[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 74.868795][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 74.868808][ T28] audit: type=1800 audit(1582316725.188:29): pid=9967 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 74.896104][ T28] audit: type=1800 audit(1582316725.188:30): pid=9967 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.132' (ECDSA) to the list of known hosts. syzkaller login: [ 84.264315][T10123] IPVS: ftp: loaded support on port[0] = 21 [ 84.317929][T10123] chnl_net:caif_netlink_parms(): no params data found [ 84.359223][T10123] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.367814][T10123] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.377401][T10123] device bridge_slave_0 entered promiscuous mode [ 84.386717][T10123] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.394393][T10123] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.403284][T10123] device bridge_slave_1 entered promiscuous mode [ 84.423118][T10123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.435248][T10123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.456704][T10123] team0: Port device team_slave_0 added [ 84.464860][T10123] team0: Port device team_slave_1 added [ 84.480288][T10123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.487432][T10123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.513753][T10123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.527022][T10123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.534961][T10123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.562043][T10123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.652759][T10123] device hsr_slave_0 entered promiscuous mode [ 84.730947][T10123] device hsr_slave_1 entered promiscuous mode [ 84.876879][T10123] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.934474][T10123] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.994270][T10123] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.044067][T10123] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.117017][T10123] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.124535][T10123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.132684][T10123] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.139894][T10123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.186437][T10123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.201918][ T3534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.214778][ T3534] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.224158][ T3534] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.233038][ T3534] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 85.246471][T10123] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.258755][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.268113][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.275346][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.287708][ T3534] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.297329][ T3534] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.304643][ T3534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.320719][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.329654][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.350946][ T3534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.360855][ T3534] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.369587][ T3534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.379666][ T3534] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.388489][ T3534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.397054][ T3534] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.406494][ T3534] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.419123][T10123] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.432242][T10123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.441474][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.451858][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.471715][ T2729] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.479619][ T2729] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.495087][T10123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.515580][ T3534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.525666][ T3534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.547232][T10123] device veth0_vlan entered promiscuous mode [ 85.555054][ T3537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.564194][ T3537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.574418][ T3537] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.583273][ T3537] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.595855][T10123] device veth1_vlan entered promiscuous mode [ 85.618305][ T3537] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.628307][ T3537] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.637526][ T3537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.646687][ T3537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.659146][T10123] device veth0_macvtap entered promiscuous mode [ 85.669325][T10123] device veth1_macvtap entered promiscuous mode [ 85.687722][T10123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.695689][ T2729] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.704259][ T2729] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.713217][ T2729] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.722910][ T2729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.737108][T10123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.745136][ T3537] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.755501][ T3537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready executing program [ 86.000414][T10123] infiniband syz1: set active [ 86.006569][T10123] infiniband syz1: added vlan0 [ 86.032318][T10123] general protection fault, probably for non-canonical address 0xdffffc0000000086: 0000 [#1] PREEMPT SMP KASAN [ 86.044112][T10123] KASAN: null-ptr-deref in range [0x0000000000000430-0x0000000000000437] [ 86.052623][T10123] CPU: 0 PID: 10123 Comm: syz-executor085 Not tainted 5.6.0-rc1-syzkaller #0 [ 86.061368][T10123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 86.071525][T10123] RIP: 0010:rds_ib_add_one+0xba/0xcb0 [ 86.076882][T10123] Code: 03 80 3c 02 00 0f 85 6c 0a 00 00 49 8b 9d a8 06 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d