[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 17.604825] audit: type=1400 audit(1519731884.363:6): avc: denied { map } for pid=4078 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.1' (ECDSA) to the list of known hosts. net.ipv6.conf.syz_tun.accept_dad = 0 net.ipv6.conf.syz_tun.router_solicitations = 0 syzkaller login: [ 23.920977] audit: type=1400 audit(1519731890.679:7): avc: denied { map } for pid=4092 comm="syzkaller961695" path="/root/syzkaller961695867" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 RTNETLINK answers: File exists RTNETLINK answers: File exists RTNETLINK answers: Operation not supported RTNETLINK answers: No buffer space available RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported [ 24.520705] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument [ 24.854080] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 24.860185] 8021q: adding VLAN 0 to HW filter on device bond0 executing program [ 24.896293] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 24.931746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.937701] ================================================================== [ 24.945669] BUG: KASAN: use-after-free in ip6_route_me_harder+0x9d8/0xc00 [ 24.952569] Read of size 4 at addr ffff8801c090c1b0 by task syzkaller961695/4092 [ 24.960071] [ 24.961673] CPU: 0 PID: 4092 Comm: syzkaller961695 Not tainted 4.16.0-rc2+ #243 [ 24.969088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 24.978414] Call Trace: [ 24.980978] dump_stack+0x194/0x24d [ 24.984579] ? arch_local_irq_restore+0x53/0x53 [ 24.989230] ? show_regs_print_info+0x18/0x18 [ 24.993701] ? ip6_route_me_harder+0x9d8/0xc00 [ 24.998257] print_address_description+0x73/0x250 [ 25.003071] ? ip6_route_me_harder+0x9d8/0xc00 [ 25.007624] kasan_report+0x23b/0x360 [ 25.011400] __asan_report_load4_noabort+0x14/0x20 [ 25.016298] ip6_route_me_harder+0x9d8/0xc00 [ 25.020680] ? nf_ip6_checksum_partial+0x310/0x310 [ 25.025598] ip6table_mangle_hook+0x636/0x920 [ 25.030071] ? check_noncircular+0x20/0x20 [ 25.034279] ? ip6table_mangle_net_exit+0xa0/0xa0 [ 25.039090] ? ip6_xmit+0xe9d/0x2260 [ 25.042778] ? netlbl_enabled+0x52/0xe0 [ 25.046723] ? lock_release+0xa40/0xa40 [ 25.050680] nf_hook_slow+0xba/0x1a0 [ 25.054366] ? nf_hook_slow+0xba/0x1a0 [ 25.058230] ip6_xmit+0x10ec/0x2260 [ 25.061840] ? ip6_finish_output2+0x23a0/0x23a0 [ 25.066492] ? check_noncircular+0x20/0x20 [ 25.070700] ? lock_acquire+0x1d5/0x580 [ 25.074644] ? lock_acquire+0x1d5/0x580 [ 25.078589] ? tcp_v6_send_synack+0x473/0xaa0 [ 25.083059] ? ip6_forward_finish+0x140/0x140 [ 25.087528] ? lock_release+0xa40/0xa40 [ 25.091475] ? __lock_is_held+0xb6/0x140 [ 25.095517] tcp_v6_send_synack+0x57b/0xaa0 [ 25.099812] ? tcp_v6_conn_request+0x270/0x270 [ 25.104363] ? inet_csk_route_child_sock+0xc50/0xc50 [ 