[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 81.599317][ T27] audit: type=1800 audit(1583649441.742:25): pid=9316 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 81.636409][ T27] audit: type=1800 audit(1583649441.742:26): pid=9316 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 81.670207][ T27] audit: type=1800 audit(1583649441.752:27): pid=9316 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.42' (ECDSA) to the list of known hosts. syzkaller login: [ 91.602753][ T9469] IPVS: ftp: loaded support on port[0] = 21 [ 91.657711][ T9469] chnl_net:caif_netlink_parms(): no params data found [ 91.696800][ T9469] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.704386][ T9469] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.712352][ T9469] device bridge_slave_0 entered promiscuous mode [ 91.720778][ T9469] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.728141][ T9469] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.735821][ T9469] device bridge_slave_1 entered promiscuous mode [ 91.754554][ T9469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.765400][ T9469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.786699][ T9469] team0: Port device team_slave_0 added [ 91.794328][ T9469] team0: Port device team_slave_1 added [ 91.809537][ T9469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.816631][ T9469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.844944][ T9469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.857653][ T9469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.864685][ T9469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.890893][ T9469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.948436][ T9469] device hsr_slave_0 entered promiscuous mode [ 91.996501][ T9469] device hsr_slave_1 entered promiscuous mode [ 92.128103][ T9469] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.169147][ T9469] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.220049][ T9469] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.279014][ T9469] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.331777][ T9469] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.338947][ T9469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.346702][ T9469] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.353793][ T9469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.395749][ T9469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.411103][ T3068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.422477][ T3068] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.430376][ T3068] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.438548][ T3068] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 92.451142][ T9469] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.462234][ T3208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.470871][ T3208] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.477949][ T3208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.489872][ T3068] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.498664][ T3068] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.505699][ T3068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.527638][ T3068] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 92.536103][ T3068] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 92.546131][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 92.557450][ T3208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.570950][ T3207] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.581611][ T9469] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 92.601319][ T3207] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 92.608844][ T3207] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 92.622483][ T9469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.641323][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 92.661628][ T9469] device veth0_vlan entered promiscuous mode [ 92.669288][ T3208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 