[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 71.182157][ T28] audit: type=1800 audit(1574328889.369:25): pid=8985 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 71.211051][ T28] audit: type=1800 audit(1574328889.369:26): pid=8985 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 71.241107][ T28] audit: type=1800 audit(1574328889.369:27): pid=8985 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.33' (ECDSA) to the list of known hosts. 2019/11/21 09:35:01 fuzzer started 2019/11/21 09:35:03 connecting to host at 10.128.0.26:38813 2019/11/21 09:35:03 checking machine... 2019/11/21 09:35:03 checking revisions... 2019/11/21 09:35:03 testing simple program... syzkaller login: [ 85.748852][ T9154] IPVS: ftp: loaded support on port[0] = 21 2019/11/21 09:35:04 building call list... [ 86.150284][ T7] tipc: TX() has been purged, node left! [ 86.193857][ T7] kasan: CONFIG_KASAN_INLINE enabled [ 86.199492][ T7] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 86.211531][ T7] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 86.218508][ T7] CPU: 0 PID: 7 Comm: kworker/u4:0 Not tainted 5.4.0-rc8-next-20191121-syzkaller #0 [ 86.227971][ T7] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 86.238049][ T7] Workqueue: netns cleanup_net [ 86.242936][ T7] RIP: 0010:kernfs_find_ns+0x36/0x380 [ 86.248310][ T7] Code: 55 41 54 49 89 fc 53 48 83 ec 10 48 89 75 d0 e8 30 e1 91 ff 49 8d 7c 24 68 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 24 03 00 00 49 8d bc 24 90 00 00 00 49 8b 5c 24 [ 86.267910][ T7] RSP: 0018:ffff8880a988f878 EFLAGS: 00010202 [ 86.273966][ T7] RAX: dffffc0000000000 RBX: ffffffff884a88e0 RCX: 0000000000000000 [ 86.281928][ T7] RDX: 000000000000000d RSI: ffffffff81e21280 RDI: 0000000000000068 [ 86.289887][ T7] RBP: ffff8880a988f8b0 R08: 1ffffffff1217d04 R09: fffffbfff1217d05 [ 86.297846][ T7] R10: ffff8880a988f8b0 R11: ffffffff890be827 R12: 0000000000000000 [ 86.305812][ T7] R13: ffffffff884a88a0 R14: 0000000000000000 R15: 0000000000000000 [ 86.313776][ T7] FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 86.322712][ T7] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.329315][ T7] CR2: 00007f36b3919000 CR3: 00000000a4606000 CR4: 00000000001406f0 [ 86.337299][ T7] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 86.345453][ T7] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 86.353417][ T7] Call Trace: [ 86.356701][ T7] kernfs_find_and_get_ns+0x34/0x70 [ 86.361888][ T7] sysfs_remove_group+0x76/0x1b0 [ 86.366866][ T7] netdev_queue_update_kobjects+0x261/0x3e0 [ 86.372752][ T7] netdev_unregister_kobject+0x15e/0x1f0 [ 86.378366][ T7] rollback_registered_many+0xafe/0x10d0 [ 86.384036][ T7] ? rtnl_lock+0x17/0x20 [ 86.388317][ T7] ? generic_xdp_install+0x4a0/0x4a0 [ 86.393594][ T7] ? find_held_lock+0x35/0x130 [ 86.398350][ T7] ? ip6gre_exit_batch_net+0x1f6/0x760 [ 86.403815][ T7] unregister_netdevice_many.part.0+0x1b/0x1f0 [ 86.409968][ T7] unregister_netdevice_many+0x3b/0x50 [ 86.415426][ T7] ip6gre_exit_batch_net+0x53c/0x760 [ 86.420714][ T7] ? ip6gre_tunnel_link+0x100/0x100 [ 86.425915][ T7] ? ip6gre_tunnel_link+0x100/0x100 [ 86.431111][ T7] ops_exit_list.isra.0+0x10c/0x160 [ 86.436299][ T7] cleanup_net+0x538/0xaf0 [ 86.440708][ T7] ? netns_install+0x1d0/0x1d0 [ 86.445465][ T7] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 86.451041][ T7] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 86.457010][ T7] ? trace_hardirqs_on+0x67/0x240 [ 86.462045][ T7] process_one_work+0x9af/0x1740 [ 86.466992][ T7] ? pwq_dec_nr_in_flight+0x320/0x320 [ 86.472363][ T7] ? lock_acquire+0x190/0x410 [ 86.477042][ T7] worker_thread+0x98/0xe40 [ 86.481551][ T7] kthread+0x361/0x430 [ 86.485611][ T7] ? process_one_work+0x1740/0x1740 [ 86.490801][ T7] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 86.496514][ T7] ret_from_fork+0x24/0x30 [ 86.500921][ T7] Modules linked in: [ 86.506843][ T7] ---[ end trace 2b89c7a6a0476a22 ]--- [ 86.512388][ T7] RIP: 0010:kernfs_find_ns+0x36/0x380 [ 86.517823][ T7] Code: 55 41 54 49 89 fc 53 48 83 ec 10 48 89 75 d0 e8 30 e1 91 ff 49 8d 7c 24 68 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 24 03 00 00 49 8d bc 24 90 00 00 00 49 8b 5c 24 [ 86.537893][ T7] RSP: 0018:ffff8880a988f878 EFLAGS: 00010202 [ 86.544281][ T7] RAX: dffffc0000000000 RBX: ffffffff884a88e0 RCX: 0000000000000000 [ 86.552603][ T7] RDX: 000000000000000d RSI: ffffffff81e21280 RDI: 0000000000000068 [ 86.560776][ T7] RBP: ffff8880a988f8b0 R08: 1ffffffff1217d04 R09: fffffbfff1217d05 [ 86.568800][ T7] R10: ffff8880a988f8b0 R11: ffffffff890be827 R12: 0000000000000000 [ 86.577111][ T7] R13: ffffffff884a88a0 R14: 0000000000000000 R15: 0000000000000000 [ 86.585371][ T7] FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 86.594603][ T7] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.601465][ T7] CR2: 00007f36b3919000 CR3: 000000009324f000 CR4: 00000000001406f0 [ 86.609436][ T7] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 86.617767][ T7] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 86.625970][ T7] Kernel panic - not syncing: Fatal exception [ 86.633428][ T7] Kernel Offset: disabled [ 86.637766][ T7] Rebooting in 86400 seconds..