INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.45' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 38.929533] BUG: unable to handle kernel NULL pointer dereference at 00000000000000b0 [ 38.937632] IP: ucma_set_option+0xbba/0x1100 [ 38.942062] PGD 800000019f17c067 P4D 800000019f17c067 PUD 19eab8067 PMD 0 [ 38.949145] Oops: 0000 [#1] SMP PTI [ 38.952788] Dumping ftrace buffer: [ 38.956340] (ftrace buffer empty) [ 38.960063] Modules linked in: [ 38.963290] CPU: 0 PID: 4508 Comm: syz-executor204 Not tainted 4.16.0+ #87 [ 38.970299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 38.979683] RIP: 0010:ucma_set_option+0xbba/0x1100 [ 38.984607] RSP: 0018:ffff8801ab67f9b8 EFLAGS: 00010246 [ 38.989977] RAX: 00000000000000b0 RBX: ffff8801ca2095b8 RCX: ffff880000000000 [ 38.997259] RDX: ffff8801ca2115b8 RSI: aaaaaaaaaaaab000 RDI: 00000000000000b0 [ 39.004532] RBP: ffff8801ab67fb68 R08: 0000000000000000 R09: ffff8801a764fa60 [ 39.011811] R10: 0000000000000001 R11: ffff8801ab670000 R12: 0000000000000000 [ 39.019078] R13: 0000000000000000 R14: ffff88019fb9c9c0 R15: 0000000000000000 [ 39.026351] FS: 00007f8ce4235700(0000) GS:ffff88021fc00000(0000) knlGS:0000000000000000 [ 39.034578] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.040459] CR2: 00000000000000b0 CR3: 000000019f012000 CR4: 00000000001406f0 [ 39.047729] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 39.054995] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 39.062256] Call Trace: [ 39.064886] ucma_write+0x576/0x5e0 [ 39.068565] ? show_ibdev+0xf0/0xf0 [ 39.072238] __vfs_write+0x1a3/0x9f0 [ 39.075986] vfs_write+0x463/0x8d0 [ 39.079586] SYSC_write+0x172/0x360 [ 39.083278] SyS_write+0x55/0x80 [ 39.086694] do_syscall_64+0x309/0x430 [ 39.090601] ? SYSC_read+0x360/0x360 [ 39.094323] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 39.099510] RIP: 0033:0x4456f9 [ 39.102695] RSP: 002b:00007f8ce4234da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 39.110412] RAX: ffffffffffffffda RBX: 00000000006dac24 RCX: 00000000004456f9 [ 39.117679] RDX: 0000000000000020 RSI: 0000000020000a40 RDI: 0000000000000003 [ 39.124947] RBP: 00000000006dac20 R08: 0000000000000000 R09: 0000000000000000 [ 39.132218] R10: 0000000000000000 R11: 0000000000000246 R12: 006d635f616d6472 [ 39.139489] R13: 2f646e6162696e69 R14: 666e692f7665642f R15: 0000000000000003 [ 39.146762] Code: 89 df e8 3a cf 5e fa 0f b6 00 48 89 45 b0 8b 02 89 45 84 48 8b 45 c0 48 05 b0 00 00 00 48 83 7d 88 00 48 89 c7 0f 85 14 01 00 00 <48> 8b 1f e8 ce cf 5e fa 49 c1 e7 04 4a 8d 3c 3b 48 83 c7 08 48 [ 39.166361] RIP: ucma_set_option+0xbba/0x1100 RSP: ffff8801ab67f9b8 [ 39.172752] CR2: 00000000000000b0 [ 39.176213] BUG: unable to handle kernel NULL pointer dereference at 00000000000000b0 [ 39.176455] ---[ end trace eb76b3e507d0e0b3 ]--- [ 39.184227] IP: ucma_set_option+0xbba/0x1100 [ 39.184238] PGD 800000019f17c067 P4D 800000019f17c067 PUD 19eab8067 PMD 0 [ 39.189057] Kernel panic - not syncing: Fatal exception [ 39.206286] Oops: 0000 [#2] SMP PTI [ 39.209912] Dumping ftrace buffer: [ 39.213443] (ftrace buffer empty) [ 39.217144] Modules linked in: [ 39.220354] CPU: 1 PID: 4512 Comm: syz-executor204 Tainted: G D 4.16.0+ #87 [ 39.228664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 39.238041] RIP: 0010:ucma_set_option+0xbba/0x1100 [ 39.242965] RSP: 0018:ffff8801bb3df9b8 EFLAGS: 00010246 [ 39.248332] RAX: 00000000000000b0 RBX: ffff8801a0ec45b8 RCX: ffff880000000000 [ 39.255603] RDX: ffff88019dc5c5b8 RSI: aaaaaaaaaaaab000 RDI: 00000000000000b0 [ 39.262870] RBP: ffff8801bb3dfb68 R08: 0000000000000000 R09: ffff8801bd6efa60 [ 39.270182] R10: 0000000000000001 R11: ffff8801bb3d0000 R12: 0000000000000000 [ 39.277456] R13: 0000000000000000 R14: ffff88019fb22540 R15: 0000000000000000 [ 39.284738] FS: 00007f8ce41f3700(0000) GS:ffff88021fd00000(0000) knlGS:0000000000000000 [ 39.292963] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.298841] CR2: 00000000000000b0 CR3: 000000019f012000 CR4: 00000000001406e0 [ 39.306110] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 39.313383] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 39.320648] Call Trace: [ 39.323276] ucma_write+0x576/0x5e0 [ 39.326911] ? show_ibdev+0xf0/0xf0 [ 39.330545] __vfs_write+0x1a3/0x9f0 [ 39.334279] vfs_write+0x463/0x8d0 [ 39.337882] SYSC_write+0x172/0x360 [ 39.341576] SyS_write+0x55/0x80 [ 39.344996] do_syscall_64+0x309/0x430 [ 39.348903] ? SYSC_read+0x360/0x360 [ 39.352626] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 39.357812] RIP: 0033:0x4456f9 [ 39.360996] RSP: 002b:00007f8ce41f2da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 39.368713] RAX: ffffffffffffffda RBX: 00000000006dac54 RCX: 00000000004456f9 [ 39.375981] RDX: 0000000000000020 RSI: 0000000020000a40 RDI: 0000000000000004 [ 39.383251] RBP: 00000000006dac50 R08: 00007f8ce41f3700 R09: 0000000000000000 [ 39.390521] R10: 00007f8ce41f3700 R11: 0000000000000246 R12: 006d635f616d6472 [ 39.397794] R13: 2f646e6162696e69 R14: 666e692f7665642f R15: 0000000000000003 [ 39.405062] Code: 89 df e8 3a cf 5e fa 0f b6 00 48 89 45 b0 8b 02 89 45 84 48 8b 45 c0 48 05 b0 00 00 00 48 83 7d 88 00 48 89 c7 0f 85 14 01 00 00 <48> 8b 1f e8 ce cf 5e fa 49 c1 e7 04 4a 8d 3c 3b 48 83 c7 08 48 [ 39.424568] RIP: ucma_set_option+0xbba/0x1100 RSP: ffff8801bb3df9b8 [ 39.430961] CR2: 00000000000000b0 [ 39.434917] Dumping ftrace buffer: [ 39.438455] (ftrace buffer empty) [ 39.442147] Kernel Offset: disabled [ 39.445765] Rebooting in 86400 seconds..