[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.182' (ECDSA) to the list of known hosts. syzkaller login: [ 70.072286][ T8514] IPVS: ftp: loaded support on port[0] = 21 [ 70.168867][ T8514] chnl_net:caif_netlink_parms(): no params data found [ 70.224180][ T8514] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.231778][ T8514] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.240347][ T8514] device bridge_slave_0 entered promiscuous mode [ 70.249596][ T8514] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.257044][ T8514] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.265061][ T8514] device bridge_slave_1 entered promiscuous mode [ 70.285900][ T8514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.296917][ T8514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.318791][ T8514] team0: Port device team_slave_0 added [ 70.326501][ T8514] team0: Port device team_slave_1 added [ 70.344077][ T8514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.351079][ T8514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.377445][ T8514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.390597][ T8514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.398997][ T8514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.425450][ T8514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.454453][ T8514] device hsr_slave_0 entered promiscuous mode [ 70.461136][ T8514] device hsr_slave_1 entered promiscuous mode [ 70.565574][ T8514] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.580065][ T8514] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.589826][ T8514] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.601849][ T8514] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.628867][ T8514] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.636065][ T8514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.644248][ T8514] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.651331][ T8514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.702667][ T8514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.716724][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.727363][ T3085] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.736186][ T3085] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.744839][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 70.758290][ T8514] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.769760][ T8418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.778900][ T8418] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.786122][ T8418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.804379][ T8418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.813350][ T8418] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.820442][ T8418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.844597][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.854227][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.863581][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.871759][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.882876][ T8514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.893017][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.912701][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.920160][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.930838][ T8514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.952408][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.974241][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.984377][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.992126][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.004743][ T8514] device veth0_vlan entered promiscuous mode [ 71.018432][ T8514] device veth1_vlan entered promiscuous mode [ 71.040842][ T8418] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.049464][ T8418] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.058305][ T8418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.069698][ T8514] device veth0_macvtap entered promiscuous mode [ 71.080588][ T8514] device veth1_macvtap entered promiscuous mode [ 71.098914][ T8514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.107348][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.116998][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.128928][ T8514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.138127][ T8418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.151248][ T8514] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.160200][ T8514] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.169651][ T8514] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 executing program [ 71.179081][ T8514] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.306103][ T8514] infiniband syz1: set active [ 71.311400][ T8514] infiniband syz1: added macvtap0 [ 71.356450][ T8514] RDS/IB: syz1: added [ 71.361055][ T8514] smc: adding ib device syz1 with port count 1 [ 71.375330][ T8514] smc: ib device syz1 port 1 has pnetid [ 71.484961][ T8514] BUG: unable to handle page fault for address: ffffffffffffff84 [ 71.492721][ T8514] #PF: supervisor read access in kernel mode [ 71.498688][ T8514] #PF: error_code(0x0000) - not-present page [ 71.504683][ T8514] PGD b08f067 P4D b08f067 PUD b091067 PMD 0 [ 71.510647][ T8514] Oops: 0000 [#1] PREEMPT SMP KASAN [ 71.515818][ T8514] CPU: 0 PID: 8514 Comm: syz-executor172 Not tainted 5.10.0-syzkaller #0 [ 71.524198][ T8514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.534302][ T8514] RIP: 0010:smc_nl_handle_smcr_dev.isra.0+0x4bd/0x11b0 [ 71.541124][ T8514] Code: 00 00 00 fc ff df 48 8d 7b 84 48 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 59 0c 00 00 <0f> b7 43 84 48 8d 7b 86 48 89 fa 48 c1 ea 03 66 89 84 24 ee 00 00 [ 71.560701][ T8514] RSP: 0018:ffffc9000182f228 EFLAGS: 00010246 [ 71.566740][ T8514] RAX: 0000000000000005 RBX: 0000000000000000 RCX: 0000000000000000 [ 71.574685][ T8514] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffff84 [ 71.582630][ T8514] RBP: ffffffff8ccd0ae0 R08: 0000000000000001 R09: ffffc9000182f310 [ 71.590573][ T8514] R10: fffff52000305e65 R11: 0000000000000000 R12: 000000001b556831 [ 71.598518][ T8514] R13: ffff88802a018540 R14: dffffc0000000000 R15: ffff88801bd16014 [ 71.606499][ T8514] FS: 000000000125e880(0000) GS:ffff8880b9e00000(0000) knlGS:0000000000000000 [ 71.615414][ T8514] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.622320][ T8514] CR2: ffffffffffffff84 CR3: 0000000022328000 CR4: 00000000001506f0 [ 71.630267][ T8514] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 71.638211][ T8514] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 71.646155][ T8514] Call Trace: [ 71.649451][ T8514] ? smc_ib_remove_dev+0x350/0x350 [ 71.654548][ T8514] ? __mutex_lock+0x580/0x1110 [ 71.659292][ T8514] ? smcr_nl_get_device+0x60/0x1f0 [ 71.664375][ T8514] ? __mutex_lock+0x61b/0x1110 [ 71.669127][ T8514] ? mutex_lock_io_nested+0xf60/0xf60 [ 71.674478][ T8514] ? genl_lock_dumpit+0x3c/0x90 [ 71.679309][ T8514] ? netlink_dump+0x680/0xb70 [ 71.683959][ T8514] ? mark_held_locks+0x9f/0xe0 [ 71.688694][ T8514] ? mutex_lock_io_nested+0xf60/0xf60 [ 71.694053][ T8514] smcr_nl_get_device+0xdf/0x1f0 [ 71.698966][ T8514] genl_lock_dumpit+0x60/0x90 [ 71.703627][ T8514] netlink_dump+0x4b9/0xb70 [ 71.708118][ T8514] ? netlink_insert+0x1670/0x1670 [ 71.713124][ T8514] ? __mutex_unlock_slowpath+0xe2/0x610 [ 71.718651][ T8514] ? kasan_unpoison_shadow+0x33/0x40 [ 71.723929][ T8514] ? genl_start+0x44a/0x670 [ 71.728405][ T8514] __netlink_dump_start+0x642/0x900 [ 71.733624][ T8514] ? genl_family_rcv_msg_doit+0x320/0x320 [ 71.739316][ T8514] ? smc_ib_create_protection_domain+0xe0/0xe0 [ 71.745456][ T8514] genl_family_rcv_msg_dumpit+0x2af/0x310 [ 71.751146][ T8514] ? genl_rcv+0x40/0x40 [ 71.755277][ T8514] ? mutex_lock_io_nested+0xf60/0xf60 [ 71.760619][ T8514] ? __lock_acquire+0x16b7/0x5500 [ 71.765628][ T8514] ? genl_family_rcv_msg_doit+0x320/0x320 [ 71.771316][ T8514] ? genl_unlock+0x20/0x20 [ 71.775706][ T8514] ? genl_parallel_done+0xc0/0xc0 [ 71.780705][ T8514] ? __radix_tree_lookup+0x1f3/0x290 [ 71.785974][ T8514] ? genl_get_cmd+0x3cf/0x480 [ 71.790635][ T8514] genl_rcv_msg+0x434/0x580 [ 71.795111][ T8514] ? genl_get_cmd+0x480/0x480 [ 71.799761][ T8514] ? smc_ib_create_protection_domain+0xe0/0xe0 [ 71.805886][ T8514] ? lock_release+0x710/0x710 [ 71.810535][ T8514] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 71.815792][ T8514] netlink_rcv_skb+0x153/0x420 [ 71.820527][ T8514] ? genl_get_cmd+0x480/0x480 [ 71.825193][ T8514] ? netlink_ack+0xaa0/0xaa0 [ 71.829755][ T8514] genl_rcv+0x24/0x40 [ 71.833712][ T8514] netlink_unicast+0x533/0x7d0 [ 71.838447][ T8514] ? netlink_attachskb+0x870/0x870 [ 71.843533][ T8514] ? __phys_addr_symbol+0x2c/0x70 [ 71.848531][ T8514] ? __check_object_size+0x171/0x3f0 [ 71.853789][ T8514] netlink_sendmsg+0x856/0xd90 [ 71.858525][ T8514] ? netlink_unicast+0x7d0/0x7d0 [ 71.863437][ T8514] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 71.868713][ T8514] ? netlink_unicast+0x7d0/0x7d0 [ 71.873625][ T8514] sock_sendmsg+0xcf/0x120 [ 71.878013][ T8514] ____sys_sendmsg+0x6e8/0x810 [ 71.882750][ T8514] ? kernel_sendmsg+0x50/0x50 [ 71.887396][ T8514] ? do_recvmmsg+0x6c0/0x6c0 [ 71.891961][ T8514] ? do_huge_pmd_numa_page+0xe44/0x18c0 [ 71.897479][ T8514] ___sys_sendmsg+0xf3/0x170 [ 71.902056][ T8514] ? sendmsg_copy_msghdr+0x160/0x160 [ 71.907314][ T8514] ? follow_trans_huge_pmd+0xd40/0xd40 [ 71.912749][ T8514] ? find_held_lock+0x2d/0x110 [ 71.917572][ T8514] ? __fget_light+0x215/0x280 [ 71.922488][ T8514] __sys_sendmsg+0xe5/0x1b0 [ 71.926977][ T8514] ? __sys_sendmsg_sock+0xb0/0xb0 [ 71.931978][ T8514] ? syscall_enter_from_user_mode+0x1d/0x50 [ 71.937854][ T8514] do_syscall_64+0x2d/0x70 [ 71.942244][ T8514] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 71.948110][ T8514] RIP: 0033:0x443749 [ 71.952005][ T8514] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb 0d fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 71.971596][ T8514] RSP: 002b:00007ffdfa0236e8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.979993][ T8514] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443749 [ 71.987940][ T8514] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000004 [ 71.995901][ T8514] RBP: 00007ffdfa0236f0 R08: 0000000001bbbbbb R09: 0000000001bbbbbb [ 72.003859][ T8514] R10: 0000000001bbbbbb R11: 0000000000000246 R12: 00007ffdfa023700 [ 72.011805][ T8514] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 72.019818][ T8514] Modules linked in: [ 72.023786][ T8514] CR2: ffffffffffffff84 [ 72.027940][ T8514] ---[ end trace 5b34f4c8e08e3e19 ]--- [ 72.033381][ T8514] RIP: 0010:smc_nl_handle_smcr_dev.isra.0+0x4bd/0x11b0 [ 72.040202][ T8514] Code: 00 00 00 fc ff df 48 8d 7b 84 48 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 59 0c 00 00 <0f> b7 43 84 48 8d 7b 86 48 89 fa 48 c1 ea 03 66 89 84 24 ee 00 00 [ 72.059790][ T8514] RSP: 0018:ffffc9000182f228 EFLAGS: 00010246 [ 72.065830][ T8514] RAX: 0000000000000005 RBX: 0000000000000000 RCX: 0000000000000000 [ 72.073776][ T8514] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffff84 [ 72.081718][ T8514] RBP: ffffffff8ccd0ae0 R08: 0000000000000001 R09: ffffc9000182f310 [ 72.089662][ T8514] R10: fffff52000305e65 R11: 0000000000000000 R12: 000000001b556831 [ 72.097617][ T8514] R13: ffff88802a018540 R14: dffffc0000000000 R15: ffff88801bd16014 [ 72.105563][ T8514] FS: 000000000125e880(0000) GS:ffff8880b9e00000(0000) knlGS:0000000000000000 [ 72.114475][ T8514] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.121034][ T8514] CR2: ffffffffffffff84 CR3: 0000000022328000 CR4: 00000000001506f0 [ 72.128980][ T8514] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 72.136924][ T8514] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 72.144880][ T8514] Kernel panic - not syncing: Fatal exception [ 72.151608][ T8514] Kernel Offset: disabled [ 72.155927][ T8514] Rebooting in 86400 seconds..