[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 83.363843][ T27] audit: type=1800 audit(1584006295.061:25): pid=9358 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 83.384331][ T27] audit: type=1800 audit(1584006295.061:26): pid=9358 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 83.441210][ T27] audit: type=1800 audit(1584006295.061:27): pid=9358 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.240' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 95.853247][ T9510] general protection fault, probably for non-canonical address 0xdffffc000000008f: 0000 [#1] PREEMPT SMP KASAN [ 95.864994][ T9510] KASAN: null-ptr-deref in range [0x0000000000000478-0x000000000000047f] [ 95.873408][ T9510] CPU: 0 PID: 9510 Comm: syz-executor525 Not tainted 5.6.0-rc3-syzkaller #0 [ 95.882071][ T9510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 95.892135][ T9510] RIP: 0010:qdisc_hash_add.part.0+0xc3/0x260 [ 95.898108][ T9510] Code: 69 6b 38 47 86 c8 61 4c 8d 7b 28 48 b8 00 00 00 00 00 fc ff df c1 ed 1c 4d 8d ac ee 78 04 00 00 4c 89 ea 4c 89 ef 48 c1 ea 03 <80> 3c 02 00 0f 85 7b 01 00 00 4c 89 fa 49 8b ac ee 78 04 00 00 48 [ 95.917710][ T9510] RSP: 0018:ffffc90001fb7b48 EFLAGS: 00010202 [ 95.923771][ T9510] RAX: dffffc0000000000 RBX: ffffffff8a387fc0 RCX: ffffffff86278e85 [ 95.931739][ T9510] RDX: 000000000000008f RSI: ffffffff86278e92 RDI: 0000000000000478 [ 95.939707][ T9510] RBP: 0000000000000000 R08: ffff8880a761c200 R09: fffffbfff1469d6d [ 95.947674][ T9510] R10: fffffbfff1469d6c R11: ffffffff8a34eb67 R12: 0000000000000000 [ 95.955640][ T9510] R13: 0000000000000478 R14: 0000000000000000 R15: ffffffff8a387fe8 [ 95.963609][ T9510] FS: 00000000013b9880(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 95.972537][ T9510] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.979116][ T9510] CR2: 0000000020000080 CR3: 00000000a8f58000 CR4: 00000000001406f0 [ 95.987083][ T9510] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 95.995053][ T9510] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 96.003121][ T9510] Call Trace: [ 96.006415][ T9510] qdisc_hash_add+0xa5/0xc0 [ 96.010926][ T9510] dev_qdisc_set_real_num_tx_queues+0x19b/0x250 [ 96.017166][ T9510] ? xdp_rxq_info_reg_mem_model+0x236/0x910 [ 96.023057][ T9510] netif_set_real_num_tx_queues+0x25b/0x700 [ 96.028955][ T9510] ? memset+0x20/0x40 [ 96.032939][ T9510] tun_attach+0x549/0x1550 [ 96.037358][ T9510] ? lock_downgrade+0x7f0/0x7f0 [ 96.042205][ T9510] ? full_name_hash+0xb5/0xf0 [ 96.046886][ T9510] __tun_chr_ioctl+0x1ff7/0x4120 [ 96.051825][ T9510] ? tun_chr_read_iter+0x1d0/0x1d0 [ 96.056932][ T9510] ? file_open_root+0x3d0/0x3d0 [ 96.061798][ T9510] ? tun_chr_compat_ioctl+0x30/0x30 [ 96.066994][ T9510] ksys_ioctl+0x11a/0x180 [ 96.071329][ T9510] __x64_sys_ioctl+0x6f/0xb0 [ 96.075914][ T9510] ? lockdep_hardirqs_on+0x417/0x5d0 [ 96.081198][ T9510] do_syscall_64+0xf6/0x790 [ 96.085705][ T9510] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 96.091634][ T9510] RIP: 0033:0x440209 [ 96.095522][ T9510] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 96.115217][ T9510] RSP: 002b:00007ffda46def28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 96.123618][ T9510] RAX: ffffffffffffffda RBX: 0000000000003172 RCX: 0000000000440209 [ 96.131583][ T9510] RDX: 00000000200000c0 RSI: 00000000400454ca RDI: 0000000000000004 [ 96.139547][ T9510] RBP: 656c6c616b7a7973 R08: 0000000000401a90 R09: 0000000000401a90 [ 96.147509][ T9510] R10: 0000000000401a90 R11: 0000000000000246 R12: 0000000000401a90 [ 96.155476][ T9510] R13: 0000000000401b20 R14: 0000000000000000 R15: 0000000000000000 [ 96.163449][ T9510] Modules linked in: [ 96.168690][ T9510] ---[ end trace e1e02f1f7ff79e04 ]--- [ 96.174424][ T9510] RIP: 0010:qdisc_hash_add.part.0+0xc3/0x260 [ 96.180403][ T9510] Code: 69 6b 38 47 86 c8 61 4c 8d 7b 28 48 b8 00 00 00 00 00 fc ff df c1 ed 1c 4d 8d ac ee 78 04 00 00 4c 89 ea 4c 89 ef 48 c1 ea 03 <80> 3c 02 00 0f 85 7b 01 00 00 4c 89 fa 49 8b ac ee 78 04 00 00 48 [ 96.200197][ T9510] RSP: 0018:ffffc90001fb7b48 EFLAGS: 00010202 [ 96.206411][ T9510] RAX: dffffc0000000000 RBX: ffffffff8a387fc0 RCX: ffffffff86278e85 [ 96.214862][ T9510] RDX: 000000000000008f RSI: ffffffff86278e92 RDI: 0000000000000478 [ 96.222846][ T9510] RBP: 0000000000000000 R08: ffff8880a761c200 R09: fffffbfff1469d6d [ 96.230962][ T9510] R10: fffffbfff1469d6c R11: ffffffff8a34eb67 R12: 0000000000000000 [ 96.239081][ T9510] R13: 0000000000000478 R14: 0000000000000000 R15: ffffffff8a387fe8 [ 96.247184][ T9510] FS: 00000000013b9880(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 96.256212][ T9510] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.262789][ T9510] CR2: 0000000020000080 CR3: 00000000a8f58000 CR4: 00000000001406f0 [ 96.270900][ T9510] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 96.278970][ T9510] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 96.287057][ T9510] Kernel panic - not syncing: Fatal exception [ 96.294345][ T9510] Kernel Offset: disabled [ 96.298664][ T9510] Rebooting in 86400 seconds..