INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added 'ci-upstream-next-kasan-gce-5,10.128.0.13' (ECDSA) to the list of known hosts. 2017/08/15 10:24:28 parsed 1 programs 2017/08/15 10:24:28 executed programs: 0 syzkaller login: [ 32.727150] kasan: CONFIG_KASAN_INLINE enabled [ 32.727861] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 32.729031] general protection fault: 0000 [#1] SMP KASAN [ 32.729783] Dumping ftrace buffer: [ 32.730258] (ftrace buffer empty) [ 32.730753] Modules linked in: [ 32.731189] CPU: 1 PID: 3097 Comm: syz-executor0 Not tainted 4.13.0-rc5-next-20170815+ #3 [ 32.732284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 32.733502] task: ffff8801cdc4e480 task.stack: ffff8801cdc50000 [ 32.734315] RIP: 0010:skb_release_data+0x26c/0x790 [ 32.735003] RSP: 0018:ffff8801cdc566b0 EFLAGS: 00010202 [ 32.735728] RAX: 0000000000000004 RBX: dffffc0000000000 RCX: 0000000000000000 [ 32.736678] RDX: 0000000000000000 RSI: ffffffff85b34bc0 RDI: 0000000000000020 [ 32.737637] RBP: ffff8801cdc567d0 R08: ffffffff84027169 R09: 0000000000000002 [ 32.738618] R10: ffff8801cdc56c70 R11: 0000000000000000 R12: ffff8801ce1301b0 [ 32.739586] R13: ffffed0039b8aced R14: 1ffff10039b8ace5 R15: 0000000000000000 [ 32.740572] FS: 00007f94c40db700(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 [ 32.741658] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.742487] CR2: 0000000020000000 CR3: 00000001ce945000 CR4: 00000000001406e0 [ 32.743454] DR0: 0000000020000000 DR1: 0000000020000000 DR2: 0000000000000000 [ 32.744408] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 32.745359] Call Trace: [ 32.745720] ? skb_tx_error+0x2c0/0x2c0 [ 32.746254] ? __lock_is_held+0xb6/0x140 [ 32.746802] skb_release_all+0x4a/0x60 [ 32.747919] kfree_skb+0x15d/0x4c0 [ 32.751423] ? sctp_rcv+0x6e9/0x3480 [ 32.755109] ? __kfree_skb+0x20/0x20 [ 32.758791] ? lock_release+0xa40/0xa40 [ 32.762729] ? __lock_is_held+0xb6/0x140 [ 32.766756] sctp_rcv+0x6e9/0x3480 [ 32.770263] ? rcu_read_lock_held+0xa9/0xc0 [ 32.774557] ? ip_route_input_rcu+0x1193/0x3210 [ 32.779198] ? sctp_addrs_lookup_transport+0x920/0x920 [ 32.784441] ? rt_flush_dev+0x290/0x290 [ 32.788382] ? __lock_acquire+0x6aa/0x3bc0 [ 32.792587] ? __local_bh_enable_ip+0x9d/0x160 [ 32.797136] ? trace_hardirqs_on_caller+0x19e/0x5c0 [ 32.802116] ? __local_bh_enable_ip+0x9d/0x160 [ 32.806664] ? check_noncircular+0x20/0x20 [ 32.810861] ? trace_hardirqs_on+0xd/0x10 [ 32.814970] ? check_noncircular+0x20/0x20 [ 32.819174] ? raw_local_deliver+0x24f/0xb20 [ 32.823556] ? lock_acquire+0x1d5/0x580 [ 32.827496] ? lock_acquire+0x1d5/0x580 [ 32.831441] ? raw_rcv+0x410/0x410 [ 32.834947] ? lock_release+0xa40/0xa40 [ 32.838888] ? __lock_is_held+0xb6/0x140 [ 32.842919] ip_local_deliver_finish+0x2e2/0xba0 [ 32.847639] ? ip_local_deliver_finish+0x2e2/0xba0 [ 32.852533] ? inet_del_offload+0x40/0x40 [ 32.856648] ip_local_deliver+0x1ce/0x6d0 [ 32.860763] ? ip_call_ra_chain+0x6d0/0x6d0 [ 32.865052] ? inet_del_offload+0x40/0x40 [ 32.869175] ip_rcv_finish+0x8db/0x19c0 [ 32.873114] ? iptable_nat_ipv4_fn+0x40/0x40 [ 32.877490] ? ip_local_deliver_finish+0xba0/0xba0 [ 32.882385] ? ip_rcv+0xf05/0x17d0 [ 32.885888] ? lock_downgrade+0x990/0x990 [ 32.890003] ? rcu_read_lock_held+0xa9/0xc0 [ 32.894291] ? nf_hook_slow+0x12d/0x290 [ 32.898240] ip_rcv+0xc3f/0x17d0 [ 32.901572] ? ip_local_deliver+0x6d0/0x6d0 [ 32.905857] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 32.911012] ? __lock_acquire+0x6aa/0x3bc0 [ 32.915215] ? ip_local_deliver_finish+0xba0/0xba0 [ 32.920119] ? ip_local_deliver+0x6d0/0x6d0 [ 32.924414] __netif_receive_skb_core+0x19af/0x33d0 [ 32.929393] ? unwind_get_return_address+0x61/0xa0 [ 32.934290] ? nf_ingress+0x9f0/0x9f0 [ 32.938055] ? save_stack+0xa3/0xd0 [ 32.941647] ? save_stack_trace+0x16/0x20 [ 32.945755] ? save_stack+0x43/0xd0 [ 