][ T9630] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 101.895900][ T9630] __sys_sendmsg+0x105/0x1d0 [ 101.900480][ T9630] ? __sys_sendmsg_sock+0xc0/0xc0 [ 101.905494][ T9630] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 101.910940][ T9630] ? do_syscall_64+0x26/0x790 [ 101.915594][ T9630] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 101.923222][ T9630] ? do_syscall_64+0x26/0x790 [ 101.927881][ T9630] __x64_sys_sendmsg+0x78/0xb0 [ 101.932630][ T9630] do_syscall_64+0xfa/0x790 [ 101.937122][ T9630] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 101.943089][ T9630] RIP: 0033:0x443d19 [ 101.946982][ T9630] Code: e8 8c 07 03 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b 0a fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 101.966575][ T9630] RSP: 002b:00007ffd68c3ff98 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.974979][ T9630] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443d19 [ 101.982973][ T9630] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 101.990931][ T9630] RBP: 00007ffd68c3ffb0 R08: 0000000001bbbbbb R09: 0000000001bbbbbb [ 101.998896][ T9630] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 102.006849][ T9630] R13: 0000000000404c70 R14: 0000000000000000 R15: 0000000000000000 [ 102.014809][ T9630] Modules linked in: [ 102.022255][ T9630] ---[ end trace 3082c5a837630f9b ]--- [ 102.027732][ T9630] RIP: 0010:rds_ib_add_one+0xba/0xcb0 [ 102.033129][ T9630] Code: 03 80 3c 02 00 0f 85 6c 0a 00 00 49 8b 9d a8 06 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d bb 30 04 00 00 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 7e [ 102.053375][ T9630] RSP: 0018:ffffc900079a6f28 EFLAGS: 00010202 [ 102.059447][ T9630] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff87675b6b [ 102.067456][ T9630] RDX: 0000000000000086 RSI: ffffffff87675b89 RDI: 0000000000000430 [ 102.075481][ T9630] RBP: ffffc900079a6f60 R08: ffff8880984e0340 R09: ffffed10151d409c [ 102.083578][ T9630] R10: ffffed10151d409b R11: ffff8880a8ea04df R12: ffff8880a8ea0558 [ 102.091556][ T9630] R13: ffff8880a8ea0000 R14: ffffffff8a904fc0 R15: ffffffff8a905050 [ 102.099550][ T9630] FS: 0000000000c6a880(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 102.108487][ T9630] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.115189][ T9630] CR2: 0000000020000000 CR3: 000000009c4d1000 CR4: 00000000001406f0 [ 102.123350][ T9630] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 102.131310][ T9630] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 102.140678][ T9630] Kernel panic - not syncing: Fatal exception [ 102.147836][ T9630] Kernel Offset: disabled [ 102.152157][ T9630] Rebooting in 86400 seconds..