[....] Starting enhanced syslogd: rsyslogd[ 17.363949] audit: type=1400 audit(1519750148.836:5): avc: denied { syslog } for pid=4082 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 23.022526] audit: type=1400 audit(1519750154.495:6): avc: denied { map } for pid=4224 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.5' (ECDSA) to the list of known hosts. net.ipv6.conf.syz_tun.accept_dad = 0 net.ipv6.conf.syz_tun.router_solicitations = 0 [ 29.309268] audit: type=1400 audit(1519750160.782:7): avc: denied { map } for pid=4238 comm="syzkaller417947" path="/root/syzkaller417947069" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 RTNETLINK answers: File exists RTNETLINK answers: File exists RTNETLINK answers: Operation not supported RTNETLINK answers: No buffer space available RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported [ 29.923727] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument [ 30.270072] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 30.276157] 8021q: adding VLAN 0 to HW filter on device bond0 executing program [ 30.314155] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 30.353144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.361261] ================================================================== [ 30.368733] BUG: KASAN: use-after-free in ip6_route_me_harder+0x9d8/0xc00 [ 30.375636] Read of size 4 at addr ffff8801c20be1a8 by task syzkaller417947/4238 [ 30.383139] [ 30.384743] CPU: 0 PID: 4238 Comm: syzkaller417947 Not tainted 4.16.0-rc3+ #331 [ 30.392159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 30.401486] Call Trace: [ 30.404056] dump_stack+0x194/0x24d [ 30.407672] ? arch_local_irq_restore+0x53/0x53 [ 30.412316] ? show_regs_print_info+0x18/0x18 [ 30.416792] ? ip6_route_me_harder+0x9d8/0xc00 [ 30.421349] print_address_description+0x73/0x250 [ 30.426166] ? ip6_route_me_harder+0x9d8/0xc00 [ 30.430722] kasan_report+0x23b/0x360 [ 30.434499] __asan_report_load4_noabort+0x14/0x20 [ 30.439401] ip6_route_me_harder+0x9d8/0xc00 [ 30.443794] ? nf_ip6_checksum_partial+0x310/0x310 [ 30.448711] ip6table_mangle_hook+0x636/0x920 [ 30.453182] ? trace_hardirqs_off+0x10/0x10 [ 30.457477] ? ip6table_mangle_net_exit+0xa0/0xa0 [ 30.462294] ? ip6_xmit+0xe9d/0x2260 [ 30.465984] ? netlbl_enabled+0x52/0xe0 [ 30.469933] ? lock_release+0xa40/0xa40 [ 30.473888] nf_hook_slow+0xba/0x1a0 [ 30.477575] ? nf_hook_slow+0xba/0x1a0 [ 30.481450] ip6_xmit+0x10ec/0x2260 [ 30.485066] ? ip6_finish_output2+0x23a0/0x23a0 [ 30.489720] ? trace_hardirqs_off+0x10/0x10 [ 30.494023] ? lock_acquire+0x1d5/0x580 [ 30.497981] ? lock_acquire+0x1d5/0x580 [ 30.501930] ? tcp_v6_send_synack+0x473/0xaa0 [ 30.506401] ? ip6_forward_finish+0x140/0x140 [ 30.510868] ? lock_release+0xa40/0xa40 [ 30.514817] ? __lock_is_held+0xb6/0x140 [ 30.518863] tcp_v6_send_synack+0x57b/0xaa0 [ 30.523162] ? tcp_v6_send_check+0x410/0x410 [ 30.527543] ? inet_csk_route_child_sock+0xc50/0xc50 [ 30.532628] tcp_conn_request+0x26fd/0x3660 [ 30.536945] ? tcp_event_data_recv+0xe80/0xe80 [ 30.541501] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 30.546666] ? find_held_lock+0x35/0x1d0 [ 30.550704] ? trace_hardirqs_off+0x10/0x10 [ 30.555001] ? __lock_is_held+0xb6/0x140 [ 30.559063] ? netlbl_catmap_setrng+0xb0/0xb0 [ 30.563537] ? __do_once_start+0x8a/0xd0 [ 30.567587] ? selinux_peerlbl_enabled+0x97/0x170 [ 30.572417] ? trace_hardirqs_off+0x10/0x10 [ 