25.109447] tcp_conn_request+0x26fd/0x3660 [ 25.113757] ? tcp_event_data_recv+0xe80/0xe80 [ 25.118314] ? ip6_rt_update_pmtu+0x180/0x180 [ 25.122789] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 25.127950] ? check_noncircular+0x20/0x20 [ 25.132159] ? is_bpf_text_address+0x7b/0x120 [ 25.136629] ? check_noncircular+0x20/0x20 [ 25.140832] ? find_held_lock+0x35/0x1d0 [ 25.144871] ? __lock_is_held+0xb6/0x140 [ 25.148908] ? netlbl_enabled+0x52/0xe0 [ 25.152855] ? netlbl_catmap_setrng+0xb0/0xb0 [ 25.157330] ? selinux_peerlbl_enabled+0x97/0x170 [ 25.162145] ? selinux_socket_accept+0x200/0x200 [ 25.166878] ? selinux_nf_register+0x30/0x30 [ 25.171264] ? check_noncircular+0x20/0x20 [ 25.175485] tcp_v6_conn_request+0x212/0x270 [ 25.179866] ? tcp_v6_conn_request+0x212/0x270 [ 25.184422] tcp_rcv_state_process+0x92a/0x4760 [ 25.189065] ? lock_downgrade+0x980/0x980 [ 25.193190] ? tcp_finish_connect+0x420/0x420 [ 25.197655] ? __lock_is_held+0xb6/0x140 [ 25.201699] ? sk_filter_trim_cap+0xe7/0x9c0 [ 25.206081] ? ip6t_do_table+0xd06/0x1aa0 [ 25.210201] ? bpf_xdp_copy+0x40/0x40 [ 25.213979] ? tcp_v6_inbound_md5_hash+0x155/0x5c0 [ 25.218879] ? inet6_lookup_listener+0x35b/0xd60 [ 25.223619] tcp_v6_do_rcv+0x739/0x1250 [ 25.227566] ? tcp_v6_do_rcv+0x739/0x1250 [ 25.231686] ? tcp_v6_fill_cb+0x350/0x490 [ 25.235807] tcp_v6_rcv+0x25a0/0x2d40 [ 25.239580] ? __do_once_start+0xa5/0xd0 [ 25.243636] ? tcp_v6_reqsk_send_ack+0x370/0x370 [ 25.248367] ? __lock_is_held+0xb6/0x140 [ 25.252410] ip6_input_finish+0x37e/0x17a0 [ 25.256613] ? ip6_input+0x3a7/0x560 [ 25.260314] ? ip6_make_skb+0x5e0/0x5e0 [ 25.264261] ? nf_hook_slow+0xd3/0x1a0 [ 25.268125] ip6_input+0xdb/0x560 [ 25.271552] ? ip6_input_finish+0x17a0/0x17a0 [ 25.276024] ? rt6_multipath_hash+0x730/0x730 [ 25.280499] ? ip6_make_skb+0x5e0/0x5e0 [ 25.284452] ip6_rcv_finish+0x297/0x8c0 [ 25.288398] ? ip6_input+0x560/0x560 [ 25.292086] ? ip6table_nat_in+0x2c/0x40 [ 25.296119] ? tcp_v6_mtu_reduced+0x60/0x60 [ 25.300413] ? nf_hook_slow+0xd3/0x1a0 [ 25.304276] ipv6_rcv+0xf37/0x1fa0 [ 25.307796] ? ip6_rcv_finish+0x8c0/0x8c0 [ 25.311922] ? __lock_acquire+0x664/0x3e00 [ 25.316139] ? ip6_input+0x560/0x560 [ 25.319829] ? ip6_rcv_finish+0x8c0/0x8c0 [ 25.323954] __netif_receive_skb_core+0x1a41/0x3460 [ 25.328958] ? nf_ingress+0x9f0/0x9f0 [ 25.332732] ? __skb_flow_get_ports+0x390/0x420 [ 25.337381] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 25.342547] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 25.347708] ? do_csum+0x288/0x360 [ 25.351223] ? check_noncircular+0x20/0x20 [ 25.355426] ? csum_partial+0x21/0x30 [ 25.359198] ? csum_partial_ext+0x25/0x30 [ 25.363320] ? check_noncircular+0x20/0x20 [ 25.367524] ? __skb_checksum+0x4a9/0x7e0 [ 25.371643] ? is_bpf_text_address+0xa4/0x120 [ 25.376115] ? find_held_lock+0x35/0x1d0 [ 25.380154] ? print_irqtrace_events+0x270/0x270 [ 25.384889] ? netif_receive_skb_internal+0x1d7/0x670 [ 25.390052] ? lock_downgrade+0x980/0x980 [ 25.394182] ? pvclock_read_flags+0x160/0x160 [ 25.398648] ? mark_held_locks+0xaf/0x100 [ 25.402773] ? lock_acquire+0x1d5/0x580 [ 25.406728] ? lock_acquire+0x1d5/0x580 [ 25.410671] ? netif_receive_skb_internal+0xa2/0x670 [ 25.415747] ? ktime_get_with_offset+0x2c1/0x420 [ 25.420476] ? lock_release+0xa40/0xa40 [ 25.424422] ? do_gettimeofday+0x190/0x190 [ 25.428640] ? lock_release+0xa40/0xa40 [ 25.432589] __netif_receive_skb+0x2c/0x1b0 [ 25.436881] ? __netif_receive_skb+0x2c/0x1b0 [ 25.441351] netif_receive_skb_internal+0x10b/0x670 [ 25.446341] ? dev_cpu_dead+0xb00/0xb00 [ 25.450289] ? net_rx_action+0x1910/0x1910 [ 25.454495] ? eth_type_trans+0x2b2/0x710 [ 25.458614] ? eth_gro_receive+0x820/0x820 [ 25.462835] napi_gro_frags+0x58a/0xaf0 [ 25.466804] ? napi_gro_receive+0x500/0x500 [ 25.471110] ? tun_get_user+0x26f7/0x3810 [ 25.475233] tun_get_user+0x2720/0x3810 [ 25.479177] ? print_irqtrace_events+0x270/0x270 [ 25.483907] ? check_noncircular+0x20/0x20 [ 25.488128] ? tun_build_skb.isra.50+0x1850/0x1850 [ 25.493036] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 25.498199] ? sock_i_uid+0x8d/0xb0 [ 25.501814] ? tun_get+0x1ab/0x2e0 [ 25.505333] ? lock_release+0xa40/0xa40 [ 25.509281] ? __lock_is_held+0xb6/0x140 [ 25.513323] ? tun_get+0x1d4/0x2e0 [ 25.516834] ? tun_do_read+0x26c0/0x26c0 [ 25.520866] ? __check_object_size+0x8b/0x530 [ 25.525335] ? rcu_note_context_switch+0x710/0x710 [ 25.530241] tun_chr_write_iter+0xbd/0x1c0 [ 25.534450] do_iter_readv_writev+0x55c/0x830 [ 25.538919] ? vfs_dedupe_file_range+0x8f0/0x8f0 [ 25.543654] ? rw_verify_area+0xe5/0x2b0 [ 25.547688] do_iter_write+0x154/0x540 [ 25.551546] ? dup_iter+0x260/0x260 [ 25.555146] ? lock_release+0xa40/0xa40 [ 25.559098] vfs_writev+0x18a/0x340 [ 25.562700] ? vfs_iter_write+0xb0/0xb0 [ 25.566647] ? _raw_spin_unlock_bh+0x30/0x40 [ 25.571039] ? inet6_hash+0x7f/0x90 [ 25.574650] ? __fdget_pos+0x130/0x190 [ 25.578509] ? __fdget_raw+0x20/0x20 [ 25.582193] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 25.587183] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 25.591911] do_writev+0xfc/0x2a0 [ 25.595336] ? do_writev+0xfc/0x2a0 [ 25.598940] ? vfs_writev+0x340/0x340 [ 25.602718] ? SyS_readv+0x30/0x30 [ 25.606232] SyS_writev+0x27/0x30 [ 25.609660] do_syscall_64+0x280/0x940 [ 25.613525] ? __do_page_fault+0xc90/0xc90 [ 25.617733] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 25.622460] ? syscall_return_slowpath+0x550/0x550 [ 25.627360] ? syscall_return_slowpath+0x2ac/0x550 [ 25.632264] ? prepare_exit_to_usermode+0x350/0x350 [ 25.637255] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 25.642592] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 25.647411] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 