[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 51.901681][ T27] audit: type=1800 audit(1582353977.391:25): pid=8510 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 51.921591][ T27] audit: type=1800 audit(1582353977.401:26): pid=8510 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 51.971053][ T27] audit: type=1800 audit(1582353977.401:27): pid=8510 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.172' (ECDSA) to the list of known hosts. syzkaller login: [ 63.125237][ T8662] IPVS: ftp: loaded support on port[0] = 21 [ 63.168338][ T8662] chnl_net:caif_netlink_parms(): no params data found [ 63.200534][ T8662] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.208446][ T8662] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.216354][ T8662] device bridge_slave_0 entered promiscuous mode [ 63.224613][ T8662] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.232134][ T8662] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.239968][ T8662] device bridge_slave_1 entered promiscuous mode [ 63.255429][ T8662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.266242][ T8662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.283727][ T8662] team0: Port device team_slave_0 added [ 63.291048][ T8662] team0: Port device team_slave_1 added [ 63.304692][ T8662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.311701][ T8662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.338431][ T8662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.350911][ T8662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.357908][ T8662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.384342][ T8662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.444008][ T8662] device hsr_slave_0 entered promiscuous mode [ 63.482316][ T8662] device hsr_slave_1 entered promiscuous mode [ 63.603111][ T8662] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.654500][ T8662] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.694588][ T8662] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.773781][ T8662] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.864796][ T8662] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.872130][ T8662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.879651][ T8662] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.887349][ T8662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.925327][ T8662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.937675][ T2766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.947695][ T2766] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.955622][ T2766] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.964427][ T2766] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 63.977008][ T8662] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.987160][ T2921] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.996362][ T2921] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.003673][ T2921] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.014776][ T2766] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.023394][ T2766] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.030431][ T2766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.055338][ T2934] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.064397][ T2934] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.073619][ T2934] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.082281][ T2934] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.090648][ T2934] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.100626][ T8662] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.117205][ T2921] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.124659][ T2921] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.136508][ T8662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.152684][ T2921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.169312][ T2934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.178406][ T2934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.187829][ T2934] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.195909][ T2934] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.205641][ T8662] device veth0_vlan entered promiscuous mode [ 64.216536][ T8662] device veth1_vlan entered promiscuous mode [ 64.238852][ T2921] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.247164][ T2921] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.255391][ T2921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.264051][ T2921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.274876][ T8662] device veth0_macvtap entered promiscuous mode [ 64.283993][ T8662] device veth1_macvtap entered promiscuous mode [ 64.298818][ T8662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.306781][ T2921] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.315480][ T2921] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.323829][ T2921] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.332601][ T2921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.344769][ T8662] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.352534][ T2766] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.361006][ T2766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready executing program [ 64.507777][ T8662] vcan0 speed is unknown, defaulting to 1000 [ 64.514753][ T8662] vcan0 speed is unknown, defaulting to 1000 [ 64.521460][ T8662] vcan0 