INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added 'ci-upstream-kasan-gce-8,10.128.0.15' (ECDSA) to the list of known hosts. executing program executing program syzkaller login: [ 40.908510] device syz0 entered promiscuous mode executing program executing program [ 40.949672] device syz0 entered promiscuous mode executing program [ 40.995771] device syz0 entered promiscuous mode executing program executing program executing program [ 41.020713] device syz0 entered promiscuous mode [ 41.038594] device syz0 entered promiscuous mode executing program executing program executing program executing program executing program [ 41.068882] device syz0 entered promiscuous mode [ 41.075138] device syz0 entered promiscuous mode [ 41.094679] device syz0 entered promiscuous mode executing program executing program executing program executing program [ 41.119967] device syz0 entered promiscuous mode [ 41.134254] device syz0 entered promiscuous mode [ 41.143467] device syz0 entered promiscuous mode [ 41.156816] device syz0 entered promiscuous mode [ 41.162354] device syz0 entered promiscuous mode executing program executing program executing program [ 41.204805] device syz0 entered promiscuous mode [ 41.216366] dev_remove_pack: ffff8801bf16fa80 not found [ 41.222359] device syz0 entered promiscuous mode [ 41.227926] device syz0 entered promiscuous mode [ 41.239408] device syz0 entered promiscuous mode [ 41.245175] ------------[ cut here ]------------ [ 41.249915] kernel BUG at net/core/dev.c:7945! [ 41.254567] invalid opcode: 0000 [#1] SMP KASAN [ 41.259204] Dumping ftrace buffer: [ 41.262708] (ftrace buffer empty) [ 41.266402] Modules linked in: [ 41.266807] device syz0 entered promiscuous mode [ 41.274286] CPU: 0 PID: 3161 Comm: syzkaller404108 Not tainted 4.14.0+ #190 [ 41.281361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 41.290683] task: ffff8801cc57a500 task.stack: ffff8801cc588000 [ 41.296711] RIP: 0010:netdev_run_todo+0x772/0xae0 [ 41.301516] RSP: 0018:ffff8801cc58f598 EFLAGS: 00010293 [ 41.306843] RAX: ffff8801cc57a500 RBX: dffffc0000000000 RCX: ffffffff841f75b2 [ 41.314251] RDX: 0000000000000000 RSI: 1ffff100398b1ede RDI: ffff8801bf1f8810 [ 41.314571] device syz0 entered promiscuous mode [ 41.326208] RBP: ffff8801cc58f898 R08: 0000000000000001 R09: 0000000000000000 [ 41.333704] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8801bf1f8cd8 [ 41.340939] R13: ffff8801cc58f870 R14: ffff8801bf1f8780 R15: ffff8801cc58f7f0 [ 41.348176] FS: 0000000001716880(0000) GS:ffff8801db400000(0000) knlGS:0000000000000000 [ 41.356366] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.362212] CR2: 0000000020b13000 CR3: 0000000005e25000 CR4: 00000000001406f0 [ 41.369448] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 41.376688] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 41.383930] Call Trace: [ 41.386501] ? register_netdev+0x30/0x30 [ 41.390532] ? refcount_inc+0x50/0x50 [ 41.394297] ? refcount_inc+0x50/0x50 [ 41.398069] ? sk_destruct+0x4c/0x80 [ 41.401746] ? __sk_free+0x5c/0x230 [ 