[ 73.599397][ T26] audit: type=1800 audit(1561078025.414:26): pid=9194 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 74.549298][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 74.549310][ T26] audit: type=1800 audit(1561078026.394:29): pid=9194 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 74.575994][ T26] audit: type=1800 audit(1561078026.394:30): pid=9194 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.223' (ECDSA) to the list of known hosts. executing program executing program executing program syzkaller login: [ 100.265203][ T9348] IPVS: ftp: loaded support on port[0] = 21 [ 100.305295][ T9354] IPVS: ftp: loaded support on port[0] = 21 [ 100.307694][ T9356] IPVS: ftp: loaded support on port[0] = 21 [ 100.389896][ T9356] kasan: CONFIG_KASAN_INLINE enabled [ 100.395643][ T9356] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 100.404303][ T9356] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 100.411248][ T9356] CPU: 0 PID: 9356 Comm: syz-executor686 Not tainted 5.2.0-rc5-next-20190620 #19 [ 100.420597][ T9356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 100.430829][ T9356] RIP: 0010:ovs_ct_exit+0x1ac/0x4ec [ 100.436266][ T9356] Code: 01 00 00 00 48 c7 c7 c0 3e da 88 e8 ee 7c 38 fa 49 8d 44 24 50 48 89 c2 48 89 45 d0 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 ee 02 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b [ 100.457272][ T9356] RSP: 0018:ffff888089987890 EFLAGS: 00010206 [ 100.463435][ T9356] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: 1ffff11010a2d570 [ 100.471521][ T9356] RDX: 000000000000000a RSI: 1ffff11010a2d577 RDI: 0000000000000282 [ 100.479832][ T9356] RBP: ffff8880899878d0 R08: ffff88808516a300 R09: 0000000000000002 [ 100.487992][ T9356] R10: fffffbfff13429cf R11: ffffffff89a14e7f R12: 0000000000000000 [ 100.496888][ T9356] R13: ffff8880989d20c0 R14: ffff88809f858480 R15: dffffc0000000000 [ 100.505351][ T9356] FS: 00007f82de852700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 100.514361][ T9356] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 100.521266][ T9356] CR2: 00000000004cc8d0 CR3: 0000000093c7e000 CR4: 00000000001406f0 [ 100.529232][ T9356] Call Trace: [ 100.532537][ T9356] ? kasan_check_read+0x11/0x20 [ 100.537390][ T9356] ovs_exit_net+0x1f8/0xc30 [ 100.542248][ T9356] ? synchronize_rcu.part.0+0xcf/0xe0 [ 100.547647][ T9356] ? kfree_call_rcu+0x10/0x10 [ 100.552341][ T9356] ? ovs_dp_cmd_del+0x270/0x270 [ 100.558397][ T9356] ? ovs_dp_cmd_del+0x270/0x270 [ 100.563338][ T9356] ops_exit_list.isra.0+0xaa/0x150 [ 100.568708][ T9356] setup_net+0x518/0x870 [ 100.573245][ T9356] ? ops_init+0x410/0x410 [ 100.577615][ T9356] ? kasan_check_write+0x14/0x20 [ 100.582941][ T9356] ? down_read_killable+0x51/0x220 [ 100.588146][ T9356] copy_net_ns+0x1df/0x340 [ 100.592916][ T9356] create_new_namespaces+0x400/0x7b0 [ 100.598297][ T9356] copy_namespaces+0x351/0x3f0 [ 100.603159][ T9356] copy_process+0x2920/0x69f0 [ 100.608025][ T9356] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 100.613915][ T9356] ? pidfd_create+0x80/0x80 [ 100.618535][ T9356] ? exit_robust_list+0x2c0/0x2c0 [ 100.623562][ T9356] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 100.629889][ T9356] _do_fork+0x146/0xfa0 [ 100.634189][ T9356] ? copy_init_mm+0x20/0x20 [ 100.638975][ T9356] ? __do_page_fault+0x565/0xdc0 [ 100.644020][ T9356] ? lock_downgrade+0x920/0x920 [ 100.648964][ T9356] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 100.655197][ T9356] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 100.661611][ T9356] __x64_sys_clone+0x186/0x250 [ 100.666592][ T9356] ? __ia32_sys_vfork+0xc0/0xc0 [ 100.671569][ T9356] ? lockdep_hardirqs_on+0x418/0x5d0 [ 100.676966][ T9356] ? trace_hardirqs_on+0x67/0x240 [ 100.682036][ T9356] do_syscall_64+0xfd/0x6a0 [ 100.686809][ T9356] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 100.693004][ T9356] RIP: 0033:0x446659 [ 100.696887][ T9356] Code: e8 5c b3 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 0b 08 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 100.718117][ T9356] RSP: 002b:00007f82de851db8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 100.726620][ T9356] RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 0000000000446659 [ 100.734583][ T9356] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000070024100 [ 100.742734][ T9356] RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000 [ 100.750748][ T9356] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c [ 100.758823][ T9356] R13: 00007fff91b6eb9f R14: 00007f82de8529c0 R15: 20c49ba5e353f7cf [ 100.766915][ T9356] Modules linked in: [ 100.771227][ T9356] ---[ end trace 57f34ee004c96506 ]--- [ 100.776728][ T9356] RIP: 0010:ovs_ct_exit+0x1ac/0x4ec [ 100.777231][ T21] kobject: 'rx-0' (000000003b9f7813): kobject_cleanup, parent 0000000018a695aa [ 100.782111][ T9356] Code: 01 00 00 00 48 c7 c7 c0 3e da 88 e8 ee 7c 38 fa 49 8d 44 24 50 48 89 c2 48 89 45 d0 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 ee 02 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b [ 100.782123][ T9356] RSP: 0018:ffff888089987890 EFLAGS: 00010206 [ 100.792194][ T21] kobject: 'rx-0' (000000003b9f7813): auto cleanup 'remove' event [ 100.812200][ T9356] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: 1ffff11010a2d570 [ 100.812207][ T9356] RDX: 000000000000000a RSI: 1ffff11010a2d577 RDI: 0000000000000282 [ 100.812211][ T9356] RBP: ffff8880899878d0 R08: ffff88808516a300 R09: 0000000000000002 [ 100.812216][ T9356] R10: fffffbfff13429cf R11: ffffffff89a14e7f R12: 0000000000000000 [ 100.812221][ T9356] R13: ffff8880989d20c0 R14: ffff88809f858480 R15: dffffc0000000000 [ 100.812228][ T9356] FS: 00007f82de852700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 100.812233][ T9356] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 100.812238][ T9356] CR2: 00000000004cc8d0 CR3: 0000000093c7e000 CR4: 00000000001406f0 [ 100.812248][ T9356] Kernel panic - not syncing: Fatal exception [ 100.813417][ T9356] Kernel Offset: disabled [ 100.904232][ T9356] Rebooting in 86400 seconds..