[ OK ] Started OpenBSD Secure Shell server. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.232' (ECDSA) to the list of known hosts. syzkaller login: [ 65.768693][ T6805] IPVS: ftp: loaded support on port[0] = 21 [ 65.888855][ T6805] chnl_net:caif_netlink_parms(): no params data found [ 65.964638][ T6805] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.974585][ T6805] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.985780][ T6805] device bridge_slave_0 entered promiscuous mode [ 65.996967][ T6805] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.010043][ T6805] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.022042][ T6805] device bridge_slave_1 entered promiscuous mode [ 66.051434][ T6805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.066989][ T6805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.093518][ T6805] team0: Port device team_slave_0 added [ 66.101726][ T6805] team0: Port device team_slave_1 added [ 66.121081][ T6805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.128848][ T6805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.156309][ T6805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.171297][ T6805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.179800][ T6805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.211212][ T6805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.275003][ T6805] device hsr_slave_0 entered promiscuous mode [ 66.323609][ T6805] device hsr_slave_1 entered promiscuous mode [ 66.454232][ T6805] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.506029][ T6805] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.565026][ T6805] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.635153][ T6805] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.700264][ T6805] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.707820][ T6805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.716010][ T6805] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.724974][ T6805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.776282][ T6805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.791073][ T2553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.801825][ T2553] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.810980][ T2553] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.820020][ T2553] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 66.834258][ T6805] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.846288][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.854984][ T2585] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.862214][ T2585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.876920][ T2553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.887322][ T2553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.896632][ T2553] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.904254][ T2553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.925044][ T2652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.934827][ T2652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.944756][ T2652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.955203][ T2652] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.972301][ T2652] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.980659][ T2652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.992468][ T2652] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.001375][ T2652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.011334][ T2652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.021554][ T2652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.030294][ T2652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.040204][ T6805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.061755][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.071468][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.088688][ T6805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.111155][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.120929][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.144312][ T2652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.155022][ T2652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.167324][ T6805] device veth0_vlan entered promiscuous mode [ 67.174805][ T2652] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.185943][ T2652] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.200157][ T6805] device veth1_vlan entered promiscuous mode [ 67.221739][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.230776][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.239719][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.248637][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.261419][ T6805] device veth0_macvtap entered promiscuous mode [ 67.274530][ T6805] device veth1_macvtap entered promiscuous mode [ 67.294633][ T6805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.302475][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.310722][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.320320][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.329626][ T2585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.343570][ T6805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.351996][ T2652] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.361935][ T2652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready executing program [ 67.739274][ T7015] general protection fault, probably for