25.652568] RIP: 0033:0x44d180 [ 25.655727] RSP: 002b:00007fff2fa4a7c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 25.663405] RAX: ffffffffffffffda RBX: 000000000000001a RCX: 000000000044d180 [ 25.670647] RDX: 0000000000000001 RSI: 00007fff2fa4a810 RDI: 00000000000000fc [ 25.677887] RBP: 00000000004af02d R08: 0000000000000013 R09: 0000000000000000 [ 25.685129] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff2fa4a960 [ 25.692368] R13: 000000000040e290 R14: 0000000000000000 R15: 0000000000000000 [ 25.699623] [ 25.701222] Allocated by task 2226: [ 25.704823] save_stack+0x43/0xd0 [ 25.708245] kasan_kmalloc+0xad/0xe0 [ 25.711932] kasan_slab_alloc+0x12/0x20 [ 25.715876] kmem_cache_alloc+0x12e/0x760 [ 25.719994] selinux_inode_alloc_security+0xf9/0x390 [ 25.725074] security_inode_alloc+0x90/0xd0 [ 25.729363] inode_init_always+0x653/0xca0 [ 25.733565] alloc_inode+0x82/0x180 [ 25.737162] new_inode_pseudo+0x69/0x190 [ 25.741191] new_inode+0x1c/0x40 [ 25.744530] proc_pid_make_inode+0x25/0x210 [ 25.748822] proc_pident_instantiate+0x80/0x290 [ 25.753462] proc_pident_lookup+0x19e/0x200 [ 25.757752] proc_tgid_base_lookup+0x29/0x30 [ 25.762133] lookup_slow+0x282/0x4d0 [ 25.765816] walk_component+0x89f/0x13d0 [ 25.769846] link_path_walk+0xd4e/0x1470 [ 25.773875] path_openat+0x2bc/0x3530 [ 25.777644] do_filp_open+0x25b/0x3b0 [ 25.781416] do_sys_open+0x502/0x6d0 [ 25.785098] SyS_open+0x2d/0x40 [ 25.788346] do_syscall_64+0x280/0x940 [ 25.792202] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 25.797358] [ 25.798959] Freed by task 16: [ 25.802036] save_stack+0x43/0xd0 [ 25.805461] __kasan_slab_free+0x11a/0x170 [ 25.809664] kasan_slab_free+0xe/0x10 [ 25.813434] kmem_cache_free+0x83/0x2a0 [ 25.817378] inode_free_rcu+0x1d/0x20 [ 25.821149] rcu_process_callbacks+0xd6c/0x17f0 [ 25.825788] __do_softirq+0x2d7/0xb85 [ 25.829555] [ 25.831153] The buggy address belongs to the object at ffff8801c090c180 [ 25.831153] which belongs to the cache selinux_inode_security of size 96 [ 25.844647] The buggy address is located 48 bytes inside of [ 25.844647] 96-byte region [ffff8801c090c180, ffff8801c090c1e0) [ 25.856314] The buggy address belongs to the page: [ 25.861214] page:ffffea0007024300 count:1 mapcount:0 mapping:ffff8801c090c000 index:0x0 [ 25.869327] flags: 0x2fffc0000000100(slab) [ 25.873533] raw: 02fffc0000000100 ffff8801c090c000 0000000000000000 0000000100000020 [ 25.881385] raw: ffffea00070ade60 ffffea0007021360 ffff8801da5c3240 0000000000000000 [ 25.889231] page dumped because: kasan: bad access detected [ 25.894910] [ 25.896508] Memory state around the buggy address: [ 25.901407] ffff8801c090c080: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 25.908735] ffff8801c090c100: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 25.916066] >ffff8801c090c180: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 