[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 68.138608][ T27] audit: type=1800 audit(1582982195.449:25): pid=9683 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 68.158634][ T27] audit: type=1800 audit(1582982195.449:26): pid=9683 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 68.192043][ T27] audit: type=1800 audit(1582982195.449:27): pid=9683 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.185' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 90.846284][ T9835] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 90.857419][ T9835] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 90.870284][ T9835] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 90.882028][ T9835] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 90.890445][ T9835] CPU: 1 PID: 9835 Comm: syz-executor474 Not tainted 5.6.0-rc3-syzkaller #0 [ 90.899101][ T9835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 90.909189][ T9835] RIP: 0010:nldev_stat_set_doit+0x63c/0xb70 [ 90.915067][ T9835] Code: fc 01 0f 84 58 03 00 00 e8 e1 43 bf fb 4c 8b a3 58 fd ff ff 48 b8 00 00 00 00 00 fc ff df 49 8d 7c 24 04 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 6d [ 90.934828][ T9835] RSP: 0018:ffffc90006417350 EFLAGS: 00010247 [ 90.940931][ T9835] RAX: dffffc0000000000 RBX: ffffc90006417728 RCX: ffffffff85b64360 [ 90.948923][ T9835] RDX: 0000000000000000 RSI: ffffffff85b6436f RDI: 0000000000000004 [ 90.956886][ T9835] RBP: ffffc90006417750 R08: ffff8880a06b0180 R09: ffff88808c744010 [ 90.964850][ T9835] R10: ffffed10118e89dc R11: ffff88808c744ee3 R12: 0000000000000000 [ 90.972854][ T9835] R13: ffff88809ed5c000 R14: ffff8880a8f58c00 R15: 00000000fc979d51 [ 90.980860][ T9835] FS: 0000000000994880(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 90.989776][ T9835] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 90.996347][ T9835] CR2: 0000000020003004 CR3: 000000008f40e000 CR4: 00000000001406e0 [ 91.004317][ T9835] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 91.012282][ T9835] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 91.020324][ T9835] Call Trace: [ 91.023655][ T9835] ? nldev_res_get_qp_doit+0x40/0x40 [ 91.028994][ T9835] ? lock_downgrade+0x920/0x920 [ 91.033897][ T9835] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 91.040131][ T9835] ? ns_capable_common+0x93/0x100 [ 91.045156][ T9835] ? ns_capable+0x20/0x30 [ 91.049475][ T9835] ? __netlink_ns_capable+0x104/0x140 [ 91.054834][ T9835] ? nldev_res_get_qp_doit+0x40/0x40 [ 91.060107][ T9835] rdma_nl_rcv+0x5d9/0x980 [ 91.064560][ T9835] ? rdma_nl_multicast+0x330/0x330 [ 91.069696][ T9835] ? __kasan_check_read+0x11/0x20 [ 91.074713][ T9835] ? netlink_deliver_tap+0x248/0xbf0 [ 91.079982][ T9835] ? __kasan_check_write+0x14/0x20 [ 91.085095][ T9835] netlink_unicast+0x59e/0x7e0 [ 91.089848][ T9835] ? netlink_attachskb+0x870/0x870 [ 91.094956][ T9835] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 91.100781][ T9835] ? __check_object_size+0x3d/0x437 [ 91.106089][ T9835] netlink_sendmsg+0x91c/0xea0 [ 91.110857][ T9835] ? netlink_unicast+0x7e0/0x7e0 [ 91.115783][ T9835] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 91.121311][ T9835] ? apparmor_socket_sendmsg+0x2a/0x30 [ 91.126764][ T9835] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 91.132987][ T9835] ? security_socket_sendmsg+0x8d/0xc0 [ 91.138444][ T9835] ? netlink_unicast+0x7e0/0x7e0 [ 91.143380][ T9835] sock_sendmsg+0xd7/0x130 [ 91.147796][ T9835] ____sys_sendmsg+0x753/0x880 [ 91.152560][ T9835] ? kernel_sendmsg+0x50/0x50 [ 91.157234][ T9835] ? lockdep_init_map+0x1be/0x6d0 [ 91.162283][ T9835] ___sys_sendmsg+0x100/0x170 [ 91.167035][ T9835] ? sendmsg_copy_msghdr+0x70/0x70 [ 91.172185][ T9835] ? __kasan_check_read+0x11/0x20 [ 91.177215][ T9835] ? __lock_acquire+0x8a0/0x4a00 [ 91.182138][ T9835] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 91.188426][ T9835] ? __this_cpu_preempt_check+0x35/0x190 [ 91.194091][ T9835] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 91.200318][ T9835] ? percpu_counter_add_batch+0x13c/0x190 [ 91.206078][ T9835] ? __fd_install+0x1bc/0x640 [ 91.210733][ T9835] ? find_held_lock+0x35/0x130 [ 91.215521][ T9835] ? __fd_install+0x1bc/0x640 [ 91.220238][ T9835] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 91.226516][ T9835] ? __fget_light+0x1ad/0x270 [ 91.231240][ T9835] ? __fdget+0x1b/0x20 [ 91.235293][ T9835] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 91.241548][ T9835] __sys_sendmsg+0x105/0x1d0 [ 91.246124][ T9835] ? __sys_sendmsg_sock+0xc0/0xc0 [ 91.251141][ T9835] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 91.257199][ T9835] ? do_syscall_64+0x26/0x790 [ 91.261858][ T9835] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 91.268025][ T9835] ? do_syscall_64+0x26/0x790 [ 91.272694][ T9835] __x64_sys_sendmsg+0x78/0xb0 [ 91.277498][ T9835] do_syscall_64+0xfa/0x790 [ 91.282135][ T9835] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 91.288141][ T9835] RIP: 0033:0x4403d9 [ 91.292020][ T9835] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 91.311750][ T9835] RSP: 002b:00007ffee8b411c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.320206][ T9835] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004403d9 [ 91.328222][ T9835] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 91.336192][ T9835] RBP: 00000000006ca018 R08: 0000000000000008 R09: 00000000004002c8 [ 91.344158][ T9835] R10: 000000000000004a R11: 0000000000000246 R12: 0000000000401c60 [ 91.352127][ T9835] R13: 0000000000401cf0 R14: 0000000000000000 R15: 0000000000000000 [ 91.360151][ T9835] Modules linked in: [ 91.364816][ T9835] ---[ end trace 12b3bd5ca8353e54 ]--- [ 91.370284][ T9835] RIP: 0010:nldev_stat_set_doit+0x63c/0xb70 [ 91.376222][ T9835] Code: fc 01 0f 84 58 03 00 00 e8 e1 43 bf fb 4c 8b a3 58 fd ff ff 48 b8 00 00 00 00 00 fc ff df 49 8d 7c 24 04 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 6d [ 91.395904][ T9835] RSP: 0018:ffffc90006417350 EFLAGS: 00010247 [ 91.401972][ T9835] RAX: dffffc0000000000 RBX: ffffc90006417728 RCX: ffffffff85b64360 [ 91.410023][ T9835] RDX: 0000000000000000 RSI: ffffffff85b6436f RDI: 0000000000000004 [ 91.418045][ T9835] RBP: ffffc90006417750 R08: ffff8880a06b0180 R09: ffff88808c744010 [ 91.426046][ T9835] R10: ffffed10118e89dc R11: ffff88808c744ee3 R12: 0000000000000000 [ 91.434344][ T9835] R13: ffff88809ed5c000 R14: ffff8880a8f58c00 R15: 00000000fc979d51 [ 91.442328][ T9835] FS: 0000000000994880(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 91.451448][ T9835] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 91.458090][ T9835] CR2: 0000000020003004 CR3: 000000008f40e000 CR4: 00000000001406e0 [ 91.466135][ T9835] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 91.474156][ T9835] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 91.482228][ T9835] Kernel panic - not syncing: Fatal exception [ 91.489725][ T9835] Kernel Offset: disabled [ 91.494060][ T9835] Rebooting in 86400 seconds..