[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 70.849868][ T27] audit: type=1800 audit(1583642848.059:25): pid=9732 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 70.871158][ T27] audit: type=1800 audit(1583642848.059:26): pid=9732 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 70.893367][ T27] audit: type=1800 audit(1583642848.059:27): pid=9732 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.126' (ECDSA) to the list of known hosts. syzkaller login: [ 80.749795][ T9886] IPVS: ftp: loaded support on port[0] = 21 [ 80.802902][ T9886] chnl_net:caif_netlink_parms(): no params data found [ 80.842820][ T9886] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.850446][ T9886] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.858777][ T9886] device bridge_slave_0 entered promiscuous mode [ 80.867278][ T9886] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.874418][ T9886] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.882531][ T9886] device bridge_slave_1 entered promiscuous mode [ 80.901283][ T9886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.912320][ T9886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.933202][ T9886] team0: Port device team_slave_0 added [ 80.940798][ T9886] team0: Port device team_slave_1 added [ 80.956517][ T9886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.963476][ T9886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.989573][ T9886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.001978][ T9886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.009099][ T9886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.035180][ T9886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.107381][ T9886] device hsr_slave_0 entered promiscuous mode [ 81.145371][ T9886] device hsr_slave_1 entered promiscuous mode [ 81.293776][ T9886] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.339619][ T9886] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.398722][ T9886] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.447524][ T9886] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.501631][ T9886] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.508919][ T9886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.516835][ T9886] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.523907][ T9886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.570470][ T9886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.584962][ T2778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.596016][ T2778] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.603954][ T2778] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.612577][ T2778] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 81.626898][ T9886] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.638574][ T3368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.647616][ T3368] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.654852][ T3368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.676403][ T2778] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.684901][ T2778] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.692063][ T2778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.700373][ T2778] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.716887][ T2778] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.725793][ T2778] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.734249][ T2778] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.749015][ T3368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.760347][ T9886] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.780837][ T3368] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.789451][ T3368] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.802921][ T9886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.823184][ T3368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.832838][ T3368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.861194][ T2756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.872840][ T2756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.882466][ T9886] device veth0_vlan entered promiscuous mode [ 81.891037][ T2778] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.899658][ T2778] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.911616][ T9886] device veth1_vlan entered promiscuous mode [ 81.933049][ T3368] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.941965][ T3368] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.950577][ T3368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.959413][ T3368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.971296][ T9886] device veth0_macvtap entered promiscuous mode [ 81.983162][ T9886] device veth1_macvtap entered promiscuous mode [ 82.001894][ T9886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.010489][ T3368] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.019887][ T3368] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.028337][ T3368] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.037386][ T3368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.050890][ T9886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.060075][ T2778] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.069711][ T2778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready executing program [ 82.290707][ T9886] infiniband syz1: set active [ 82.296189][ T9886] infiniband syz1: added vlan0 [ 82.322618][ T9886] general protection fault, probably for non-canonical address 0xdffffc0000000086: 0000 [#1] PREEMPT SMP KASAN [ 82.334368][ T9886] KASAN: null-ptr-deref in range [0x0000000000000430-0x0000000000000437] [ 82.342779][ T9886] CPU: 0 PID: 9886 Comm: syz-executor092 Not tainted 5.6.0-rc3-next-20200228-syzkaller #0 [ 82.352861][ T9886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 82.363022][ T9886] RIP: 0010:rds_ib_add_one+0xbb/0xc80 [ 82.368415][ T9886] Code: 80 3c 02 00 0f 85 3a 0a 00 00 49 8b 9c 24 a8 06 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d bb 30 04 00 00 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 4f [ 82.388056][ T9886] RSP: 0018:ffffc90001da6fe0 EFLAGS: 00010202 [ 82.394136][ T9886] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff873e8c5a [ 82.402114][ T9886] RDX: 0000000000000086 RSI: ffffffff873e8c78 RDI: 0000000000000430 [ 82.410089][ T9886] RBP: 0000000000000001 R08: ffff888094c42080 R09: ffffed101427809c [ 82.418076][ T9886] R10: ffffed101427809b R11: ffff8880a13c04df R12: ffff8880a13c0000 [ 82.426031][ T9886] R13: ffff8880a13c0558 R14: ffff8880a13c04d0 R15: ffffffff873e8c00 [ 82.433988][ T9886] FS: 0000000000c0a880(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 82.442901][ T9886] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 82.449473][ T9886] CR2: 0000000020000000 CR3: 00000000a7c63000 CR4: 00000000001406f0 [ 82.457438][ T9886] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 82.465407][ T9886] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 82.473396][ T9886] Call Trace: [ 82.476681][ T9886] ? rds_ib_remove_one+0x280/0x280 [ 82.481881][ T9886] add_client_context+0x400/0x560 [ 82.486898][ T9886] ? ib_device_get_by_netdev+0x510/0x510 [ 82.492515][ T9886] ? rxe_enable_driver+0x63/0x90 [ 82.497448][ T9886] enable_device_and_get+0x1cd/0x3b0 [ 82.502752][ T9886] ? add_one_compat_dev+0x7e0/0x7e0 [ 82.507943][ T9886] ? rxe_ib_alloc_hw_stats+0xf9/0x130 [ 82.513311][ T9886] ib_register_device+0xa12/0xda0 [ 82.518331][ T9886] ? enable_device_and_get+0x3b0/0x3b0 [ 82.523806][ T9886] ? crypto_create_tfm+0x118/0x2f0 [ 82.528907][ T9886] ? crypto_alloc_tfm+0x124/0x340 [ 82.533946][ T9886] ? ib_device_set_netdev+0x499/0x680 [ 82.539308][ T9886] rxe_register_device+0x4fa/0x621 [ 82.544465][ T9886] rxe_add+0x1227/0x1664 [ 82.548719][ T9886] rxe_net_add+0x8c/0xe0 [ 82.553302][ T9886] rxe_newlink+0x34/0x90 [ 82.557547][ T9886] nldev_newlink+0x27f/0x400 [ 82.562125][ T9886] ? nldev_set_doit+0x3e0/0x3e0 [ 82.567009][ T9886] ? apparmor_capable+0x49c/0x8a0 [ 82.572261][ T9886] ? apparmor_capable+0x49c/0x8a0 [ 82.577295][ T9886] ? apparmor_cred_prepare+0x760/0x760 [ 82.582765][ T9886] ? apparmor_cred_prepare+0x760/0x760 [ 82.588232][ T9886] ? cap_capable+0x1eb/0x250 [ 82.592875][ T9886] ? ns_capable_common+0xe2/0x100 [ 82.597900][ T9886] ? nldev_set_doit+0x3e0/0x3e0 [ 82.602755][ T9886] rdma_nl_rcv+0x586/0x900 [ 82.607180][ T9886] ? rdma_nl_multicast+0x310/0x310 [ 82.612321][ T9886] ? netlink_deliver_tap+0x227/0xb50 [ 82.617607][ T9886] netlink_unicast+0x537/0x740 [ 82.622378][ T9886] ? netlink_attachskb+0x810/0x810 [ 82.627543][ T9886] ? _copy_from_iter_full+0x25c/0x870 [ 82.632920][ T9886] ? __phys_addr_symbol+0x2c/0x70 [ 82.637940][ T9886] ? __check_object_size+0x171/0x437 [ 82.643568][ T9886] netlink_sendmsg+0x882/0xe10 [ 82.648323][ T9886] ? aa_af_perm+0x260/0x260 [ 82.652823][ T9886] ? netlink_unicast+0x740/0x740 [ 82.657754][ T9886] ? netlink_unicast+0x740/0x740 [ 82.662682][ T9886] sock_sendmsg+0xcf/0x120 [ 82.667083][ T9886] ____sys_sendmsg+0x6b9/0x7d0 [ 82.671846][ T9886] ? kernel_sendmsg+0x50/0x50 [ 82.676504][ T9886] ? mark_lock+0xbc/0x1220 [ 82.680903][ T9886] ___sys_sendmsg+0x100/0x170 [ 82.685563][ T9886] ? lockdep_hardirqs_on+0x417/0x5d0 [ 82.690828][ T9886] ? sendmsg_copy_msghdr+0x70/0x70 [ 82.696097][ T9886] ? prep_transhuge_page+0xa0/0xa0 [ 82.701188][ T9886] ? pud_val+0x7c/0xf0 [ 82.705244][ T9886] ? pmd_val+0xf0/0xf0 [ 82.709300][ T9886] ? __lock_acquire+0x827/0x5270 [ 82.714216][ T9886] ? find_held_lock+0x2d/0x110 [ 82.718964][ T9886] ? do_page_fault+0x58b/0x12da [ 82.723795][ T9886] ? vm_insert_pages+0x6a0/0x6a0 [ 82.728716][ T9886] ? lock_downgrade+0x7f0/0x7f0 [ 82.733555][ T9886] ? __fget_light+0x1a5/0x270 [ 82.738217][ T9886] __sys_sendmsg+0xec/0x1b0 [ 82.742700][ T9886] ? __sys_sendmsg_sock+0xb0/0xb0 [ 82.747727][ T9886] ? trace_hardirqs_off_caller+0x55/0x230 [ 82.753432][ T9886] ? do_syscall_64+0x21/0x790 [ 82.758096][ T9886] do_syscall_64+0xf6/0x790 [ 82.762590][ T9886] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 82.768465][ T9886] RIP: 0033:0x443499 [ 82.772342][ T9886] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 10 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 82.791931][ T9886] RSP: 002b:00007ffd3f86a4f8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 82.800369][ T9886] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443499 [ 82.808348][ T9886] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 82.816309][ T9886] RBP: 00007ffd3f86a510 R08: 0000000001bbbbbb R09: 0000000001bbbbbb [ 82.824273][ T9886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.832286][ T9886] R13: 0000000000404a30 R14: 0000000000000000 R15: 0000000000000000 [ 82.840256][ T9886] Modules linked in: [ 82.848148][ T9886] ---[ end trace edab9c5444006c3a ]--- [ 82.853620][ T9886] RIP: 0010:rds_ib_add_one+0xbb/0xc80 [ 82.859050][ T9886] Code: 80 3c 02 00 0f 85 3a 0a 00 00 49 8b 9c 24 a8 06 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d bb 30 04 00 00 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 4f [ 82.879043][ T9886] RSP: 0018:ffffc90001da6fe0 EFLAGS: 00010202 [ 82.886367][ T9886] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff873e8c5a [ 82.894355][ T9886] RDX: 0000000000000086 RSI: ffffffff873e8c78 RDI: 0000000000000430 [ 82.902382][ T9886] RBP: 0000000000000001 R08: ffff888094c42080 R09: ffffed101427809c [ 82.910577][ T9886] R10: ffffed101427809b R11: ffff8880a13c04df R12: ffff8880a13c0000 [ 82.918593][ T9886] R13: ffff8880a13c0558 R14: ffff8880a13c04d0 R15: ffffffff873e8c00 [ 82.926593][ T9886] FS: 0000000000c0a880(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 82.935541][ T9886] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 82.942434][ T9886] CR2: 0000000020000000 CR3: 00000000a7c63000 CR4: 00000000001406f0 [ 82.950454][ T9886] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 82.958670][ T9886] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 82.967221][ T9886] Kernel panic - not syncing: Fatal exception [ 82.974600][ T9886] Kernel Offset: disabled [ 82.978936][ T9886] Rebooting in 86400 seconds..