INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added 'ci-upstream-next-kasan-gce-3,10.128.0.13' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 42.571768] device syz0 entered promiscuous mode [ 42.575657] ------------[ cut here ]------------ [ 42.576340] syz0: caps=(0x00000800000058c1, 0x0000000000000000) len=392 data_len=0 gso_size=127 gso_type=3 ip_summed=0 [ 42.577918] WARNING: CPU: 0 PID: 3088 at net/core/dev.c:2600 skb_warn_bad_offload+0x2bd/0x3c0 [ 42.579063] Kernel panic - not syncing: panic_on_warn set ... [ 42.579063] [ 42.580030] CPU: 0 PID: 3088 Comm: syzkaller086533 Not tainted 4.15.0-rc2-next-20171204+ #58 [ 42.581148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 42.582365] Call Trace: [ 42.582721] dump_stack+0x194/0x257 [ 42.583212] ? arch_local_irq_restore+0x53/0x53 [ 42.583839] ? vsnprintf+0x1ed/0x1900 [ 42.584353] panic+0x1e4/0x41c [ 42.584786] ? refcount_error_report+0x214/0x214 [ 42.585418] ? show_regs_print_info+0x65/0x65 [ 42.586023] ? __warn+0x1c1/0x200 [ 42.586492] ? skb_warn_bad_offload+0x2bd/0x3c0 [ 42.587122] __warn+0x1dc/0x200 [ 42.587563] ? console_unlock+0x971/0xd70 [ 42.588115] ? skb_warn_bad_offload+0x2bd/0x3c0 [ 42.588741] report_bug+0x211/0x2d0 [ 42.589236] fixup_bug.part.11+0x37/0x80 [ 42.589782] do_error_trap+0x2d7/0x3e0 [ 42.590304] ? __down_trylock_console_sem+0x10d/0x1e0 [ 42.590995] ? math_error+0x400/0x400 [ 42.591505] ? vprintk_emit+0x3ea/0x590 [ 42.592047] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 42.596858] do_invalid_op+0x1b/0x20 [ 42.600536] invalid_op+0x22/0x40 [ 42.603956] RIP: 0010:skb_warn_bad_offload+0x2bd/0x3c0 [ 42.609193] RSP: 0018:ffff8801cbe670f8 EFLAGS: 00010286 [ 42.614521] RAX: dffffc0000000008 RBX: ffff8801cb048280 RCX: ffffffff815a03de [ 42.621760] RDX: 0000000000000000 RSI: 1ffff100397ccdda RDI: ffff8801cbe66e00 [ 42.628997] RBP: ffff8801cbe67150 R08: 1ffff100397ccd9c R09: 0000000000000000 [ 42.636232] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 42.643468] R13: ffff8801cb048280 R14: ffff8801cb7af898 R15: 0000000000000003 [ 42.650714] ? vprintk_func+0x5e/0xc0 [ 42.654484] ? skb_warn_bad_offload+0x2bd/0x3c0 [ 42.659125] __skb_gso_segment+0x612/0x800 [ 42.663329] ? skb_mac_gso_segment+0x660/0x660 [ 42.667880] ? lock_downgrade+0x980/0x980 [ 42.672003] validate_xmit_skb+0x4ba/0xb20 [ 42.676209] ? netif_skb_features+0x8e0/0x8e0 [ 42.680673] ? do_raw_spin_trylock+0x190/0x190 [ 42.685229] validate_xmit_skb_list+0xb7/0x120 [ 42.689783] sch_direct_xmit+0x3b6/0x6d0 [ 42.693817] ? dev_deactivate_queue.constprop.27+0x260/0x260 [ 42.699594] __dev_queue_xmit+0x16eb/0x2070 [ 42.703888] ? netdev_pick_tx+0x300/0x300 [ 42.708003] ? lock_release+0xda0/0xda0 [ 42.711945] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 42.717795] ? refcount_add+0x24/0x60 [ 42.721565] ? skb_set_owner_w+0x232/0x330 [ 42.725773] ? __might_sleep+0x95/0x190 [ 42.729715] ? kasan_check_write+0x14/0x20 [ 42.733919] ? copyin+0x91/0xb0 [ 42.737168] ? _copy_from_iter+0x367/0xf30 [ 42.741368] ? __check_object_size+0x25d/0x4f0 [ 42.746034] ? check_stack_object+0x140/0x140 [ 42.750500] ? copy_page_to_iter+0xe10/0xe10 [ 42.754879] ? _copy_from_iter_full+0x22b/0xbb0 [ 42.759518] ? skb_copy_datagram_from_iter+0x3a5/0x5a0 [ 42.764758] ? iov_iter_advance+0x13f0/0x13f0 [ 42.769217] ? _cond_resched+0x14/0x30 [ 42.773073] ? clear_huge_page+0x309/0x730 [ 42.777280] dev_queue_xmit+0x17/0x20 [ 42.781050] packet_sendmsg+0x3ab1/0x6060 [ 42.785167] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 42.790326] ? __thp_get_unmapped_area+0x130/0x130 [ 42.795229] ? __lock_acquire+0x6e9/0x47f0 [ 42.799429] ? __lock_acquire+0x6e9/0x47f0 [ 42.803628] ? print_usage_bug+0x3f0/0x3f0 [ 42.807844] ? packet_cached_dev_get+0x2b0/0x2b0 [ 42.812570] ? check_noncircular+0x20/0x20 [ 42.816770] ? check_noncircular+0x20/0x20 [ 42.820974] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 42.826133] ? find_held_lock+0x39/0x1d0 [ 42.830168] ? lock_downgrade+0x980/0x980 [ 42.834285] ? avc_has_perm+0xd0/0x680 [ 42.838137] ? check_noncircular+0x20/0x20 [ 42.842337] ? sock_has_perm+0x29c/0x400 [ 42.846368] ? selinux_secmark_relabel_packet+0xc0/0xc0 [ 42.851695] ? find_held_lock+0x39/0x1d0 [ 42.855739] ? security_socket_sendmsg+0x89/0xb0 [ 42.860459] ? packet_cached_dev_get+0x2b0/0x2b0 [ 42.865180] sock_sendmsg+0xca/0x110 [ 42.868863] sock_write_iter+0x320/0x5e0 [ 42.872892] ? sock_sendmsg+0x110/0x110 [ 42.876840] ? iov_iter_init+0xaf/0x1d0 [ 42.880782] __vfs_write+0x68a/0x970 [ 42.884463] ? kernel_read+0x120/0x120 [ 42.888315] ? bpf_fd_pass+0x280/0x280 [ 42.892171] ? _cond_resched+0x14/0x30 [ 42.896027] ? selinux_file_permission+0x82/0x460 [ 42.900842] ? rw_verify_area+0xe5/0x2b0 [ 42.904865] ? __fdget_raw+0x20/0x20 [ 42.908550] vfs_write+0x18f/0x510 [ 42.912060] SyS_write+0xef/0x220 [ 42.915475] ? lockdep_sys_exit+0x47/0xf0 [ 42.919589] ? SyS_read+0x220/0x220 [ 42.923179] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 42.928161] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 42.932889] entry_SYSCALL_64_fastpath+0x1f/0x96 [ 42.937610] RIP: 0033:0x444529 [ 42.940764] RSP: 002b:00007fffb13c75e8 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 42.948440] RAX: ffffffffffffffda RBX: 00000000004002e0 RCX: 0000000000444529 [ 42.955674] RDX: 0000000000000192 RSI: 00000000205c2000 RDI: 0000000000000005 [ 42.962909] RBP: 00000000006cf018 R08: 00007fffb13c7768 R09: 00007fff000005b8 [ 42.970144] R10: 000000000000000f R11: 0000000000000293 R12: 0000000000402210 [ 42.977377] R13: 00000000004022a0 R14: 0000000000000000 R15: 0000000000000000 [ 42.985091] Dumping ftrace buffer: [ 42.988639] (ftrace buffer empty) [ 42.992318] Kernel Offset: disabled [ 42.995914] Rebooting in 86400 seconds..