[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 63.998702][ T27] audit: type=1800 audit(1585239533.996:25): pid=9422 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 64.032977][ T27] audit: type=1800 audit(1585239534.006:26): pid=9422 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 64.069880][ T27] audit: type=1800 audit(1585239534.006:27): pid=9422 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.25' (ECDSA) to the list of known hosts. 2020/03/26 16:19:13 parsed 1 programs 2020/03/26 16:19:15 executed programs: 0 syzkaller login: [ 85.338299][ T9591] IPVS: ftp: loaded support on port[0] = 21 [ 85.401552][ T9591] chnl_net:caif_netlink_parms(): no params data found [ 85.443831][ T9591] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.451339][ T9591] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.459678][ T9591] device bridge_slave_0 entered promiscuous mode [ 85.468348][ T9591] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.475687][ T9591] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.483652][ T9591] device bridge_slave_1 entered promiscuous mode [ 85.502107][ T9591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.514727][ T9591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.534972][ T9591] team0: Port device team_slave_0 added [ 85.544189][ T9591] team0: Port device team_slave_1 added [ 85.560021][ T9591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.567218][ T9591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.593654][ T9591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.606363][ T9591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.613443][ T9591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.641231][ T9591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.705815][ T9591] device hsr_slave_0 entered promiscuous mode [ 85.743335][ T9591] device hsr_slave_1 entered promiscuous mode [ 85.856877][ T9591] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.906409][ T9591] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.955859][ T9591] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.016146][ T9591] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.090076][ T9591] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.097720][ T9591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.105822][ T9591] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.112971][ T9591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.159604][ T9591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.174084][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.184606][ T3597] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.192623][ T3597] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.201509][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 86.215750][ T9591] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.226764][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.235819][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.243367][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.256005][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.264988][ T3597] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.272771][ T3597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.294165][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.302811][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.316878][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.332724][ T9591] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 86.344534][ T9591] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.357077][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.366089][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.375715][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.394846][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.402374][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.417348][ T9591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.436956][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.446960][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.468333][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.477365][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.486888][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.495004][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.505304][ T9591] device veth0_vlan entered promiscuous mode [ 86.517936][ T9591] device veth1_vlan entered promiscuous mode [ 86.540239][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.548801][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.557070][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.566233][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.578146][ T9591] device veth0_macvtap entered promiscuous mode [ 86.589636][ T9591] device veth1_macvtap entered promiscuous mode [ 86.607597][ T9591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.615573][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.624421][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.632288][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.641306][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.654745][ T9591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.663517][ T2787] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.672131][ T2787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.005123][ T9603] general protection fault, probably for non-canonical address 0xdffffc0000000030: 0000 [#1] PREEMPT SMP KASAN [ 87.016956][ T9603] KASAN: null-ptr-deref in range [0x0000000000000180-0x0000000000000187] [ 87.025360][ T9603] CPU: 0 PID: 9603 Comm: blkid Not tainted 5.6.0-rc3-next-20200228-syzkaller #0 [ 87.034988][ T9603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 87.045158][ T9603] RIP: 0010:__queue_work+0xe8/0x1280 [ 87.050564][ T9603] Code: c6 00 bf 97 89 4c 89 e7 e8 15 14 48 02 49 8d 86 80 01 00 00 48 89 c2 48 89 44 24 18 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 94 0e 00 00 41 8b 9e 80 01 00 [ 87.070345][ T9603] RSP: 0018:ffffc900022b7078 EFLAGS: 00010006 [ 87.076647][ T9603] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 87.084607][ T9603] RDX: 0000000000000030 RSI: 0000000000000000 RDI: 0000000000000001 [ 87.092677][ T9603] RBP: 0000000000000040 R08: ffff888092230040 R09: fffffbfff1909f6e [ 87.100663][ T9603] R10: fffffbfff1909f6d R11: ffffffff8c84fb6b R12: ffff88809e68b818 [ 87.108647][ T9603] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000040 [ 87.116610][ T9603] FS: 00007f3efc9e8740(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 87.125528][ T9603] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.133186][ T9603] CR2: 0000000002067058 CR3: 00000000a3265000 CR4: 00000000001406f0 [ 87.141143][ T9603] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 87.149101][ T9603] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 87.157049][ T9603] Call Trace: [ 87.160326][ T9603] ? free_object+0x70/0x70 [ 87.164752][ T9603] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 87.170289][ T9603] queue_work_on+0x18b/0x200 [ 87.174863][ T9603] loop_queue_rq+0x5ac/0x1050 [ 87.179521][ T9603] ? find_held_lock+0x2d/0x110 [ 87.184277][ T9603] blk_mq_dispatch_rq_list+0x997/0x17f0 [ 87.189808][ T9603] ? lock_downgrade+0x701/0x7f0 [ 87.194743][ T9603] ? lock_downgrade+0x7f0/0x7f0 [ 87.199573][ T9603] ? elv_rb_del+0x50/0x90 [ 87.203887][ T9603] ? elv_rqhash_del+0x114/0x160 [ 87.208731][ T9603] ? blk_mq_get_driver_tag+0x540/0x540 [ 87.214228][ T9603] ? _raw_spin_unlock+0x24/0x40 [ 87.219208][ T9603] ? dd_dispatch_request+0x240/0x8b0 [ 87.224483][ T9603] blk_mq_do_dispatch_sched+0x188/0x3f0 [ 87.230273][ T9603] ? blk_mq_sched_free_hctx_data+0x1e0/0x1e0 [ 87.236247][ T9603] ? __lock_acquire+0x827/0x5270 [ 87.241189][ T9603] blk_mq_sched_dispatch_requests+0x3cd/0x650 [ 87.247257][ T9603] ? lock_acquire+0x197/0x420 [ 87.251923][ T9603] ? blk_mq_sched_restart+0x90/0x90 [ 87.257097][ T9603] ? rcu_dynticks_curr_cpu_in_eqs+0x4f/0xb0 [ 87.262984][ T9603] __blk_mq_run_hw_queue+0x1b8/0x2c0 [ 87.268274][ T9603] ? blk_mq_hctx_mark_pending+0x240/0x240 [ 87.273983][ T9603] ? lock_acquire+0x197/0x420 [ 87.278643][ T9603] ? hctx_lock+0x7f/0x1d0 [ 87.282978][ T9603] __blk_mq_delay_run_hw_queue+0x522/0x5e0 [ 87.288909][ T9603] blk_mq_run_hw_queue+0x16c/0x2f0 [ 87.294466][ T9603] ? blk_mq_delay_run_hw_queue+0x30/0x30 [ 87.300090][ T9603] ? dd_dispatch_request+0x8b0/0x8b0 [ 87.305372][ T9603] blk_mq_sched_insert_requests+0x2d4/0x5f0 [ 87.311252][ T9603] blk_mq_flush_plug_list+0x452/0x880 [ 87.316612][ T9603] ? mpage_readpages+0x4c4/0x670 [ 87.321626][ T9603] ? blk_mq_insert_requests+0x640/0x640 [ 87.327536][ T9603] ? do_mpage_readpage+0x1fd0/0x1fd0 [ 87.332898][ T9603] blk_flush_plug_list+0x2ff/0x460 [ 87.337997][ T9603] ? blk_insert_cloned_request+0x500/0x500 [ 87.343969][ T9603] ? put_pages_list+0x16/0x400 [ 87.348724][ T9603] blk_finish_plug+0x50/0x97 [ 87.353300][ T9603] ? blkdev_write_begin+0x40/0x40 [ 87.358307][ T9603] read_pages+0x125/0x610 [ 87.362640][ T9603] ? read_cache_pages+0x750/0x750 [ 87.367719][ T9603] ? 0xffffffff81000000 [ 87.371886][ T9603] ? __page_cache_alloc+0x110/0x480 [ 87.377070][ T9603] __do_page_cache_readahead+0x47c/0x570 [ 87.382698][ T9603] ? read_pages+0x610/0x610 [ 87.387269][ T9603] ? lock_downgrade+0x7f0/0x7f0 [ 87.392098][ T9603] force_page_cache_readahead+0x1dc/0x320 [ 87.397804][ T9603] page_cache_sync_readahead+0x4b8/0x520 [ 87.403619][ T9603] generic_file_read_iter+0x1650/0x2a40 [ 87.409153][ T9603] ? lock_downgrade+0x7f0/0x7f0 [ 87.414089][ T9603] ? filemap_write_and_wait_range+0x1e0/0x1e0 [ 87.420160][ T9603] ? aa_file_perm+0x5d2/0x14d0 [ 87.424919][ T9603] ? mem_cgroup_throttle_swaprate+0x190/0x64b [ 87.430980][ T9603] ? aa_path_link+0x300/0x300 [ 87.435639][ T9603] ? __handle_mm_fault+0x28a1/0x3af0 [ 87.440904][ T9603] ? __this_cpu_preempt_check+0x28/0x190 [ 87.446692][ T9603] blkdev_read_iter+0x11b/0x180 [ 87.451532][ T9603] new_sync_read+0x4a2/0x790 [ 87.456139][ T9603] ? vfs_dedupe_file_range+0x750/0x750 [ 87.461599][ T9603] ? security_file_permission+0x8a/0x370 [ 87.467211][ T9603] __vfs_read+0xc9/0x100 [ 87.471443][ T9603] vfs_read+0x1ea/0x430 [ 87.475690][ T9603] ksys_read+0x127/0x250 [ 87.479910][ T9603] ? kernel_write+0x120/0x120 [ 87.484581][ T9603] ? trace_hardirqs_off_caller+0x55/0x230 [ 87.490288][ T9603] do_syscall_64+0xf6/0x790 [ 87.494775][ T9603] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 87.500645][ T9603] RIP: 0033:0x7f3efc2f0310 [ 87.505151][ T9603] Code: 73 01 c3 48 8b 0d 28 4b 2b 00 31 d2 48 29 c2 64 89 11 48 83 c8 ff eb ea 90 90 83 3d e5 a2 2b 00 00 75 10 b8 00 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 6e 8a 01 00 48 89 04 24 [ 87.524825][ T9603] RSP: 002b:00007ffdf060d108 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 87.533228][ T9603] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3efc2f0310 [ 87.541343][ T9603] RDX: 0000000000000400 RSI: 0000000002066c58 RDI: 0000000000000003 [ 87.549384][ T9603] RBP: 0000000002066c30 R08: 0000000000000028 R09: 0000000001680000 [ 87.557335][ T9603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000002066030 [ 87.565368][ T9603] R13: 0000000000000400 R14: 0000000002066080 R15: 0000000002066c48 [ 87.573319][ T9603] Modules linked in: [ 87.577196][ T9603] ---[ end trace 2685d7f0b268f0e0 ]--- [ 87.582907][ T9603] RIP: 0010:__queue_work+0xe8/0x1280 [ 87.588163][ T9603] Code: c6 00 bf 97 89 4c 89 e7 e8 15 14 48 02 49 8d 86 80 01 00 00 48 89 c2 48 89 44 24 18 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 94 0e 00 00 41 8b 9e 80 01 00 [ 87.607775][ T9603] RSP: 0018:ffffc900022b7078 EFLAGS: 00010006 [ 87.613835][ T9603] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 87.622602][ T9603] RDX: 0000000000000030 RSI: 0000000000000000 RDI: 0000000000000001 [ 87.630561][ T9603] RBP: 0000000000000040 R08: ffff888092230040 R09: fffffbfff1909f6e [ 87.638520][ T9603] R10: fffffbfff1909f6d R11: ffffffff8c84fb6b R12: ffff88809e68b818 [ 87.646492][ T9603] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000040 [ 87.654533][ T9603] FS: 00007f3efc9e8740(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 87.663454][ T9603] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.670045][ T9603] CR2: 0000000002067058 CR3: 00000000a3265000 CR4: 00000000001406f0 [ 87.678243][ T9603] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 87.686207][ T9603] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 87.694291][ T9603] Kernel panic - not syncing: Fatal exception [ 87.702322][ T9603] Kernel Offset: disabled [ 87.707378][ T9603] Rebooting in 86400 seconds..