30.576712] ? trace_hardirqs_off+0x10/0x10 [ 30.581021] ? selinux_socket_sock_rcv_skb+0x24e/0x850 [ 30.586280] ? _raw_spin_unlock_irqrestore+0x31/0xc0 [ 30.591380] tcp_v6_conn_request+0x212/0x270 [ 30.595767] ? tcp_v6_conn_request+0x212/0x270 [ 30.600323] tcp_rcv_state_process+0x8f5/0x4920 [ 30.604965] ? lock_release+0xa40/0xa40 [ 30.608917] ? __lock_is_held+0xb6/0x140 [ 30.612952] ? tcp_finish_connect+0x420/0x420 [ 30.617427] ? sk_filter_trim_cap+0xe7/0x9c0 [ 30.621806] ? ip_vs_out+0x24a/0x1b30 [ 30.625583] ? bpf_xdp_copy+0x40/0x40 [ 30.629366] ? tcp_v6_inbound_md5_hash+0x155/0x5c0 [ 30.634265] ? inet6_lookup_listener+0x35b/0xd60 [ 30.639002] tcp_v6_do_rcv+0x739/0x1250 [ 30.642953] ? tcp_v6_do_rcv+0x739/0x1250 [ 30.647075] ? tcp_v6_fill_cb+0x2a0/0x490 [ 30.651197] tcp_v6_rcv+0x24a1/0x2d70 [ 30.654973] ? trace_hardirqs_off+0x10/0x10 [ 30.659265] ? rawv6_rcv+0x11a5/0x1200 [ 30.663140] ? tcp_v6_reqsk_send_ack+0x370/0x370 [ 30.667881] ip6_input_finish+0x37e/0x17a0 [ 30.672086] ? ip6_input+0x3a7/0x560 [ 30.675785] ? ip6_make_skb+0x5e0/0x5e0 [ 30.679736] ? nf_hook_slow+0xd3/0x1a0 [ 30.683600] ip6_input+0xdb/0x560 [ 30.687039] ? ip6_input_finish+0x17a0/0x17a0 [ 30.691521] ? rt6_multipath_hash+0x730/0x730 [ 30.695994] ? ip6_make_skb+0x5e0/0x5e0 [ 30.699954] ip6_rcv_finish+0x297/0x8c0 [ 30.703900] ? ip6_input+0x560/0x560 [ 30.707587] ? ip6table_nat_in+0x2c/0x40 [ 30.711620] ? tcp_v6_mtu_reduced+0x60/0x60 [ 30.715915] ? nf_hook_slow+0xd3/0x1a0 [ 30.719778] ipv6_rcv+0xf38/0x1fb0 [ 30.723302] ? ip6_rcv_finish+0x8c0/0x8c0 [ 30.727429] ? __lock_acquire+0x664/0x3e00 [ 30.731657] ? ip6_input+0x560/0x560 [ 30.735354] ? ip6_rcv_finish+0x8c0/0x8c0 [ 30.739476] __netif_receive_skb_core+0x1a41/0x3460 [ 30.744559] ? nf_ingress+0x9f0/0x9f0 [ 30.748334] ? __skb_flow_get_ports+0x370/0x420 [ 30.752989] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 30.758160] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 30.763325] ? do_csum+0x288/0x360 [ 30.766843] ? trace_hardirqs_off+0x10/0x10 [ 30.771137] ? csum_partial+0x21/0x30 [ 30.774911] ? csum_partial_ext+0x25/0x30 [ 30.779043] ? trace_hardirqs_off+0x10/0x10 [ 30.783338] ? __skb_checksum+0x4a9/0x7e0 [ 30.787456] ? is_bpf_text_address+0xa4/0x120 [ 30.791928] ? find_held_lock+0x35/0x1d0 [ 30.795969] ? print_irqtrace_events+0x270/0x270 [ 30.800703] ? netif_receive_skb_internal+0x1d7/0x670 [ 30.805865] ? lock_downgrade+0x980/0x980 [ 30.809996] ? pvclock_read_flags+0x160/0x160 [ 30.814468] ? mark_held_locks+0xaf/0x100 [ 30.818604] ? lock_acquire+0x1d5/0x580 [ 30.822551] ? lock_acquire+0x1d5/0x580 [ 30.826501] ? netif_receive_skb_internal+0xa2/0x670 [ 30.831581] ? ktime_get_with_offset+0x2c1/0x420 [ 30.836314] ? lock_release+0xa40/0xa40 [ 30.840271] ? ktime_get+0x3a0/0x3a0 [ 30.843972] ? lock_release+0xa40/0xa40 [ 30.847925] __netif_receive_skb+0x2c/0x1b0 [ 30.852228] ? __netif_receive_skb+0x2c/0x1b0 [ 30.856697] netif_receive_skb_internal+0x10b/0x670 [ 30.861690] ? dev_cpu_dead+0xb00/0xb00 [ 30.865641] ? net_rx_action+0x1910/0x1910 [ 30.869850] ? eth_type_trans+0x2b2/0x710 [ 30.873971] ? eth_gro_receive+0x820/0x820 [ 30.878190] napi_gro_frags+0x58a/0xaf0 [ 30.882142] ? napi_gro_receive+0x500/0x500 [ 30.886454] ? tun_get_user+0x26f7/0x3810 [ 30.890580] tun_get_user+0x2720/0x3810 [ 30.894527] ? print_irqtrace_events+0x270/0x270 [ 30.899257] ? trace_hardirqs_off+0x10/0x10 [ 30.903569] ? tun_build_skb.isra.50+0x1850/0x1850 [ 