41.405337] ? sk_free+0x2f/0x40 [ 41.408669] ? __tun_detach+0x74d/0x1550 [ 41.412696] ? kmem_cache_free+0x249/0x280 [ 41.416902] ? tun_attach+0x10b0/0x10b0 [ 41.420843] ? trace_event_raw_event_sched_switch+0x8a0/0x8a0 [ 41.426697] ? locks_remove_file+0x3fa/0x5a0 [ 41.431071] ? fcntl_setlk+0x10d0/0x10d0 [ 41.435098] ? fsnotify+0x7b3/0x1140 [ 41.438779] ? fsnotify_first_mark+0x2b0/0x2b0 [ 41.443326] ? __tun_detach+0x1550/0x1550 [ 41.447438] rtnl_unlock+0xe/0x10 [ 41.450862] tun_chr_close+0x49/0x60 [ 41.454542] __fput+0x333/0x7f0 [ 41.457795] ? fput+0x140/0x140 [ 41.461040] ? trace_event_raw_event_sched_switch+0x8a0/0x8a0 [ 41.466886] ? _raw_spin_unlock_irq+0x27/0x70 [ 41.471346] ____fput+0x15/0x20 [ 41.474597] task_work_run+0x199/0x270 [ 41.478452] ? task_work_cancel+0x210/0x210 [ 41.482741] ? _raw_spin_unlock+0x22/0x30 [ 41.486859] ? switch_task_namespaces+0x87/0xc0 [ 41.491494] do_exit+0x9bb/0x1ae0 [ 41.494915] ? hrtimer_try_to_cancel+0x91/0x5c0 [ 41.499547] ? mm_update_next_owner+0x930/0x930 [ 41.504180] ? __hrtimer_get_remaining+0x1c0/0x1c0 [ 41.509076] ? trace_event_raw_event_sched_switch+0x8a0/0x8a0 [ 41.515639] ? _do_fork+0x2f5/0xff0 [ 41.519841] ? rcu_note_context_switch+0x710/0x710 [ 41.524733] ? fork_idle+0x2d0/0x2d0 [ 41.528415] ? __might_sleep+0x95/0x190 [ 41.532359] ? do_nanosleep+0x4fc/0x6e0 [ 41.536304] ? schedule_timeout_idle+0x90/0x90 [ 41.540856] ? memset+0x31/0x40 [ 41.544106] ? hrtimer_nanosleep+0x2cc/0x860 [ 41.548481] ? nanosleep_copyout+0x100/0x100 [ 41.552852] ? __might_sleep+0x95/0x190 [ 41.556793] ? kasan_check_write+0x14/0x20 [ 41.560994] ? _copy_from_user+0x99/0x110 [ 41.565108] ? __hrtimer_init+0x140/0x140 [ 41.569223] ? syscall_return_slowpath+0x550/0x550 [ 41.574118] do_group_exit+0x149/0x400 [ 41.577974] ? SyS_exit+0x30/0x30 [ 41.581392] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 41.586371] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 41.591092] SyS_exit_group+0x1d/0x20 [ 41.594864] entry_SYSCALL_64_fastpath+0x1f/0x96 [ 41.599841] RIP: 0033:0x44ad19 [ 41.603002] RSP: 002b:00000000007efd78 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7 [ 41.610672] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 000000000044ad19 [ 41.617906] RDX: 00000000004493a1 RSI: 0000000000000000 RDI: 0000000000000000 [ 41.625140] RBP: 0000000000000086 R08: 00000000006ddbc0 R09: 0000000000000000 [ 41.632373] R10: 00000000006ddb44 R11: 0000000000000202 R12: 0000000000000000 [ 41.639608] R13: 00000000007efd1f R14: 00007ff956e0d9c0 R15: 0000000000000000 [ 41.646849] Code: b6 95 28 fd ff ff 4c 89 f6 48 c7 c7 20 d6 7c 85 e8 39 3b 3a fd e8 98 3e ed 00 e9 05 fb ff ff e8 35 7d 50 fd 0f 0b e8 2e 7d 50 fd <0f> 0b e8 27 7d 50 fd 0f 0b e8 20 7d 50 fd 0f ff e9 bf fe ff ff [ 41.665915] RIP: netdev_run_todo+0x772/0xae0 RSP: ffff8801cc58f598 [ 41.672244] ---[ end trace b6b89972beedfbc1 ]--- [ 41.677337] Kernel panic - not syncing: Fatal exception [ 41.683537] Dumping ftrace buffer: [ 41.687040] (ftrace buffer empty) [ 41.690716] Kernel Offset: disabled [ 41.694309] Rebooting in 86400 seconds..