25.923392] ^ [ 25.928290] ffff8801c090c200: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 25.935617] ffff8801c090c280: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 25.942942] ================================================================== [ 25.950268] Disabling lock debugging due to kernel taint [ 25.955722] Kernel panic - not syncing: panic_on_warn set ... [ 25.955722] [ 25.963073] CPU: 0 PID: 4092 Comm: syzkaller961695 Tainted: G B 4.16.0-rc2+ #243 [ 25.971806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 25.981144] Call Trace: [ 25.983721] dump_stack+0x194/0x24d [ 25.987339] ? arch_local_irq_restore+0x53/0x53 [ 25.991996] ? kasan_end_report+0x32/0x50 [ 25.996130] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 26.000857] ? vsnprintf+0x1ed/0x1900 [ 26.004629] ? ip6_route_me_harder+0x980/0xc00 [ 26.009181] panic+0x1e4/0x41c [ 26.012343] ? refcount_error_report+0x214/0x214 [ 26.017070] ? add_taint+0x1c/0x50 [ 26.020579] ? add_taint+0x1c/0x50 [ 26.024092] ? ip6_route_me_harder+0x9d8/0xc00 [ 26.028645] kasan_end_report+0x50/0x50 [ 26.032590] kasan_report+0x148/0x360 [ 26.036364] __asan_report_load4_noabort+0x14/0x20 [ 26.041262] ip6_route_me_harder+0x9d8/0xc00 [ 26.045641] ? nf_ip6_checksum_partial+0x310/0x310 [ 26.050552] ip6table_mangle_hook+0x636/0x920 [ 26.055026] ? check_noncircular+0x20/0x20 [ 26.059235] ? ip6table_mangle_net_exit+0xa0/0xa0 [ 26.064046] ? ip6_xmit+0xe9d/0x2260 [ 26.067731] ? netlbl_enabled+0x52/0xe0 [ 26.071678] ? lock_release+0xa40/0xa40 [ 26.075625] nf_hook_slow+0xba/0x1a0 [ 26.079307] ? nf_hook_slow+0xba/0x1a0 [ 26.083166] ip6_xmit+0x10ec/0x2260 [ 26.086769] ? ip6_finish_output2+0x23a0/0x23a0 [ 26.091412] ? check_noncircular+0x20/0x20 [ 26.095616] ? lock_acquire+0x1d5/0x580 [ 26.099561] ? lock_acquire+0x1d5/0x580 [ 26.103506] ? tcp_v6_send_synack+0x473/0xaa0 [ 26.107974] ? ip6_forward_finish+0x140/0x140 [ 26.112440] ? lock_release+0xa40/0xa40 [ 26.116387] ? __lock_is_held+0xb6/0x140 [ 26.120422] tcp_v6_send_synack+0x57b/0xaa0 [ 26.124717] ? tcp_v6_conn_request+0x270/0x270 [ 26.129267] ? inet_csk_route_child_sock+0xc50/0xc50 [ 26.134345] tcp_conn_request+0x26fd/0x3660 [ 26.138642] ? tcp_event_data_recv+0xe80/0xe80 [ 26.143192] ? ip6_rt_update_pmtu+0x180/0x180 [ 26.147662] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 26.152820] ? check_noncircular+0x20/0x20 [ 26.157026] ? is_bpf_text_address+0x7b/0x120 [ 26.161492] ? check_noncircular+0x20/0x20 [ 26.165695] ? find_held_lock+0x35/0x1d0 [ 26.169729] ? __lock_is_held+0xb6/0x140 [ 26.173760] ? netlbl_enabled+0x52/0xe0 [ 26.177705] ? netlbl_catmap_setrng+0xb0/0xb0 [ 26.182174] ? selinux_peerlbl_enabled+0x97/0x170 [ 26.186988] ? selinux_socket_accept+0x200/0x200 [ 26.191715] ? selinux_nf_register+0x30/0x30 [ 26.196094] ? check_noncircular+0x20/0x20 [ 26.200305] tcp_v6_conn_request+0x212/0x270 [ 26.204682] ? tcp_v6_conn_request+0x212/0x270 [ 26.209234] tcp_rcv_state_process+0x92a/0x4760 [ 26.213872] ? lock_downgrade+0x980/0x980 [ 26.217997] ? tcp_finish_connect+0x420/0x420 [ 26.222465] ? __lock_is_held+0xb6/0x140 [ 26.226502] ? sk_filter_trim_cap+0xe7/0x9c0 [ 26.230882] ? ip6t_do_table+0xd06/0x1aa0 [ 26.235004] ? bpf_xdp_copy+0x40/0x40 [ 26.238783] ? tcp_v6_inbound_md5_hash+0x155/0x5c0 [ 26.243684] ? inet6_lookup_listener+0x35b/0xd60 [ 26.248410] tcp_v6_do_rcv+0x739/0x1250 [ 26.252353] ? tcp_v6_do_rcv+0x739/0x1250 [ 26.256470] ? tcp_v6_fill_cb+0x350/0x490 [ 26.260589] tcp_v6_rcv+0x25a0/0x2d40 [ 26.264361] ? __do_once_start+0xa5/0xd0 [ 26.268399] ? tcp_v6_reqsk_send_ack+0x370/0x370 [ 26.273123] ? __lock_is_held+0xb6/0x140 [ 26.277158] ip6_input_finish+0x37e/0x17a0 [ 26.281368] ? ip6_input+0x3a7/0x560 [ 26.285057] ? ip6_make_skb+0x5e0/0x5e0 [ 26.289006] ? nf_hook_slow+0xd3/0x1a0 [ 26.292874] ip6_input+0xdb/0x560 [ 26.296301] ? ip6_input_finish+0x17a0/0x17a0 [ 26.300763] ? rt6_multipath_hash+0x730/0x730 [ 26.305232] ? ip6_make_skb+0x5e0/0x5e0 [ 26.309180] ip6_rcv_finish+0x297/0x8c0 [ 26.313127] ? ip6_input+0x560/0x560 [ 26.316811] ? ip6table_nat_in+0x2c/0x40 [ 26.320844] ? tcp_v6_mtu_reduced+0x60/0x60 [ 26.325135] ? nf_hook_slow+0xd3/0x1a0 [ 26.328996] ipv6_rcv+0xf37/0x1fa0 [ 26.332521] ? ip6_rcv_finish+0x8c0/0x8c0 [ 26.336642] ? __lock_acquire+0x664/0x3e00 [ 26.340851] ? ip6_input+0x560/0x560 [ 26.344549] ? ip6_rcv_finish+0x8c0/0x8c0 [ 26.348671] __netif_receive_skb_core+0x1a41/0x3460 [ 26.353661] ? nf_ingress+0x9f0/0x9f0 [ 26.357433] ? __skb_flow_get_ports+0x390/0x420 [ 26.362076] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 26.367235] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 26.372392] ? do_csum+0x288/0x360 [ 26.375905] ? check_noncircular+0x20/0x20 [ 26.380107] ? csum_partial+0x21/0x30 [ 26.383877] ? csum_partial_ext+0x25/0x30 [ 26.387997] ? check_noncircular+0x20/0x20 [ 26.392204] ? __skb_checksum+0x4a9/0x7e0 [ 26.396320] ? is_bpf_text_address+0xa4/0x120 [ 26.400788] ? find_held_lock+0x35/0x1d0 [ 26.404822] ? print_irqtrace_events+0x270/0x270 [ 26.409550] ? netif_receive_skb_internal+0x1d7/0x670 [ 26.414708] ? lock_downgrade+0x980/0x980 [ 26.418831] ? pvclock_read_flags+0x160/0x160 [ 26.423294] ? mark_held_locks+0xaf/0x100 [ 26.427414] ? lock_acquire+0x1d5/0x580 [ 26.431359] ? lock_acquire+0x1d5/0x580 [ 26.435302] ? netif_receive_skb_internal+0xa2/0x670 [ 26.440377] ? ktime_get_with_offset+0x2c1/0x420 [ 26.445106] ? lock_release+0xa40/0xa40 [ 26.449051] ? do_gettimeofday+0x190/0x190 [ 26.453255] ? lock_release+0xa40/0xa40 [ 26.457199] __netif_receive_skb+0x2c/0x1b0 [ 26.461498] ? __netif_receive_skb+0x2c/0x1b0 [ 26.465968] netif_receive_skb_internal+0x10b/0x670 [ 26.470954] ? dev_cpu_dead+0xb00/0xb00 [ 26.474900] ? net_rx_action+0x1910/0x1910 [ 26.479117] ? eth_type_trans+0x2b2/0x710 [ 26.483234] ? eth_gro_receive+0x820/0x820 [ 26.487443] napi_gro_frags+0x58a/0xaf0 [ 26.491397] ? napi_gro_receive+0x500/0x500 [ 26.495695] ? tun_get_user+0x26f7/0x3810 [ 26.499816] tun_get_user+0x2720/0x3810 [ 26.503759] ? print_irqtrace_events+0x270/0x270 [ 26.508483] ? check_noncircular+0x20/0x20 [ 26.512695] ? tun_build_skb.isra.50+0x1850/0x1850 [ 26.517595] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 26.522756] ? sock_i_uid+0x8d/0xb0 [ 26.526361] ? tun_get+0x1ab/0x2e0 [ 26.529873] ? lock_release+0xa40/0xa40 [ 26.533820] ? __lock_is_held+0xb6/0x140 [ 26.537857] ? tun_get+0x1d4/0x2e0 [ 26.541368] ? tun_do_read+0x26c0/0x26c0 [ 26.545399] ? __check_object_size+0x8b/0x530 [ 26.549866] ? rcu_note_context_switch+0x710/0x710 [ 26.554766] tun_chr_write_iter+0xbd/0x1c0 [ 26.558972] do_iter_readv_writev+0x55c/0x830 [ 26.563439] ? vfs_dedupe_file_range+0x8f0/0x8f0 [ 26.568165] ? rw_verify_area+0xe5/0x2b0 [ 26.572196] do_iter_write+0x154/0x540 [ 26.576059] ? dup_iter+0x260/0x260 [ 26.579655] ? lock_release+0xa40/0xa40 [ 26.583600] vfs_writev+0x18a/0x340 [ 26.587198] ? vfs_iter_write+0xb0/0xb0 [ 26.591143] ? _raw_spin_unlock_bh+0x30/0x40 [ 26.595526] ? inet6_hash+0x7f/0x90 [ 26.599128] ? __fdget_pos+0x130/0x190 [ 26.602985] ? __fdget_raw+0x20/0x20 [ 26.606671] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 26.611660] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 26.616385] do_writev+0xfc/0x2a0 [ 26.619808] ? do_writev+0xfc/0x2a0 [ 26.623407] ? vfs_writev+0x340/0x340 [ 26.627183] ? SyS_readv+0x30/0x30 [ 26.630691] SyS_writev+0x27/0x30 [ 26.634114] do_syscall_64+0x280/0x940 [ 26.637974] ? __do_page_fault+0xc90/0xc90 [ 26.642179] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 26.646907] ? syscall_return_slowpath+0x550/0x550 [ 26.651805] ? syscall_return_slowpath+0x2ac/0x550 [ 26.656703] ? prepare_exit_to_usermode+0x350/0x350 [ 26.661688] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 26.667027] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 26.671846] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 26.677009] RIP: 0033:0x44d180 [ 26.680175] RSP: 002b:00007fff2fa4a7c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 26.687853] RAX: ffffffffffffffda RBX: 000000000000001a RCX: 000000000044d180 [ 26.695095] RDX: 0000000000000001 RSI: 00007fff2fa4a810 RDI: 00000000000000fc [ 26.702341] RBP: 00000000004af02d R08: 0000000000000013 R09: 0000000000000000 [ 26.709580] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff2fa4a960 [ 26.716818] R13: 000000000040e290 R14: 0000000000000000 R15: 0000000000000000 [ 26.724469] Dumping ftrace buffer: [ 26.727985] (ftrace buffer empty) [ 26.731663] Kernel Offset: disabled [ 26.735259] Rebooting in 86400 seconds..