[ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.15.205' (ECDSA) to the list of known hosts. syzkaller login: [ 41.668185][ T6792] IPVS: ftp: loaded support on port[0] = 21 [ 41.749601][ T6792] chnl_net:caif_netlink_parms(): no params data found [ 41.794308][ T6792] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.802089][ T6792] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.810457][ T6792] device bridge_slave_0 entered promiscuous mode [ 41.819019][ T6792] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.826263][ T6792] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.833988][ T6792] device bridge_slave_1 entered promiscuous mode [ 41.852382][ T6792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.862926][ T6792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.884150][ T6792] team0: Port device team_slave_0 added [ 41.891275][ T6792] team0: Port device team_slave_1 added [ 41.907500][ T6792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.914523][ T6792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.940672][ T6792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.952893][ T6792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.959969][ T6792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.985963][ T6792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.062169][ T6792] device hsr_slave_0 entered promiscuous mode [ 42.099804][ T6792] device hsr_slave_1 entered promiscuous mode [ 42.208494][ T6792] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 42.231479][ T6792] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 42.272190][ T6792] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 42.331185][ T6792] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 42.382173][ T6792] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.389403][ T6792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.397247][ T6792] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.404362][ T6792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.439937][ T6792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.455645][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.465334][ T17] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.473599][ T17] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.481628][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 42.494285][ T6792] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.504085][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.513566][ T2477] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.520745][ T2477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.532750][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.541662][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.548688][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.570437][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.579635][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.587970][ T2477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.600048][ T6792] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 42.611374][ T6792] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 42.621315][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 42.629834][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.648601][ T6792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.656105][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 42.664506][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 42.682501][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.700567][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.710040][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.717656][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.728410][ T6792] device veth0_vlan entered promiscuous mode [ 42.741009][ T6792] device veth1_vlan entered promiscuous mode [ 42.760799][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.769797][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.780370][ T6792] device veth0_macvtap entered promiscuous mode [ 42.790304][ T6792] device veth1_macvtap entered promiscuous mode [ 42.806255][ T6792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.814411][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 42.823929][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 42.832357][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.841414][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.852943][ T6792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.861612][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.870818][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready executing program [ 43.191495][ T7003] general protection fault, probably for non-canonical address 0xdffffc000000001e: 0000 [#1] PREEMPT SMP KASAN [ 43.203250][ T7003] KASAN: null-ptr-deref in range [0x00000000000000f0-0x00000000000000f7] [ 43.211650][ T7003] CPU: 0 PID: 7003 Comm: systemd-udevd Not tainted 5.8.0-rc3-syzkaller #0 [ 43.220128][ T7003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 43.230174][ T7003] RIP: 0010:bdev_read_page+0x39/0x1d0 [ 43.235589][ T7003] Code: 89 54 24 10 48 89 74 24 08 49 89 fc 49 bf 00 00 00 00 00 fc ff df e8 06 ec a7 ff 49 8d 9c 24 f0 00 00 00 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 d8 ea e6 ff 48 8b 1b 48 8d ab 20 [ 43.255164][ T7003] RSP: 0018:ffffc90001cb7800 EFLAGS: 00010206 [ 43.261200][ T7003] RAX: 000000000000001e RBX: 00000000000000f0 RCX: ffff8880a2c340c0 [ 43.269141][ T7003] RDX: 0000000000000000 RSI: 90001cb794800000 RDI: 0000000000000000 [ 43.277225][ T7003] RBP: ffffc90001cb79a8 R08: ffffffff81cdbce0 R09: fffff94000537cf9 [ 43.285189][ T7003] R10: fffff94000537cf9 R11: 0000000000000000 R12: 0000000000000000 [ 43.293130][ T7003] R13: ffffc90001cb79f8 R14: 0000000000000014 R15: dffffc0000000000 [ 43.301074][ T7003] FS: 00007f807174a8c0(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 43.309971][ T7003] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.316541][ T7003] CR2: 00007ffcb4b46ff8 CR3: 0000000095899000 CR4: 00000000001406f0 [ 43.324500][ T7003] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 43.332443][ T7003] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 43.340384][ T7003] Call Trace: [ 43.343651][ T7003] do_mpage_readpage+0x15d9/0x1d00 [ 43.348753][ T7003] ? xa_load+0x217/0x260 [ 43.352982][ T7003] mpage_readahead+0x38f/0x6b0 [ 43.357737][ T7003] ? blkdev_direct_IO+0xd0/0xd0 [ 43.362581][ T7003] read_pages+0xdb/0x760 [ 43.366811][ T7003] page_cache_readahead_unbounded+0x817/0x9c0 [ 43.372866][ T7003] force_page_cache_readahead+0x31d/0x370 [ 43.378662][ T7003] generic_file_buffered_read+0x3ea/0x2570 [ 43.384438][ T7003] __vfs_read+0x52c/0x6d0 [ 43.388757][ T7003] vfs_read+0x1c4/0x400 [ 43.392917][ T7003] ksys_read+0x11b/0x220 [ 43.397144][ T7003] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 43.403180][ T7003] do_syscall_64+0x73/0xe0 [ 43.407571][ T7003] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 43.413431][ T7003] RIP: 0033:0x7f8070891210 [ 43.417811][ T7003] Code: Bad RIP value. [ 43.421845][ T7003] RSP: 002b:00007ffcb4b496b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 43.430224][ T7003] RAX: ffffffffffffffda RBX: 00005635d30c8ae0 RCX: 00007f8070891210 [ 43.438189][ T7003] RDX: 0000000000000400 RSI: 00005635d30c8b08 RDI: 000000000000000f [ 43.446137][ T7003] RBP: 00005635d30c9830 R08: 00007f807087bf68 R09: 0000000000000430 [ 43.454079][ T7003] R10: 000000000000006d R11: 0000000000000246 R12: 0000000000000000 [ 43.462035][ T7003] R13: 0000000000000400 R14: 00005635d30c9880 R15: 0000000000000400 [ 43.469993][ T7003] Modules linked in: [ 43.477099][ T7003] ---[ end trace 3e6d20ed1f36ea47 ]--- [ 43.482879][ T7003] RIP: 0010:bdev_read_page+0x39/0x1d0 [ 43.488303][ T7003] Code: 89 54 24 10 48 89 74 24 08 49 89 fc 49 bf 00 00 00 00 00 fc ff df e8 06 ec a7 ff 49 8d 9c 24 f0 00 00 00 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 d8 ea e6 ff 48 8b 1b 48 8d ab 20 [ 43.507962][ T7003] RSP: 0018:ffffc90001cb7800 EFLAGS: 00010206 [ 43.514093][ T7003] RAX: 000000000000001e RBX: 00000000000000f0 RCX: ffff8880a2c340c0 [ 43.522096][ T7003] RDX: 0000000000000000 RSI: 90001cb794800000 RDI: 0000000000000000 [ 43.530667][ T7003] RBP: ffffc90001cb79a8 R08: ffffffff81cdbce0 R09: fffff94000537cf9 [ 43.538683][ T7003] R10: fffff94000537cf9 R11: 0000000000000000 R12: 0000000000000000 [ 43.546641][ T7003] R13: ffffc90001cb79f8 R14: 0000000000000014 R15: dffffc0000000000 [ 43.554690][ T7003] FS: 00007f807174a8c0(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 43.563650][ T7003] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.570304][ T7003] CR2: 00007f4c6803a028 CR3: 0000000095899000 CR4: 00000000001406f0 [ 43.578407][ T7003] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 43.586366][ T7003] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 43.594411][ T7003] Kernel panic - not syncing: Fatal exception [ 43.601737][ T7003] Kernel Offset: disabled [ 43.606090][ T7003] Rebooting in 86400 seconds..