[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 41.703763] audit: type=1800 audit(1548039387.135:25): pid=7849 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 41.724458] audit: type=1800 audit(1548039387.145:26): pid=7849 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 41.743632] audit: type=1800 audit(1548039387.145:27): pid=7849 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.24' (ECDSA) to the list of known hosts. syzkaller login: [ 125.629395] IPVS: ftp: loaded support on port[0] = 21 [ 125.641411] IPVS: ftp: loaded support on port[0] = 21 [ 125.643830] IPVS: ftp: loaded support on port[0] = 21 [ 125.648498] IPVS: ftp: loaded support on port[0] = 21 [ 125.659648] IPVS: ftp: loaded support on port[0] = 21 [ 125.659919] IPVS: ftp: loaded support on port[0] = 21 executing program executing program executing program executing program executing program executing program [ 127.177116] WARNING: CPU: 1 PID: 21 at net/ipv6/xfrm6_tunnel.c:351 xfrm6_tunnel_net_exit+0x2cb/0x500 [ 127.186628] Kernel panic - not syncing: panic_on_warn set ... [ 127.192490] CPU: 1 PID: 21 Comm: kworker/u4:1 Not tainted 5.0.0-rc2+ #35 [ 127.199301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 127.208632] Workqueue: netns cleanup_net [ 127.212732] Call Trace: [ 127.215306] dump_stack+0x1db/0x2d0 [ 127.219260] ? dump_stack_print_info.cold+0x20/0x20 [ 127.224409] ? xfrm6_tunnel_net_exit+0x1f0/0x500 [ 127.229275] panic+0x2cb/0x65c [ 127.232447] ? add_taint.cold+0x16/0x16 [ 127.236442] ? xfrm6_tunnel_net_exit+0x2cb/0x500 [ 127.241212] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 127.246725] ? __probe_kernel_read+0x1f4/0x250 [ 127.251300] ? __warn.cold+0x5/0x48 [ 127.254906] ? __warn+0xe8/0x1d0 [ 127.258254] ? xfrm6_tunnel_net_exit+0x2cb/0x500 [ 127.262991] __warn.cold+0x20/0x48 [ 127.266533] ? xfrm6_tunnel_net_exit+0x2cb/0x500 [ 127.271268] report_bug+0x263/0x2b0 [ 127.274875] do_error_trap+0x11b/0x200 [ 127.278744] do_invalid_op+0x37/0x50 [ 127.282434] ? xfrm6_tunnel_net_exit+0x2cb/0x500 [ 127.287185] invalid_op+0x14/0x20 [ 127.290618] RIP: 0010:xfrm6_tunnel_net_exit+0x2cb/0x500 [ 127.295976] Code: 80 7d 00 00 4c 8b 3b 0f 85 f4 01 00 00 4d 89 7e 80 31 ff 4c 89 fe 41 c6 45 00 f8 e8 bf 53 a0 fa 4d 85 ff 74 92 e8 15 52 a0 fa <0f> 0b eb 89 48 8b 9d 30 ff ff ff 49 8d 46 a0 45 31 e4 49 89 c5 48 [ 127.315079] RSP: 0018:ffff8880a95af748 EFLAGS: 00010293 [ 127.320420] RAX: ffff8880a95a0580 RBX: ffff8880a7f2deb8 RCX: ffffffff86e1acd1 [ 127.327669] RDX: 0000000000000000 RSI: ffffffff86e1acdb RDI: 0000000000000007 [ 127.334916] RBP: ffff8880a95af828 R08: ffff8880a95a0580 R09: ffff8880a95a0e70 [ 127.342298] R10: ffff8880a95a0580 R11: 0000000000000000 R12: 00000000000000ff [ 127.349581] R13: ffffed10152b5ef0 R14: ffff8880a95af800 R15: ffff888092998780 [ 127.356845] ? xfrm6_tunnel_net_exit+0x2c1/0x500 [ 127.361581] ? xfrm6_tunnel_net_exit+0x2cb/0x500 [ 127.366323] ? xfrm6_tunnel_net_exit+0x2cb/0x500 [ 127.371189] ? xfrm6_tunnel_alloc_spi+0xc60/0xc60 [ 127.376014] ? xt_proto_init+0x850/0x850 [ 127.380059] ? calibrate_delay+0xd35/0x1056 [ 127.384361] ? inet_frag_destroy_rcu+0xf0/0xf0 [ 127.388954] ? xfrm6_tunnel_alloc_spi+0xc60/0xc60 [ 127.393775] ops_exit_list.isra.0+0xb0/0x160 [ 127.398165] cleanup_net+0x51d/0xb10 [ 127.401855] ? find_held_lock+0x35/0x120 [ 127.405897] ? netns_install+0x1d0/0x1d0 [ 127.409982] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 127.415513] ? check_preemption_disabled+0x48/0x290 [ 127.420512] ? __lock_is_held+0xb6/0x140 [ 127.424561] process_one_work+0xd0c/0x1ce0 [ 127.428818] ? preempt_notifier_register+0x200/0x200 [ 127.433919] ? __switch_to_asm+0x34/0x70 [ 127.437965] ? pwq_dec_nr_in_flight+0x4a0/0x4a0 [ 127.442614] ? __schedule+0x89f/0x1e60 [ 127.446497] ? pci_mmcfg_check_reserved+0x170/0x170 [ 127.451502] ? worker_thread+0x3b7/0x14a0 [ 127.455630] ? find_held_lock+0x35/0x120 [ 127.459674] ? lock_acquire+0x1db/0x570 [ 127.463743] ? worker_thread+0x3cd/0x14a0 [ 127.467878] ? kasan_check_read+0x11/0x20 [ 127.472026] ? do_raw_spin_lock+0x156/0x360 [ 127.476328] ? lock_release+0xc40/0xc40 [ 127.480283] ? rwlock_bug.part.0+0x90/0x90 [ 127.484514] ? trace_hardirqs_on_caller+0x310/0x310 [ 127.489521] worker_thread+0x143/0x14a0 [ 127.493484] ? process_one_work+0x1ce0/0x1ce0 [ 127.497962] ? __kthread_parkme+0xc3/0x1b0 [ 127.502179] ? lock_acquire+0x1db/0x570 [ 127.506292] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 127.511383] ? lockdep_hardirqs_on+0x415/0x5d0 [ 127.515948] ? trace_hardirqs_on+0xbd/0x310 [ 127.520252] ? __kthread_parkme+0xc3/0x1b0 [ 127.524467] ? trace_hardirqs_off_caller+0x300/0x300 [ 127.529556] ? do_raw_spin_trylock+0x270/0x270 [ 127.534121] ? schedule+0x108/0x350 [ 127.537735] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 127.542821] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 127.548342] ? __kthread_parkme+0xfb/0x1b0 [ 127.552556] kthread+0x357/0x430 [ 127.555901] ? process_one_work+0x1ce0/0x1ce0 [ 127.560486] ? kthread_stop+0x920/0x920 [ 127.564462] ret_from_fork+0x3a/0x50 [ 127.569273] Kernel Offset: disabled [ 127.572979] Rebooting in 86400 seconds..