speed is unknown, defaulting to 1000 [ 64.584018][ T8662] infiniband syz1: set active [ 64.589593][ T2921] vcan0 speed is unknown, defaulting to 1000 [ 64.592863][ T8662] infiniband syz1: added vcan0 [ 64.620137][ T8662] general protection fault, probably for non-canonical address 0xdffffc0000000086: 0000 [#1] PREEMPT SMP KASAN [ 64.631971][ T8662] KASAN: null-ptr-deref in range [0x0000000000000430-0x0000000000000437] [ 64.640394][ T8662] CPU: 1 PID: 8662 Comm: syz-executor220 Not tainted 5.6.0-rc2-syzkaller #0 [ 64.649068][ T8662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 64.659118][ T8662] RIP: 0010:rds_ib_add_one+0x81/0xe50 [ 64.666128][ T8662] Code: b7 a8 06 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 0e e4 1d fa bb 30 04 00 00 49 03 1e 48 89 d8 48 c1 e8 03 <42> 8a 04 28 84 c0 0f 85 f0 0a 00 00 8b 1b 48 c7 c0 28 0c 09 89 48 [ 64.686232][ T8662] RSP: 0018:ffffc900062bf298 EFLAGS: 00010202 [ 64.692392][ T8662] RAX: 0000000000000086 RBX: 0000000000000430 RCX: 0000000000000000 [ 64.700432][ T8662] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 64.708392][ T8662] RBP: ffffc900062bf2f0 R08: ffffffff87964c3c R09: ffffed101287789c [ 64.716612][ T8662] R10: ffffed101287789c R11: 0000000000000000 R12: 0000000000000000 [ 64.724599][ T8662] R13: dffffc0000000000 R14: ffff8880943bc6a8 R15: ffff8880943bc000 [ 64.732609][ T8662] FS: 0000000000dc4880(0000) GS:ffff8880aeb00000(0000) knlGS:0000000000000000 [ 64.741657][ T8662] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.748234][ T8662] CR2: 0000000000f9baa8 CR3: 00000000a819f000 CR4: 00000000001406e0 [ 64.756451][ T8662] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 64.764655][ T8662] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 64.772613][ T8662] Call Trace: [ 64.775955][ T8662] ? _raw_spin_unlock+0x27/0x40 [ 64.780980][ T8662] ? rds_ib_get_client_data+0x1a0/0x1a0 [ 64.786608][ T8662] add_client_context+0x482/0x660 [ 64.791626][ T8662] enable_device_and_get+0x15b/0x370 [ 64.797008][ T8662] ib_register_device+0x124d/0x15b0 [ 64.802205][ T8662] ? crypto_alloc_tfm+0x335/0x360 [ 64.807383][ T8662] rxe_register_device+0x3f6/0x530 [ 64.812525][ T8662] rxe_add+0x1373/0x14f0 [ 64.816769][ T8662] rxe_net_add+0x79/0xe0 [ 64.821223][ T8662] rxe_newlink+0x31/0x90 [ 64.825487][ T8662] nldev_newlink+0x403/0x4a0 [ 64.830156][ T8662] ? nldev_set_doit+0x340/0x340 [ 64.835149][ T8662] rdma_nl_rcv+0x701/0xa20 [ 64.839611][ T8662] netlink_unicast+0x766/0x920 [ 64.844372][ T8662] netlink_sendmsg+0xa2b/0xd40 [ 64.849134][ T8662] ? netlink_getsockopt+0x9f0/0x9f0 [ 64.854430][ T8662] ____sys_sendmsg+0x4f7/0x7f0 [ 64.859337][ T8662] __sys_sendmsg+0x1ed/0x290 [ 64.863920][ T8662] ? handle_mm_fault+0x173a/0x2900 [ 64.869019][ T8662] ? __kasan_check_write+0x14/0x20 [ 64.874117][ T8662] ? __up_read+0x231/0x740 [ 64.878531][ T8662] ? check_preemption_disabled+0xb4/0x260 [ 64.884398][ T8662] ? debug_smp_processor_id+0x9/0x20 [ 64.889665][ T8662] ? __kasan_check_write+0x14/0x20 [ 64.895086][ T8662] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 64.901001][ T8662] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 64.906822][ T8662] ? do_syscall_64+0x1d/0x1c0 [ 64.911506][ T8662] __x64_sys_sendmsg+0x7f/0x90 [ 64.916305][ T8662] do_syscall_64+0xf7/0x1c0 [ 64.921194][ T8662] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 64.927206][ T8662] RIP: 0033:0x443499 [ 64.931235][ T8662] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 10 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 64.951267][ T8662] RSP: 002b:00007fffe3ab68a8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.959977][ T8662] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443499 [ 64.967936][ T8662] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 64.976008][ T8662] RBP: 00007fffe3ab68c0 R08: 0000000001bbbbbb R09: 0000000001bbbbbb [ 64.984131][ T8662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.992092][ T8662] R13: 0000000000404a30 R14: 0000000000000000 R15: 0000000000000000 [ 65.000088][ T8662] Modules linked in: [ 65.006530][ T8662] ---[ end trace 5d544ed92891b9e6 ]--- [ 65.012168][ T8662] RIP: 0010:rds_ib_add_one+0x81/0xe50 [ 65.017542][ T8662] Code: b7 a8 06 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 0e e4 1d fa bb 30 04 00 00 49 03 1e 48 89 d8 48 c1 e8 03 <42> 8a 04 28 84 c0 0f 85 f0 0a 00 00 8b 1b 48 c7 c0 28 0c 09 89 48 [ 65.038515][ T8662] RSP: 0018:ffffc900062bf298 EFLAGS: 00010202 [ 65.044763][ T8662] RAX: 0000000000000086 RBX: 0000000000000430 RCX: 0000000000000000 [ 65.053579][ T8662] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 65.061614][ T8662] RBP: ffffc900062bf2f0 R08: ffffffff87964c3c R09: ffffed101287789c [ 65.069672][ T8662] R10: ffffed101287789c R11: 0000000000000000 R12: 0000000000000000 [ 65.077837][ T8662] R13: dffffc0000000000 R14: ffff8880943bc6a8 R15: ffff8880943bc000 [ 65.085851][ T8662] FS: 0000000000dc4880(0000) GS:ffff8880aeb00000(0000) knlGS:0000000000000000 [ 65.094805][ T8662] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 65.101381][ T8662] CR2: 0000000000f9baa8 CR3: 00000000a819f000 CR4: 00000000001406e0 [ 65.109870][ T8662] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 65.118217][ T8662] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 65.127273][ T8662] Kernel panic - not syncing: Fatal exception [ 65.134774][ T8662] Kernel Offset: disabled [ 65.139111][ T8662] Rebooting in 86400 seconds..