92.678813][ T3208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 92.687581][ T3208] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 92.697119][ T3208] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 92.711053][ T9469] device veth1_vlan entered promiscuous mode [ 92.732360][ T3208] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 92.740827][ T3208] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 92.749152][ T3208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.758178][ T3208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.768725][ T9469] device veth0_macvtap entered promiscuous mode [ 92.780001][ T9469] device veth1_macvtap entered promiscuous mode [ 92.795896][ T9469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.803445][ T3208] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 92.814094][ T3208] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.822107][ T3208] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.830888][ T3208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.843265][ T9469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.851171][ T3208] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.860057][ T3208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready executing program [ 93.073758][ T9469] infiniband syz1: set active [ 93.079361][ T9469] infiniband syz1: added vlan0 [ 93.110275][ T9469] general protection fault, probably for non-canonical address 0xdffffc0000000086: 0000 [#1] PREEMPT SMP KASAN [ 93.122038][ T9469] KASAN: null-ptr-deref in range [0x0000000000000430-0x0000000000000437] [ 93.130442][ T9469] CPU: 1 PID: 9469 Comm: syz-executor849 Not tainted 5.6.0-rc3-next-20200228-syzkaller #0 [ 93.140311][ T9469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 93.150369][ T9469] RIP: 0010:rds_ib_add_one+0xbb/0xc80 [ 93.155729][ T9469] Code: 80 3c 02 00 0f 85 3a 0a 00 00 49 8b 9c 24 a8 06 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d bb 30 04 00 00 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 4f [ 93.175324][ T9469] RSP: 0018:ffffc90007fcefe0 EFLAGS: 00010202 [ 93.181384][ T9469] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff873e8c5a [ 93.189419][ T9469] RDX: 0000000000000086 RSI: ffffffff873e8c78 RDI: 0000000000000430 [ 93.197381][ T9469] RBP: 0000000000000001 R08: ffff88808edfa080 R09: ffffed10129c789c [ 93.205382][ T9469] R10: ffffed10129c789b R11: ffff888094e3c4df R12: ffff888094e3c000 [ 93.213380][ T9469] R13: ffff888094e3c558 R14: ffff888094e3c4d0 R15: ffffffff873e8c00 [ 93.221375][ T9469] FS: 0000000000866880(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 93.230282][ T9469] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.236849][ T9469] CR2: 00007f2609434000 CR3: 00000000a005a000 CR4: 00000000001406e0 [ 93.244800][ T9469] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 93.252767][ T9469] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 93.260718][ T9469] Call Trace: [ 93.263997][ T9469] ? rds_ib_remove_one+0x280/0x280 [ 93.269091][ T9469] add_client_context+0x400/0x560 [ 93.274108][ T9469] ? ib_device_get_by_netdev+0x510/0x510 [ 93.279719][ T9469] ? rxe_enable_driver+0x63/0x90 [ 93.284633][ T9469] enable_device_and_get+0x1cd/0x3b0 [ 93.290023][ T9469] ? add_one_compat_dev+0x7e0/0x7e0 [ 93.295247][ T9469] ? rxe_ib_alloc_hw_stats+0xf9/0x130 [ 93.300673][ T9469] ib_register_device+0xa12/0xda0 [ 93.305692][ T9469] ? enable_device_and_get+0x3b0/0x3b0 [ 93.311158][ T9469] ? crypto_create_tfm+0x118/0x2f0 [ 93.316263][ T9469] ? crypto_alloc_tfm+0x124/0x340 [ 93.321280][ T9469] ? ib_device_set_netdev+0x499/0x680 [ 93.326633][ T9469] rxe_register_device+0x4fa/0x621 [ 93.331726][ T9469] rxe_add+0x1227/0x1664 [ 93.335963][ T9469] rxe_net_add+0x8c/0xe0 [ 93.340224][ T9469] rxe_newlink+0x34/0x90 [ 93.344487][ T9469] nldev_newlink+0x27f/0x400 [ 93.349058][ T9469] ? nldev_set_doit+0x3e0/0x3e0 [ 93.353916][ T9469] ? apparmor_capable+0x49c/0x8a0 [ 93.358913][ T9469] ? apparmor_capable+0x49c/0x8a0 [ 93.363915][ T9469] ? apparmor_cred_prepare+0x760/0x760 [ 93.369347][ T9469] ? apparmor_cred_prepare+0x760/0x760 [ 93.374799][ T9469] ? cap_capable+0x1eb/0x250 [ 93.379378][ T9469] ? ns_capable_common+0xe2/0x100 [ 93.384380][ T9469] ? nldev_set_doit+0x3e0/0x3e0 [ 93.389207][ T9469] rdma_nl_rcv+0x586/0x900 [ 93.393599][ T9469] ? rdma_nl_multicast+0x310/0x310 [ 93.398684][ T9469] ? netlink_deliver_tap+0x227/0xb50 [ 93.403950][ T9469] netlink_unicast+0x537/0x740 [ 93.408696][ T9469] ? netlink_attachskb+0x810/0x810 [ 93.413783][ T9469] ? _copy_from_iter_full+0x25c/0x870 [ 93.419131][ T9469] ? __phys_addr_symbol+0x2c/0x70 [ 93.424143][ T9469] ? __check_object_size+0x171/0x437 [ 93.429411][ T9469] netlink_sendmsg+0x882/0xe10 [ 93.434156][ T9469] ? aa_af_perm+0x260/0x260 [ 93.438638][ T9469] ? netlink_unicast+0x740/0x740 [ 93.443555][ T9469] ? netlink_unicast+0x740/0x740 [ 93.448485][ T9469] sock_sendmsg+0xcf/0x120 [ 93.452878][ T9469] ____sys_sendmsg+0x6b9/0x7d0 [ 93.457622][ T9469] ? kernel_sendmsg+0x50/0x50 [ 93.462278][ T9469] ? mark_lock+0xbc/0x1220 [ 93.466702][ T9469] ___sys_sendmsg+0x100/0x170 [ 93.471356][ T9469] ? lockdep_hardirqs_on+0x417/0x5d0 [ 93.476617][ T9469] ? sendmsg_copy_msghdr+0x70/0x70 [ 93.481707][ T9469] ? prep_transhuge_page+0xa0/0xa0 [ 93.486802][ T9469] ? pud_val+0x7c/0xf0 [ 93.490856][ T9469] ? pmd_val+0xf0/0xf0 [ 93.494900][ T9469] ? __lock_acquire+0x827/0x5270 [ 93.499815][ T9469] ? find_held_lock+0x2d/0x110 [ 93.504554][ T9469] ? do_page_fault+0x58b/0x12da [ 93.509387][ T9469] ? vm_insert_pages+0x6a0/0x6a0 [ 93.514303][ T9469] ? lock_downgrade+0x7f0/0x7f0 [ 93.519134][ T9469] ? __fget_light+0x1a5/0x270 [ 93.523805][ T9469] __sys_sendmsg+0xec/0x1b0 [ 93.528297][ T9469] ? __sys_sendmsg_sock+0xb0/0xb0 [ 93.533299][ T9469] ? trace_hardirqs_off_caller+0x55/0x230 [ 93.539001][ T9469] ? do_syscall_64+0x21/0x790 [ 93.543652][ T9469] do_syscall_64+0xf6/0x790 [ 93.548148][ T9469] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 93.554015][ T9469] RIP: 0033:0x443499 [ 93.557902][ T9469] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 10 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 93.577483][ T9469] RSP: 002b:00007ffc84473df8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.585867][ T9469] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443499 [ 93.593904][ T9469] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 93.601855][ T9469] RBP: 00007ffc84473e10 R08: 0000000001bbbbbb R09: 0000000001bbbbbb [ 93.609904][ T9469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.617870][ T9469] R13: 0000000000404a30 R14: 0000000000000000 R15: 0000000000000000 [ 93.625824][ T9469] Modules linked in: [ 93.633033][ T9469] ---[ end trace 0d1825530c868b55 ]--- [ 93.638594][ T9469] RIP: 0010:rds_ib_add_one+0xbb/0xc80 [ 93.643960][ T9469] Code: 80 3c 02 00 0f 85 3a 0a 00 00 49 8b 9c 24 a8 06 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d bb 30 04 00 00 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 4f [ 93.663588][ T9469] RSP: 0018:ffffc90007fcefe0 EFLAGS: 00010202 [ 93.670316][ T9469] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff873e8c5a [ 93.678320][ T9469] RDX: 0000000000000086 RSI: ffffffff873e8c78 RDI: 0000000000000430 [ 93.686859][ T9469] RBP: 0000000000000001 R08: ffff88808edfa080 R09: ffffed10129c789c [ 93.694901][ T9469] R10: ffffed10129c789b R11: ffff888094e3c4df R12: ffff888094e3c000 [ 93.702880][ T9469] R13: ffff888094e3c558 R14: ffff888094e3c4d0 R15: ffffffff873e8c00 [ 93.710851][ T9469] FS: 0000000000866880(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 93.719777][ T9469] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.726368][ T9469] CR2: 00007f2609434000 CR3: 00000000a005a000 CR4: 00000000001406e0 [ 93.734319][ T9469] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 93.742315][ T9469] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 93.752760][ T9469] Kernel panic - not syncing: Fatal exception [ 93.760070][ T9469] Kernel Offset: disabled [ 93.764389][ T9469] Rebooting in 86400 seconds..