non-canonical address 0xdffffc000000001e: 0000 [#1] PREEMPT SMP KASAN [ 67.753939][ T7015] KASAN: null-ptr-deref in range [0x00000000000000f0-0x00000000000000f7] [ 67.765460][ T7015] CPU: 1 PID: 7015 Comm: systemd-udevd Not tainted 5.8.0-rc3-syzkaller #0 [ 67.774856][ T7015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.786811][ T7015] RIP: 0010:bdev_read_page+0x35/0x290 [ 67.792779][ T7015] Code: f5 53 48 89 fb 48 83 ec 08 48 89 14 24 e8 03 12 a5 ff 48 8d bb f0 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 e7 01 00 00 4c 8b bb f0 00 00 00 48 b8 00 00 00 [ 67.815657][ T7015] RSP: 0018:ffffc90001baf530 EFLAGS: 00010206 [ 67.822246][ T7015] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff81cf749a [ 67.833467][ T7015] RDX: 000000000000001e RSI: ffffffff81cea51d RDI: 00000000000000f0 [ 67.841741][ T7015] RBP: fff89719b6b00000 R08: 0000000000000001 R09: ffffea000251fec7 [ 67.850324][ T7015] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 67.863025][ T7015] R13: 0000000000000000 R14: 0000000000000000 R15: ffffc90001baf748 [ 67.872471][ T7015] FS: 00007f340c1988c0(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 67.885041][ T7015] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 67.891823][ T7015] CR2: 00007fffffc63fe8 CR3: 000000009495f000 CR4: 00000000001406e0 [ 67.904334][ T7015] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 67.914931][ T7015] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 67.924505][ T7015] Call Trace: [ 67.932143][ T7015] do_mpage_readpage+0x10ca/0x1ef0 [ 67.937463][ T7015] ? lock_downgrade+0x820/0x820 [ 67.942798][ T7015] ? mpage_writepage+0x1b0/0x1b0 [ 67.949546][ T7015] ? __xa_clear_mark+0x110/0x110 [ 67.956706][ T7015] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 67.963705][ T7015] ? get_mem_cgroup_from_mm+0x13/0x450 [ 67.969160][ T7015] ? __lock_acquire+0x16e3/0x56e0 [ 67.974193][ T7015] mpage_readahead+0x3a2/0x870 [ 67.979041][ T7015] ? do_mpage_readpage+0x1ef0/0x1ef0 [ 67.984736][ T7015] ? __blkdev_direct_IO_simple+0x940/0x940 [ 67.992945][ T7015] ? lock_downgrade+0x820/0x820 [ 67.998657][ T7015] ? blkdev_write_begin+0x40/0x40 [ 68.004288][ T7015] read_pages+0x1df/0x8d0 [ 68.009343][ T7015] ? read_cache_pages+0x750/0x750 [ 68.014909][ T7015] ? add_to_page_cache_lru+0x2ab/0x5b0 [ 68.020624][ T7015] ? 0xffffffff81000000 [ 68.026167][ T7015] ? alloc_pages_current+0x18f/0x280 [ 68.036758][ T7015] ? __page_cache_alloc+0x10b/0x450 [ 68.044434][ T7015] page_cache_readahead_unbounded+0x572/0x850 [ 68.054005][ T7015] ? lock_acquire+0x1f1/0xad0 [ 68.066990][ T7015] ? read_pages+0x8d0/0x8d0 [ 68.073384][ T7015] ? blk_cgroup_congested+0x1f9/0x3e0 [ 68.082000][ T7015] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 68.091419][ T7015] force_page_cache_readahead+0x2e9/0x460 [ 68.100843][ T7015] page_cache_sync_readahead+0x113/0x130 [ 68.114135][ T7015] generic_file_buffered_read+0x108c/0x27e0 [ 68.123282][ T7015] generic_file_read_iter+0x396/0x4e0 [ 68.132077][ T7015] blkdev_read_iter+0x11b/0x180 [ 68.138857][ T7015] new_sync_read+0x41a/0x6e0 [ 68.153557][ T7015] ? vfs_dedupe_file_range+0x780/0x780 [ 68.163467][ T7015] ? security_file_permission+0x239/0x470 [ 68.170246][ T7015] __vfs_read+0xc9/0x100 [ 68.179770][ T7015] vfs_read+0x1f6/0x420 [ 68.187475][ T7015] ksys_read+0x12d/0x250 [ 68.200188][ T7015] ? kernel_write+0x120/0x120 [ 68.205253][ T7015] do_syscall_64+0x60/0xe0 [ 68.210814][ T7015] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 68.218851][ T7015] RIP: 0033:0x7f340b2df210 [ 68.227765][ T7015] Code: Bad RIP value. [ 68.238192][ T7015] RSP: 002b:00007fffffc670b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 68.253282][ T7015] RAX: ffffffffffffffda RBX: 0000557cbb660b00 RCX: 00007f340b2df210 [ 68.266118][ T7015] RDX: 0000000000000400 RSI: 0000557cbb660b28 RDI: 000000000000000f [ 68.280011][ T7015] RBP: 0000557cbb661c60 R08: 00007f340b2c9f68 R09: 0000000000000430 [ 68.290398][ T7015] R10: 000000000000006d R11: 0000000000000246 R12: 0000000000000000 [ 68.300382][ T7015] R13: 0000000000000400 R14: 0000557cbb661cb0 R15: 0000000000000400 [ 68.311074][ T7015] Modules linked in: [ 68.332529][ T7015] ---[ end trace efa42a49a310d129 ]--- [ 68.340925][ T7015] RIP: 0010:bdev_read_page+0x35/0x290 [ 68.347169][ T7015] Code: f5 53 48 89 fb 48 83 ec 08 48 89 14 24 e8 03 12 a5 ff 48 8d bb f0 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 e7 01 00 00 4c 8b bb f0 00 00 00 48 b8 00 00 00 [ 68.372443][ T7015] RSP: 0018:ffffc90001baf530 EFLAGS: 00010206 [ 68.379138][ T7015] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff81cf749a [ 68.389704][ T7015] RDX: 000000000000001e RSI: ffffffff81cea51d RDI: 00000000000000f0 [ 68.402780][ T7015] RBP: fff89719b6b00000 R08: 0000000000000001 R09: ffffea000251fec7 [ 68.414114][ T7015] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 68.424411][ T7015] R13: 0000000000000000 R14: 0000000000000000 R15: ffffc90001baf748 [ 68.441539][ T7015] FS: 00007f340c1988c0(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 68.453325][ T7015] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.462913][ T7015] CR2: 00007f251e1ad000 CR3: 000000009495f000 CR4: 00000000001406e0 [ 68.481577][ T7015] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 68.503519][ T7015] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 68.517967][ T7015] Kernel panic - not syncing: Fatal exception [ 68.526947][ T7015] Kernel Offset: disabled [ 68.534265][ T7015] Rebooting in 86400 seconds..