[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 55.047864][ T26] audit: type=1800 audit(1572799872.193:25): pid=8595 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 55.093190][ T26] audit: type=1800 audit(1572799872.193:26): pid=8595 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 55.125148][ T26] audit: type=1800 audit(1572799872.203:27): pid=8595 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.222' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 63.231467][ T8748] kasan: CONFIG_KASAN_INLINE enabled [ 63.237142][ T8748] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 63.245297][ T8748] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 63.252235][ T8748] CPU: 1 PID: 8748 Comm: syz-executor336 Not tainted 5.4.0-rc5+ #0 [ 63.260126][ T8748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 63.270331][ T8748] RIP: 0010:j1939_priv_get_by_ndev_locked+0xf5/0x190 [ 63.277006][ T8748] Code: 03 80 3c 02 00 0f 85 ae 00 00 00 48 8b 9b 88 05 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d bb 28 60 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 7f 4c 8b a3 28 60 00 00 4d 85 e4 74 12 e8 a4 6d f4 [ 63.296606][ T8748] RSP: 0018:ffff8880a5e978e8 EFLAGS: 00010206 [ 63.302673][ T8748] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff867eb4c7 [ 63.310664][ T8748] RDX: 0000000000000c05 RSI: ffffffff867eb4d4 RDI: 0000000000006028 [ 63.318627][ T8748] RBP: ffff8880a5e97900 R08: ffff88808f886000 R09: ffffed1014bd2f10 [ 63.326589][ T8748] R10: ffffed1014bd2f0f R11: 0000000000000003 R12: 0000000000000000 [ 63.334555][ T8748] R13: 0000000000000118 R14: dffffc0000000000 R15: 0000000000000000 [ 63.342527][ T8748] FS: 0000000000cf2880(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 63.351447][ T8748] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.358029][ T8748] CR2: 00007f7eddf34000 CR3: 0000000008e6d000 CR4: 00000000001406e0 [ 63.365997][ T8748] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 63.373964][ T8748] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 63.381928][ T8748] Call Trace: [ 63.385220][ T8748] j1939_netdev_notify+0x47/0x120 [ 63.390244][ T8748] notifier_call_chain+0xc2/0x230 [ 63.395273][ T8748] raw_notifier_call_chain+0x2e/0x40 [ 63.400556][ T8748] call_netdevice_notifiers_info+0x3f/0x90 [ 63.406360][ T8748] ? tun_show_group+0x180/0x180 [ 63.411211][ T8748] rollback_registered_many+0x9b9/0xfc0 [ 63.416758][ T8748] ? generic_xdp_install+0x4a0/0x4a0 [ 63.422049][ T8748] ? mark_held_locks+0xa4/0xf0 [ 63.426811][ T8748] ? queue_delayed_work_on+0xf3/0x210 [ 63.432157][ T8748] ? lockdep_hardirqs_on+0x421/0x5e0 [ 63.437417][ T8748] rollback_registered+0x109/0x1d0 [ 63.442500][ T8748] ? rollback_registered_many+0xfc0/0xfc0 [ 63.448195][ T8748] unregister_netdevice_queue+0x1ee/0x2c0 [ 63.453892][ T8748] __tun_detach+0xd8a/0x1040 [ 63.458459][ T8748] tun_chr_close+0xe0/0x180 [ 63.462945][ T8748] __fput+0x2ff/0x890 [ 63.466901][ T8748] ? __tun_detach+0x1040/0x1040 [ 63.471726][ T8748] ____fput+0x16/0x20 [ 63.475727][ T8748] task_work_run+0x145/0x1c0 [ 63.480307][ T8748] do_exit+0x904/0x2e60 [ 63.484440][ T8748] ? debug_smp_processor_id+0x3c/0x214 [ 63.489878][ T8748] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 63.496017][ T8748] ? mm_update_next_owner+0x640/0x640 [ 63.501381][ T8748] ? tomoyo_file_ioctl+0x23/0x30 [ 63.506295][ T8748] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 63.512510][ T8748] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 63.517956][ T8748] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 63.523391][ T8748] do_group_exit+0x135/0x360 [ 63.527958][ T8748] __x64_sys_exit_group+0x44/0x50 [ 63.532971][ T8748] do_syscall_64+0xfa/0x760 [ 63.537452][ T8748] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 63.543316][ T8748] RIP: 0033:0x43ee08 [ 63.547229][ T8748] Code: Bad RIP value. [ 63.551268][ T8748] RSP: 002b:00007ffdb3bd7668 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 63.559666][ T8748] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000043ee08 [ 63.567615][ T8748] RDX: 0000000000000000 RSI: 000000000000003c RDI: 0000000000000000 [ 63.575560][ T8748] RBP: 00000000004be608 R08: 00000000000000e7 R09: ffffffffffffffd0 [ 63.583503][ T8748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.591449][ T8748] R13: 00000000006d0180 R14: 0000000000000000 R15: 0000000000000000 [ 63.599398][ T8748] Modules linked in: [ 63.603337][ T8748] ---[ end trace fd7eac355b9ae3df ]--- [ 63.608859][ T8748] RIP: 0010:j1939_priv_get_by_ndev_locked+0xf5/0x190 [ 63.615574][ T8748] Code: 03 80 3c 02 00 0f 85 ae 00 00 00 48 8b 9b 88 05 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d bb 28 60 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 7f 4c 8b a3 28 60 00 00 4d 85 e4 74 12 e8 a4 6d f4 [ 63.635229][ T8748] RSP: 0018:ffff8880a5e978e8 EFLAGS: 00010206 [ 63.641300][ T8748] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff867eb4c7 [ 63.649316][ T8748] RDX: 0000000000000c05 RSI: ffffffff867eb4d4 RDI: 0000000000006028 [ 63.657296][ T8748] RBP: ffff8880a5e97900 R08: ffff88808f886000 R09: ffffed1014bd2f10 [ 63.665281][ T8748] R10: ffffed1014bd2f0f R11: 0000000000000003 R12: 0000000000000000 [ 63.673237][ T8748] R13: 0000000000000118 R14: dffffc0000000000 R15: 0000000000000000 [ 63.681217][ T8748] FS: 0000000000cf2880(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 63.690148][ T8748] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.696734][ T8748] CR2: 000000000043edde CR3: 0000000008e6d000 CR4: 00000000001406e0 [ 63.704782][ T8748] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 63.712761][ T8748] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 63.720747][ T8748] Kernel panic - not syncing: Fatal exception [ 63.728203][ T8748] Kernel Offset: disabled [ 63.732523][ T8748] Rebooting in 86400 seconds..