Warning: Permanently added '10.128.1.7' (ECDSA) to the list of known hosts. 2020/05/24 18:27:25 parsed 1 programs 2020/05/24 18:27:26 executed programs: 0 syzkaller login: [ 56.417767][ T6813] IPVS: ftp: loaded support on port[0] = 21 [ 56.511262][ T6813] chnl_net:caif_netlink_parms(): no params data found [ 56.567152][ T6813] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.575064][ T6813] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.584082][ T6813] device bridge_slave_0 entered promiscuous mode [ 56.593340][ T6813] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.601453][ T6813] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.609770][ T6813] device bridge_slave_1 entered promiscuous mode [ 56.631017][ T6813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.642813][ T6813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.666216][ T6813] team0: Port device team_slave_0 added [ 56.674136][ T6813] team0: Port device team_slave_1 added [ 56.692481][ T6813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.699832][ T6813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.726796][ T6813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.740587][ T6813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.748039][ T6813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.774744][ T6813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.840609][ T6813] device hsr_slave_0 entered promiscuous mode [ 56.896739][ T6813] device hsr_slave_1 entered promiscuous mode [ 57.024397][ T6813] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.069300][ T6813] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.129236][ T6813] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.168657][ T6813] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.243836][ T6813] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.251195][ T6813] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.259219][ T6813] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.266501][ T6813] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.314915][ T6813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.330214][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.340462][ T2479] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.349345][ T2479] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.358438][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 57.372134][ T6813] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.383836][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.393420][ T3781] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.400772][ T3781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.413985][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.423706][ T2479] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.431019][ T2479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.456914][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.465481][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.477535][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.489488][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.501371][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.511168][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.523324][ T6813] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.544390][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.553662][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.568004][ T6813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.590668][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.602478][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.623538][ T6813] device veth0_vlan entered promiscuous mode [ 57.635553][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.645429][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.655434][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.664555][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.678266][ T6813] device veth1_vlan entered promiscuous mode [ 57.701091][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.709739][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.718166][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.728000][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.739577][ T6813] device veth0_macvtap entered promiscuous mode [ 57.751156][ T6813] device veth1_macvtap entered promiscuous mode [ 57.770356][ T6813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.779007][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.788546][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.797407][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.806616][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.820446][ T6813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.827851][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.837701][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.094829][ T7026] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 58.117712][ C0] hrtimer: interrupt took 29512 ns 2020/05/24 18:27:31 executed programs: 24 2020/05/24 18:27:36 executed programs: 64 [ 70.045637][ T8143] general protection fault, probably for non-canonical address 0xdffffc000000002a: 0000 [#1] PREEMPT SMP KASAN [ 70.058323][ T8143] KASAN: null-ptr-deref in range [0x0000000000000150-0x0000000000000157] [ 70.066733][ T8143] CPU: 0 PID: 8143 Comm: syz-executor.0 Not tainted 5.7.0-rc6-next-20200522-syzkaller #0 [ 70.076520][ T8143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.086580][ T8143] RIP: 0010:__lock_acquire+0xe1b/0x48a0 [ 70.092124][ T8143] Code: b6 0a 41 be 01 00 00 00 0f 86 ce 0b 00 00 89 05 ab 87 b6 0a e9 c3 0b 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 d2 48 c1 ea 03 <80> 3c 02 00 0f 85 e5 2c 00 00 49 81 3a 40 75 e5 8b 0f 84 b0 f2 ff [ 70.111865][ T8143] RSP: 0018:ffffc900043cf7b8 EFLAGS: 00010002 [ 70.117905][ T8143] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 70.125866][ T8143] RDX: 000000000000002a RSI: 0000000000000000 RDI: 0000000000000150 [ 70.133833][ T8143] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 70.141782][ T8143] R10: 0000000000000150 R11: 0000000000000001 R12: 0000000000000000 [ 70.149745][ T8143] R13: ffff8880966f8240 R14: 0000000000000000 R15: 0000000000000000 [ 70.157699][ T8143] FS: 00007f6300c10700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 70.166663][ T8143] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 70.173295][ T8143] CR2: 00007f6300bcbdb8 CR3: 0000000092f4d000 CR4: 00000000001426f0 [ 70.181253][ T8143] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 70.189224][ T8143] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 70.197184][ T8143] Call Trace: [ 70.200484][ T8143] ? __lock_acquire+0x2224/0x48a0 [ 70.205482][ T8143] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 70.211442][ T8143] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 70.217399][ T8143] lock_acquire+0x1f2/0x8f0 [ 70.221895][ T8143] ? start_creating+0xa8/0x250 [ 70.226646][ T8143] ? lock_release+0x800/0x800 [ 70.231308][ T8143] ? find_held_lock+0x2d/0x110 [ 70.236043][ T8143] ? simple_pin_fs+0x8f/0x190 [ 70.240704][ T8143] down_write+0x8d/0x150 [ 70.244932][ T8143] ? start_creating+0xa8/0x250 [ 70.249679][ T8143] ? down_write_killable+0x170/0x170 [ 70.254936][ T8143] ? do_raw_spin_unlock+0x171/0x260 [ 70.260106][ T8143] ? mntput+0xc/0x90 [ 70.263992][ T8143] start_creating+0xa8/0x250 [ 70.268569][ T8143] __debugfs_create_file+0x62/0x400 [ 70.273744][ T8143] kvm_arch_create_vcpu_debugfs+0x9f/0x200 [ 70.279540][ T8143] kvm_vm_ioctl+0x1c28/0x2460 [ 70.284193][ T8143] ? kvm_unregister_device_ops+0x60/0x60 [ 70.289813][ T8143] ? kfree+0x1fe/0x2b0 [ 70.293861][ T8143] ? tomoyo_path_number_perm+0x238/0x4d0 [ 70.299477][ T8143] ? tomoyo_execute_permission+0x470/0x470 [ 70.305269][ T8143] ? __fget_files+0x30d/0x500 [ 70.309926][ T8143] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 70.315356][ T8143] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 70.321394][ T8143] ? retint_kernel+0x2b/0x2b [ 70.325957][ T8143] ? trace_hardirqs_on_caller+0x64/0x240 [ 70.331578][ T8143] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 70.337009][ T8143] ? __this_cpu_preempt_check+0x84/0x190 [ 70.342615][ T8143] ? retint_kernel+0x2b/0x2b [ 70.347178][ T8143] ? kvm_unregister_device_ops+0x60/0x60 [ 70.352799][ T8143] ? ksys_ioctl+0xb2/0x180 [ 70.357461][ T8143] ? kvm_unregister_device_ops+0x60/0x60 [ 70.363080][ T8143] ksys_ioctl+0x11a/0x180 [ 70.367399][ T8143] __x64_sys_ioctl+0x6f/0xb0 [ 70.371962][ T8143] do_syscall_64+0xf6/0x7d0 [ 70.376454][ T8143] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 70.382323][ T8143] RIP: 0033:0x45ca29 [ 70.386278][ T8143] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 70.405875][ T8143] RSP: 002b:00007f6300c0fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 70.414256][ T8143] RAX: ffffffffffffffda RBX: 00000000004e73c0 RCX: 000000000045ca29 [ 70.422199][ T8143] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 70.430185][ T8143] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 70.438134][ T8143] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 70.446083][ T8143] R13: 0000000000000396 R14: 00000000004c62c6 R15: 00007f6300c106d4 [ 70.454034][ T8143] Modules linked in: [ 70.457915][ T8143] ---[ end trace b2ea4e12631736e7 ]--- [ 70.463369][ T8143] RIP: 0010:__lock_acquire+0xe1b/0x48a0 [ 70.469159][ T8143] Code: b6 0a 41 be 01 00 00 00 0f 86 ce 0b 00 00 89 05 ab 87 b6 0a e9 c3 0b 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 d2 48 c1 ea 03 <80> 3c 02 00 0f 85 e5 2c 00 00 49 81 3a 40 75 e5 8b 0f 84 b0 f2 ff [ 70.488738][ T8143] RSP: 0018:ffffc900043cf7b8 EFLAGS: 00010002 [ 70.494778][ T8143] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 70.502721][ T8143] RDX: 000000000000002a RSI: 0000000000000000 RDI: 0000000000000150 [ 70.510687][ T8143] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 70.518636][ T8143] R10: 0000000000000150 R11: 0000000000000001 R12: 0000000000000000 [ 70.526589][ T8143] R13: ffff8880966f8240 R14: 0000000000000000 R15: 0000000000000000 [ 70.534547][ T8143] FS: 00007f6300c10700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 70.543532][ T8143] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 70.550085][ T8143] CR2: 00007f6300bcbdb8 CR3: 0000000092f4d000 CR4: 00000000001426f0 [ 70.558090][ T8143] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 70.566064][ T8143] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 70.574027][ T8143] Kernel panic - not syncing: Fatal exception [ 70.581464][ T8143] Kernel Offset: disabled [ 70.586440][ T8143] Rebooting in 86400 seconds..