bb 30 04 00 00 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 7e [ 86.096560][T10123] RSP: 0018:ffffc9000641ef28 EFLAGS: 00010202 [ 86.102692][T10123] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff87677f5b [ 86.110724][T10123] RDX: 0000000000000086 RSI: ffffffff87677f79 RDI: 0000000000000430 [ 86.118683][T10123] RBP: ffffc9000641ef60 R08: ffff8880a4bfe640 R09: ffffed1012c9909c [ 86.126743][T10123] R10: ffffed1012c9909b R11: ffff8880964c84df R12: ffff8880964c8558 [ 86.134797][T10123] R13: ffff8880964c8000 R14: ffffffff8a904d80 R15: ffffffff8a904e10 [ 86.142923][T10123] FS: 0000000001efe880(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 86.151880][T10123] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.158453][T10123] CR2: 0000000020000000 CR3: 000000009f960000 CR4: 00000000001406f0 [ 86.166452][T10123] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 86.174412][T10123] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 86.182369][T10123] Call Trace: [ 86.185657][T10123] ? rds_ib_remove_one+0x290/0x290 [ 86.190809][T10123] add_client_context+0x3dd/0x550 [ 86.195826][T10123] ? ib_device_get_by_netdev+0x530/0x530 [ 86.201578][T10123] ? rxe_enable_driver+0x68/0x90 [ 86.206508][T10123] enable_device_and_get+0x1df/0x3c0 [ 86.211781][T10123] ? add_one_compat_dev+0x7e0/0x7e0 [ 86.217065][T10123] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 86.222774][T10123] ib_register_device+0xa89/0xe40 [ 86.227785][T10123] ? enable_device_and_get+0x3c0/0x3c0 [ 86.233236][T10123] rxe_register_device+0x52e/0x655 [ 86.238334][T10123] rxe_add+0x122b/0x1661 [ 86.242572][T10123] rxe_net_add+0x91/0xf0 [ 86.246796][T10123] rxe_newlink+0x39/0x90 [ 86.251029][T10123] nldev_newlink+0x28a/0x430 [ 86.255605][T10123] ? nldev_set_doit+0x420/0x420 [ 86.260553][T10123] ? apparmor_cred_prepare+0x7b0/0x7b0 [ 86.266004][T10123] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 86.272231][T10123] ? cap_capable+0x205/0x270 [ 86.276817][T10123] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 86.283057][T10123] ? ns_capable+0x20/0x30 [ 86.287373][T10123] ? __netlink_ns_capable+0x104/0x140 [ 86.292757][T10123] ? nldev_set_doit+0x420/0x420 [ 86.297603][T10123] rdma_nl_rcv+0x5d9/0x980 [ 86.302107][T10123] ? rdma_nl_multicast+0x330/0x330 [ 86.307703][T10123] ? __kasan_check_read+0x11/0x20 [ 86.312810][T10123] ? netlink_deliver_tap+0x248/0xbf0 [ 86.318191][T10123] ? __kasan_check_write+0x14/0x20 [ 86.323298][T10123] netlink_unicast+0x59e/0x7e0 [ 86.328172][T10123] ? netlink_attachskb+0x870/0x870 [ 86.333292][T10123] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 86.339005][T10123] ? __check_object_size+0x3d/0x437 [ 86.344223][T10123] netlink_sendmsg+0x91c/0xea0 [ 86.349673][T10123] ? netlink_unicast+0x7e0/0x7e0 [ 86.354623][T10123] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 86.360670][T10123] ? apparmor_socket_sendmsg+0x2a/0x30 [ 86.366348][T10123] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 86.372796][T10123] ? security_socket_sendmsg+0x8d/0xc0 [ 86.378506][T10123] ? netlink_unicast+0x7e0/0x7e0 [ 86.383757][T10123] sock_sendmsg+0xd7/0x130 [ 86.388269][T10123] ____sys_sendmsg+0x753/0x880 [ 86.393046][T10123] ? kernel_sendmsg+0x50/0x50 [ 86.397730][T10123] ___sys_sendmsg+0x100/0x170 [ 86.402493][T10123] ? sendmsg_copy_msghdr+0x70/0x70 [ 86.407611][T10123] ? do_huge_pmd_anonymous_page+0xceb/0x1a50 [ 86.413898][T10123] ? prep_transhuge_page+0xa0/0xa0 [ 86.419295][T10123] ? do_page_fault+0x579/0x12e1 [ 86.424160][T10123] ? find_held_lock+0x35/0x130 [ 86.429264][T10123] ? do_page_fault+0x579/0x12e1 [ 86.434424][T10123] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 86.441214][T10123] ? __fget_light+0x1ad/0x270 [ 86.446277][T10123] ? __fdget+0x1b/0x20 [ 86.450511][T10123] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 86.456986][T10123] __sys_sendmsg+0x105/0x1d0 [ 86.461588][T10123] ? __sys_sendmsg_sock+0xc0/0xc0 [ 86.466708][T10123] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 86.472439][T10123] ? do_syscall_64+0x26/0x790 [ 86.477471][T10123] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 86.483853][T10123] ? do_syscall_64+0x26/0x790 [ 86.488860][T10123] __x64_sys_sendmsg+0x78/0xb0 [ 86.493834][T10123] do_syscall_64+0xfa/0x790 [ 86.498609][T10123] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 86.504501][T10123] RIP: 0033:0x443499 [ 86.508903][T10123] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 10 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 86.529299][T10123] RSP: 002b:00007fffb68ed3a8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 86.537927][T10123] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443499 [ 86.546090][T10123] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 86.554175][T10123] RBP: 00007fffb68ed3c0 R08: 0000000001bbbbbb R09: 0000000001bbbbbb [ 86.562381][T10123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.570513][T10123] R13: 0000000000404a30 R14: 0000000000000000 R15: 0000000000000000 [ 86.578693][T10123] Modules linked in: [ 86.597830][T10123] ---[ end trace 94775703748b55ea ]--- [ 86.603538][T10123] RIP: 0010:rds_ib_add_one+0xba/0xcb0 [ 86.608974][T10123] Code: 03 80 3c 02 00 0f 85 6c 0a 00 00 49 8b 9d a8 06 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d bb 30 04 00 00 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 7e [ 86.630174][T10123] RSP: 0018:ffffc9000641ef28 EFLAGS: 00010202 [ 86.636668][T10123] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff87677f5b [ 86.644943][T10123] RDX: 0000000000000086 RSI: ffffffff87677f79 RDI: 0000000000000430 [ 86.653716][T10123] RBP: ffffc9000641ef60 R08: ffff8880a4bfe640 R09: ffffed1012c9909c [ 86.662364][T10123] R10: ffffed1012c9909b R11: ffff8880964c84df R12: ffff8880964c8558 [ 86.671238][T10123] R13: ffff8880964c8000 R14: ffffffff8a904d80 R15: ffffffff8a904e10 [ 86.679650][T10123] FS: 0000000001efe880(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 86.688910][T10123] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.696457][T10123] CR2: 00007f58dc960000 CR3: 000000009f960000 CR4: 00000000001406f0 [ 86.704839][T10123] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 86.713293][T10123] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 86.722386][T10123] Kernel panic - not syncing: Fatal exception [ 86.730316][T10123] Kernel Offset: disabled [ 86.734853][T10123] Rebooting in 86400 seconds..