[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 59.745903][ T26] audit: type=1800 audit(1574328878.100:25): pid=8985 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 59.776199][ T26] audit: type=1800 audit(1574328878.110:26): pid=8985 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 59.822594][ T26] audit: type=1800 audit(1574328878.110:27): pid=8985 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.9' (ECDSA) to the list of known hosts. 2019/11/21 09:34:47 fuzzer started 2019/11/21 09:34:49 connecting to host at 10.128.0.26:36867 2019/11/21 09:34:49 checking machine... 2019/11/21 09:34:49 checking revisions... 2019/11/21 09:34:49 testing simple program... syzkaller login: [ 71.777589][ T9154] IPVS: ftp: loaded support on port[0] = 21 2019/11/21 09:34:50 building call list... [ 72.176114][ T528] tipc: TX() has been purged, node left! [ 72.220532][ T528] kasan: CONFIG_KASAN_INLINE enabled [ 72.228547][ T528] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 72.238536][ T528] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 72.245488][ T528] CPU: 0 PID: 528 Comm: kworker/u4:6 Not tainted 5.4.0-rc8-next-20191121-syzkaller #0 [ 72.255015][ T528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 72.265078][ T528] Workqueue: netns cleanup_net [ 72.269846][ T528] RIP: 0010:kernfs_find_ns+0x36/0x380 [ 72.275230][ T528] Code: 55 41 54 49 89 fc 53 48 83 ec 10 48 89 75 d0 e8 30 e1 91 ff 49 8d 7c 24 68 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 24 03 00 00 49 8d bc 24 90 00 00 00 49 8b 5c 24 [ 72.294831][ T528] RSP: 0018:ffff8880a9297878 EFLAGS: 00010202 [ 72.300889][ T528] RAX: dffffc0000000000 RBX: ffffffff884a88e0 RCX: 0000000000000000 [ 72.308850][ T528] RDX: 000000000000000d RSI: ffffffff81e21280 RDI: 0000000000000068 [ 72.316900][ T528] RBP: ffff8880a92978b0 R08: 1ffffffff1217d04 R09: fffffbfff1217d05 [ 72.324861][ T528] R10: ffff8880a92978b0 R11: ffffffff890be827 R12: 0000000000000000 [ 72.333825][ T528] R13: ffffffff884a88a0 R14: 0000000000000000 R15: 0000000000000000 [ 72.341793][ T528] FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 72.350711][ T528] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.357284][ T528] CR2: 000000c420397ff8 CR3: 00000000a039e000 CR4: 00000000001406f0 [ 72.365246][ T528] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 72.373203][ T528] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 72.381158][ T528] Call Trace: [ 72.384450][ T528] kernfs_find_and_get_ns+0x34/0x70 [ 72.389641][ T528] sysfs_remove_group+0x76/0x1b0 [ 72.394574][ T528] netdev_queue_update_kobjects+0x261/0x3e0 [ 72.400481][ T528] netdev_unregister_kobject+0x15e/0x1f0 [ 72.406112][ T528] rollback_registered_many+0xafe/0x10d0 [ 72.411758][ T528] ? rtnl_lock+0x17/0x20 [ 72.416060][ T528] ? generic_xdp_install+0x4a0/0x4a0 [ 72.421361][ T528] ? find_held_lock+0x35/0x130 [ 72.426117][ T528] ? ip6gre_exit_batch_net+0x1f6/0x760 [ 72.431574][ T528] unregister_netdevice_many.part.0+0x1b/0x1f0 [ 72.437716][ T528] unregister_netdevice_many+0x3b/0x50 [ 72.443166][ T528] ip6gre_exit_batch_net+0x53c/0x760 [ 72.448788][ T528] ? ip6gre_tunnel_link+0x100/0x100 [ 72.453986][ T528] ? ip6gre_tunnel_link+0x100/0x100 [ 72.459193][ T528] ops_exit_list.isra.0+0x10c/0x160 [ 72.464397][ T528] cleanup_net+0x538/0xaf0 [ 72.468818][ T528] ? netns_install+0x1d0/0x1d0 [ 72.473583][ T528] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 72.479122][ T528] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 72.485089][ T528] ? trace_hardirqs_on+0x67/0x240 [ 72.490115][ T528] process_one_work+0x9af/0x1740 [ 72.495049][ T528] ? pwq_dec_nr_in_flight+0x320/0x320 [ 72.500410][ T528] ? lock_acquire+0x190/0x410 [ 72.505088][ T528] worker_thread+0x98/0xe40 [ 72.509584][ T528] ? trace_hardirqs_on+0x67/0x240 [ 72.514610][ T528] kthread+0x361/0x430 [ 72.518670][ T528] ? process_one_work+0x1740/0x1740 [ 72.523856][ T528] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 72.529588][ T528] ret_from_fork+0x24/0x30 [ 72.533991][ T528] Modules linked in: [ 72.539681][ T528] ---[ end trace 7ab31e6cab1d1269 ]--- [ 72.545151][ T528] RIP: 0010:kernfs_find_ns+0x36/0x380 [ 72.550965][ T528] Code: 55 41 54 49 89 fc 53 48 83 ec 10 48 89 75 d0 e8 30 e1 91 ff 49 8d 7c 24 68 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 24 03 00 00 49 8d bc 24 90 00 00 00 49 8b 5c 24 [ 72.571056][ T528] RSP: 0018:ffff8880a9297878 EFLAGS: 00010202 [ 72.577365][ T528] RAX: dffffc0000000000 RBX: ffffffff884a88e0 RCX: 0000000000000000 [ 72.585379][ T528] RDX: 000000000000000d RSI: ffffffff81e21280 RDI: 0000000000000068 [ 72.593622][ T528] RBP: ffff8880a92978b0 R08: 1ffffffff1217d04 R09: fffffbfff1217d05 [ 72.601805][ T528] R10: ffff8880a92978b0 R11: ffffffff890be827 R12: 0000000000000000 [ 72.609937][ T528] R13: ffffffff884a88a0 R14: 0000000000000000 R15: 0000000000000000 [ 72.618166][ T528] FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 72.627248][ T528] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.633860][ T528] CR2: 000000c420397ff8 CR3: 00000000a039e000 CR4: 00000000001406f0 [ 72.642120][ T528] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 72.650268][ T528] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 72.658412][ T528] Kernel panic - not syncing: Fatal exception [ 72.665828][ T528] Kernel Offset: disabled [ 72.670158][ T528] Rebooting in 86400 seconds..