[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 60.081608][ T28] audit: type=1800 audit(1574328878.343:25): pid=8974 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 60.102254][ T28] audit: type=1800 audit(1574328878.343:26): pid=8974 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 60.153307][ T28] audit: type=1800 audit(1574328878.343:27): pid=8974 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.230' (ECDSA) to the list of known hosts. 2019/11/21 09:34:50 fuzzer started 2019/11/21 09:34:51 connecting to host at 10.128.0.26:35165 2019/11/21 09:34:51 checking machine... 2019/11/21 09:34:51 checking revisions... 2019/11/21 09:34:51 testing simple program... syzkaller login: [ 73.524087][ T9142] IPVS: ftp: loaded support on port[0] = 21 2019/11/21 09:34:51 building call list... [ 73.859548][ T744] tipc: TX() has been purged, node left! [ 73.903208][ T744] kasan: CONFIG_KASAN_INLINE enabled [ 73.908863][ T744] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 73.929530][ T744] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 73.936608][ T744] CPU: 1 PID: 744 Comm: kworker/u4:4 Not tainted 5.4.0-rc8-next-20191121-syzkaller #0 [ 73.946177][ T744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 73.956248][ T744] Workqueue: netns cleanup_net [ 73.961008][ T744] RIP: 0010:kernfs_find_ns+0x36/0x380 [ 73.966492][ T744] Code: 55 41 54 49 89 fc 53 48 83 ec 10 48 89 75 d0 e8 30 e1 91 ff 49 8d 7c 24 68 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 24 03 00 00 49 8d bc 24 90 00 00 00 49 8b 5c 24 [ 73.986725][ T744] RSP: 0018:ffff8880a8027878 EFLAGS: 00010202 [ 73.992782][ T744] RAX: dffffc0000000000 RBX: ffffffff884a88e0 RCX: 0000000000000000 [ 74.000939][ T744] RDX: 000000000000000d RSI: ffffffff81e21280 RDI: 0000000000000068 [ 74.008906][ T744] RBP: ffff8880a80278b0 R08: 1ffffffff1217d04 R09: fffffbfff1217d05 [ 74.016865][ T744] R10: ffff8880a80278b0 R11: ffffffff890be827 R12: 0000000000000000 [ 74.024830][ T744] R13: ffffffff884a88a0 R14: 0000000000000000 R15: 0000000000000000 [ 74.032796][ T744] FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 74.041899][ T744] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.048460][ T744] CR2: 000000c420800000 CR3: 00000000a703d000 CR4: 00000000001406e0 [ 74.056420][ T744] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 74.064373][ T744] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 74.072478][ T744] Call Trace: [ 74.075768][ T744] kernfs_find_and_get_ns+0x34/0x70 [ 74.080985][ T744] sysfs_remove_group+0x76/0x1b0 [ 74.085918][ T744] netdev_queue_update_kobjects+0x261/0x3e0 [ 74.091790][ T744] netdev_unregister_kobject+0x15e/0x1f0 [ 74.097402][ T744] rollback_registered_many+0xafe/0x10d0 [ 74.103027][ T744] ? rtnl_lock+0x17/0x20 [ 74.107268][ T744] ? generic_xdp_install+0x4a0/0x4a0 [ 74.112553][ T744] ? find_held_lock+0x35/0x130 [ 74.117313][ T744] ? ip6gre_exit_batch_net+0x1f6/0x760 [ 74.122782][ T744] unregister_netdevice_many.part.0+0x1b/0x1f0 [ 74.129023][ T744] unregister_netdevice_many+0x3b/0x50 [ 74.134478][ T744] ip6gre_exit_batch_net+0x53c/0x760 [ 74.139760][ T744] ? ip6gre_tunnel_link+0x100/0x100 [ 74.144953][ T744] ? ip6gre_tunnel_link+0x100/0x100 [ 74.150254][ T744] ops_exit_list.isra.0+0x10c/0x160 [ 74.155451][ T744] cleanup_net+0x538/0xaf0 [ 74.159858][ T744] ? netns_install+0x1d0/0x1d0 [ 74.164621][ T744] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 74.170163][ T744] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 74.176137][ T744] ? trace_hardirqs_on+0x67/0x240 [ 74.181162][ T744] process_one_work+0x9af/0x1740 [ 74.186096][ T744] ? pwq_dec_nr_in_flight+0x320/0x320 [ 74.191481][ T744] ? lock_acquire+0x190/0x410 [ 74.196271][ T744] worker_thread+0x98/0xe40 [ 74.200780][ T744] ? trace_hardirqs_on+0x67/0x240 [ 74.205817][ T744] kthread+0x361/0x430 [ 74.210064][ T744] ? process_one_work+0x1740/0x1740 [ 74.215254][ T744] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 74.220972][ T744] ret_from_fork+0x24/0x30 [ 74.225378][ T744] Modules linked in: [ 74.239538][ T744] ---[ end trace 7ec02d44de113110 ]--- [ 74.245704][ T744] RIP: 0010:kernfs_find_ns+0x36/0x380 [ 74.259421][ T744] Code: 55 41 54 49 89 fc 53 48 83 ec 10 48 89 75 d0 e8 30 e1 91 ff 49 8d 7c 24 68 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 24 03 00 00 49 8d bc 24 90 00 00 00 49 8b 5c 24 [ 74.279259][ T744] RSP: 0018:ffff8880a8027878 EFLAGS: 00010202 [ 74.285375][ T744] RAX: dffffc0000000000 RBX: ffffffff884a88e0 RCX: 0000000000000000 [ 74.293582][ T744] RDX: 000000000000000d RSI: ffffffff81e21280 RDI: 0000000000000068 [ 74.301691][ T744] RBP: ffff8880a80278b0 R08: 1ffffffff1217d04 R09: fffffbfff1217d05 [ 74.310209][ T744] R10: ffff8880a80278b0 R11: ffffffff890be827 R12: 0000000000000000 [ 74.318359][ T744] R13: ffffffff884a88a0 R14: 0000000000000000 R15: 0000000000000000 [ 74.326486][ T744] FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 74.335549][ T744] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.342267][ T744] CR2: 000000c420a54000 CR3: 00000000a4b8c000 CR4: 00000000001406f0 [ 74.350371][ T744] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 74.359494][ T744] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 74.367473][ T744] Kernel panic - not syncing: Fatal exception [ 74.375038][ T744] Kernel Offset: disabled [ 74.379374][ T744] Rebooting in 86400 seconds..