32.949341] ? kasan_kmalloc+0xad/0xe0 [ 32.953190] ? kasan_slab_alloc+0x12/0x20 [ 32.957300] ? kmem_cache_alloc+0x12e/0x760 [ 32.961602] ? __build_skb+0x9d/0x450 [ 32.965367] ? build_skb+0x6f/0x260 [ 32.968959] ? tun_get_user+0x1db7/0x2150 [ 32.973070] ? tun_chr_write_iter+0xd8/0x190 [ 32.977450] ? __vfs_write+0x684/0x970 [ 32.981298] ? vfs_write+0x189/0x510 [ 32.984974] ? __skb_flow_get_ports+0x151/0x400 [ 32.989605] ? flow_get_u32_dst+0x130/0x130 [ 32.993891] ? __skb_flow_get_ports+0x151/0x400 [ 32.998531] ? check_noncircular+0x20/0x20 [ 33.002726] ? __skb_flow_dissect+0xfa1/0x3ae0 [ 33.007274] ? __sched_text_start+0x8/0x8 [ 33.011389] ? __skb_flow_get_ports+0x400/0x400 [ 33.016024] ? find_held_lock+0x35/0x1d0 [ 33.020062] ? netif_receive_skb_internal+0x1d7/0x5e0 [ 33.025214] ? lock_downgrade+0x990/0x990 [ 33.029329] ? pvclock_read_flags+0x160/0x160 [ 33.033790] ? lock_acquire+0x1d5/0x580 [ 33.037729] ? lock_acquire+0x1d5/0x580 [ 33.041671] ? netif_receive_skb_internal+0x93/0x5e0 [ 33.046740] ? ktime_get_with_offset+0x2c1/0x420 [ 33.051461] ? lock_release+0xa40/0xa40 [ 33.055399] ? do_gettimeofday+0x190/0x190 [ 33.059602] __netif_receive_skb+0x2c/0x1b0 [ 33.063886] ? __netif_receive_skb+0x2c/0x1b0 [ 33.068347] netif_receive_skb_internal+0x10b/0x5e0 [ 33.073334] ? dev_cpu_dead+0xb00/0xb00 [ 33.077281] ? tun_device_event+0xca0/0xca0 [ 33.081567] ? rcu_pm_notify+0xc0/0xc0 [ 33.085422] netif_receive_skb+0xae/0x390 [ 33.089531] ? netif_receive_skb_internal+0x5e0/0x5e0 [ 33.094685] ? mark_wake_futex+0xc0/0x1c0 [ 33.098796] ? futex_wait_setup+0x3d0/0x3d0 [ 33.103085] ? tun_rx_batched.isra.43+0x5bd/0x860 [ 33.107892] tun_rx_batched.isra.43+0x5e7/0x860 [ 33.112528] ? skb_get_hash_perturb+0x9d0/0x9d0 [ 33.117162] ? tun_sock_write_space+0x370/0x370 [ 33.121792] ? tun_free_netdev+0x1b0/0x1b0 [ 33.125993] ? check_noncircular+0x20/0x20 [ 33.130198] tun_get_user+0x11dd/0x2150 [ 33.134141] ? tun_flow_update+0xf70/0xf70 [ 33.138342] ? __tun_get+0x1ab/0x2e0 [ 33.142018] ? lock_downgrade+0x990/0x990 [ 33.146136] ? lock_release+0xa40/0xa40 [ 33.150081] ? __lock_is_held+0xb6/0x140 [ 33.154112] ? __tun_get+0x1d4/0x2e0 [ 33.157789] ? tun_chr_close+0x60/0x60 [ 33.161651] tun_chr_write_iter+0xd8/0x190 [ 33.165852] __vfs_write+0x684/0x970 [ 33.169532] ? default_llseek+0x290/0x290 [ 33.173644] ? _cond_resched+0x14/0x30 [ 33.177495] ? avc_policy_seqno+0x9/0x20 [ 33.181521] ? selinux_file_permission+0x82/0x460 [ 33.186331] ? rw_verify_area+0xe5/0x2b0 [ 33.190361] ? __fdget_raw+0x20/0x20 [ 33.194038] vfs_write+0x189/0x510 [ 33.197561] SyS_write+0xef/0x220 [ 33.200979] ? SyS_read+0x220/0x220 [ 33.204566] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 33.209547] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 33.214270] entry_SYSCALL_64_fastpath+0x1f/0xbe [ 33.218990] RIP: 0033:0x40b751 [ 33.222142] RSP: 002b:00007f94c40dac10 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 33.229815] RAX: ffffffffffffffda RBX: 00000000007180a8 RCX: 000000000040b751 [ 33.237052] RDX: 000000000000002a RSI: 0000000020000000 RDI: 0000000000000003 [ 33.244284] RBP: 0000000000000086 R08: 0000000000000000 R09: 0000000000000000 [ 33.251518] R10: 00000000000f4246 R11: 0000000000000293 R12: 0000000000000000 [ 33.258751] R13: 00007ffd1f41037f R14: 00007f94c40db9c0 R15: 0000000000000002 [ 33.265991] Code: c6 e8 c9 78 8d fd 4c 89 e0 48 c1 e8 03 80 3c 18 00 0f 85 93 04 00 00 4d 8b 3c 24 41 c6 45 00 00 49 8d 7f 20 48 89 f8 48 c1 e8 03 <80> 3c 18 00 0f 85 6b 04 00 00 41 80 7d 00 00 49 8b 47 20 0f 85 [ 33.285056] RIP: skb_release_data+0x26c/0x790 RSP: ffff8801cdc566b0 [ 33.291475] ---[ end trace 0c1764a9917b47d9 ]--- [ 33.296210] Kernel panic - not syncing: Fatal exception in interrupt [ 33.303045] Dumping ftrace buffer: [ 33.306553] (ftrace buffer empty) [ 33.310225] Kernel Offset: disabled [ 33.313815] Rebooting in 86400 seconds..