30.908475] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 30.913639] ? sock_i_uid+0x8d/0xb0 [ 30.917258] ? tun_get+0x1ab/0x2e0 [ 30.920778] ? lock_release+0xa40/0xa40 [ 30.924729] ? __lock_is_held+0xb6/0x140 [ 30.928772] ? tun_get+0x1d4/0x2e0 [ 30.932284] ? tun_do_read+0x26c0/0x26c0 [ 30.936316] ? __check_object_size+0x8b/0x530 [ 30.940789] ? rcu_note_context_switch+0x710/0x710 [ 30.945699] tun_chr_write_iter+0xbd/0x1c0 [ 30.949913] do_iter_readv_writev+0x55c/0x830 [ 30.954387] ? vfs_dedupe_file_range+0x8f0/0x8f0 [ 30.959123] ? rw_verify_area+0xe5/0x2b0 [ 30.963161] do_iter_write+0x154/0x540 [ 30.967027] ? dup_iter+0x260/0x260 [ 30.970635] ? lock_release+0xa40/0xa40 [ 30.974589] vfs_writev+0x18a/0x340 [ 30.978452] ? vfs_iter_write+0xb0/0xb0 [ 30.982404] ? _raw_spin_unlock_bh+0x30/0x40 [ 30.986799] ? inet6_hash+0x7f/0x90 [ 30.990404] ? __fdget_pos+0x130/0x190 [ 30.994265] ? __fdget_raw+0x20/0x20 [ 30.997952] ? inet_exit_net+0x10/0x10 [ 31.001814] ? selinux_socket_listen+0x36/0x40 [ 31.006373] do_writev+0xfc/0x2a0 [ 31.009800] ? do_writev+0xfc/0x2a0 [ 31.013401] ? SyS_listen+0x207/0x350 [ 31.017177] ? vfs_writev+0x340/0x340 [ 31.020950] ? mm_fault_error+0x2c0/0x2c0 [ 31.025073] ? move_addr_to_kernel+0x60/0x60 [ 31.029460] SyS_writev+0x27/0x30 [ 31.032889] ? SyS_readv+0x30/0x30 [ 31.036405] do_syscall_64+0x281/0x940 [ 31.040265] ? __do_page_fault+0xc90/0xc90 [ 31.044982] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 31.050495] ? syscall_return_slowpath+0x550/0x550 [ 31.055398] ? syscall_return_slowpath+0x2ac/0x550 [ 31.060304] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 31.065651] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 31.070471] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 31.075631] RIP: 0033:0x443150 [ 31.078791] RSP: 002b:00007ffefe0bdad8 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 31.086469] RAX: ffffffffffffffda RBX: 000000000000001a RCX: 0000000000443150 [ 31.093711] RDX: 0000000000000001 RSI: 00007ffefe0bdaf0 RDI: 00000000000000fc [ 31.100954] RBP: 00000000004a4a9b R08: 0000000000000013 R09: 0000000000000000 [ 31.108194] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffefe0bdc10 [ 31.115435] R13: 00000000004042a0 R14: 0000000000000000 R15: 0000000000000000 [ 31.122691] [ 31.124290] Allocated by task 2886: [ 31.127889] save_stack+0x43/0xd0 [ 31.131311] kasan_kmalloc+0xad/0xe0 [ 31.134997] kasan_slab_alloc+0x12/0x20 [ 31.138953] kmem_cache_alloc+0x12e/0x760 [ 31.143074] copy_mm+0x8d7/0x131f [ 31.146498] copy_process.part.38+0x1f56/0x4b60 [ 31.151136] _do_fork+0x1f7/0xf70 [ 31.154567] SyS_clone+0x37/0x50 [ 31.157907] do_syscall_64+0x281/0x940 [ 31.161765] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 31.166921] [ 31.168520] Freed by task 3429: [ 31.171770] save_stack+0x43/0xd0 [ 31.175193] __kasan_slab_free+0x11a/0x170 [ 31.179397] kasan_slab_free+0xe/0x10 [ 31.183175] kmem_cache_free+0x83/0x2a0 [ 31.187129] remove_vma+0x162/0x1b0 [ 31.190726] exit_mmap+0x311/0x500 [ 31.194239] mmput+0x223/0x6d0 [ 31.197401] do_exit+0x90a/0x1ad0 [ 31.200840] do_group_exit+0x149/0x400 [ 31.204701] SyS_exit_group+0x1d/0x20 [ 31.208473] do_syscall_64+0x281/0x940 [ 31.212332] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 31.217488] [ 31.219088] The buggy address belongs to the object at ffff8801c20be148 [ 31.219088] which belongs to the cache vm_area_struct of size 200 [ 31.231991] The buggy address is located 96 bytes inside of [ 31.231991] 200-byte region [ffff8801c20be148, ffff8801c20be210) [ 31.243761] The buggy address belongs to the page: [ 31.248677] page:ffffea0007082f80 count:1 mapcount:0 mapping:ffff8801c20be040 index:0x0 [ 31.256797] flags: 0x2fffc0000000100(slab) [ 31.261040] raw: 02fffc0000000100 ffff8801c20be040 0000000000000000 000000010000000f [ 31.268904] raw: ffffea00071deb60 ffffea0007158820 ffff8801da5c3840 0000000000000000 [ 31.276754] page dumped because: kasan: bad access detected [ 31.282437] [ 31.284057] Memory state around the buggy address: [ 31.288957] ffff8801c20be080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 31.296290] ffff8801c20be100: fb fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb [ 31.303619] >ffff8801c20be180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 31.310945] ^ [ 31.315585] ffff8801c20be200: fb fb fc fc fc fc fc fc fc fc fb fb fb fb fb fb [ 31.322915] ffff8801c20be280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 31.330241] ================================================================== [ 31.337567] Disabling lock debugging due to kernel taint [ 31.343034] Kernel panic - not syncing: panic_on_warn set ... [ 31.343034] [ 31.350387] CPU: 0 PID: 4238 Comm: syzkaller417947 Tainted: G B 4.16.0-rc3+ #331 [ 31.359133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 31.368458] Call Trace: [ 31.371033] dump_stack+0x194/0x24d [ 31.374636] ? arch_local_irq_restore+0x53/0x53 [ 31.379275] ? kasan_end_report+0x32/0x50 [ 31.383394] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 31.388118] ? vsnprintf+0x1ed/0x1900 [ 31.391893] ? ip6_route_me_harder+0x9a0/0xc00 [ 31.396446] panic+0x1e4/0x41c [ 31.399611] ? refcount_error_report+0x214/0x214 [ 31.404346] ? add_taint+0x1c/0x50 [ 31.407856] ? add_taint+0x1c/0x50 [ 31.411369] ? ip6_route_me_harder+0x9d8/0xc00 [ 31.415918] kasan_end_report+0x50/0x50 [ 31.419861] kasan_report+0x148/0x360 [ 31.423641] __asan_report_load4_noabort+0x14/0x20 [ 31.428539] ip6_route_me_harder+0x9d8/0xc00 [ 31.432918] ? nf_ip6_checksum_partial+0x310/0x310 [ 31.437827] ip6table_mangle_hook+0x636/0x920 [ 31.442296] ? trace_hardirqs_off+0x10/0x10 [ 31.446588] ? ip6table_mangle_net_exit+0xa0/0xa0 [ 31.451399] ? ip6_xmit+0xe9d/0x2260 [ 31.455084] ? netlbl_enabled+0x52/0xe0 [ 31.459042] ? lock_release+0xa40/0xa40 [ 31.462994] nf_hook_slow+0xba/0x1a0 [ 31.466680] ? nf_hook_slow+0xba/0x1a0 [ 31.470537] ip6_xmit+0x10ec/0x2260 [ 31.474140] ? ip6_finish_output2+0x23a0/0x23a0 [ 31.478786] ? trace_hardirqs_off+0x10/0x10 [ 31.483092] ? lock_acquire+0x1d5/0x580 [ 31.487040] ? lock_acquire+0x1d5/0x580 [ 31.490988] ? tcp_v6_send_synack+0x473/0xaa0 [ 31.495457] ? ip6_forward_finish+0x140/0x140 [ 31.499923] ? lock_release+0xa40/0xa40 [ 31.503868] ? __lock_is_held+0xb6/0x140 [ 31.507906] tcp_v6_send_synack+0x57b/0xaa0 [ 31.512198] ? tcp_v6_send_check+0x410/0x410 [ 31.516575] ? inet_csk_route_child_sock+0xc50/0xc50 [ 31.521653] tcp_conn_request+0x26fd/0x3660 [ 31.525955] ? tcp_event_data_recv+0xe80/0xe80 [ 31.530510] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 31.535672] ? find_held_lock+0x35/0x1d0 [ 31.539706] ? trace_hardirqs_off+0x10/0x10 [ 31.543999] ? __lock_is_held+0xb6/0x140 [ 31.548048] ? netlbl_catmap_setrng+0xb0/0xb0 [ 31.552516] ? __do_once_start+0x8a/0xd0 [ 31.556550] ? selinux_peerlbl_enabled+0x97/0x170 [ 31.561362] ? trace_hardirqs_off+0x10/0x10 [ 31.565660] ? trace_hardirqs_off+0x10/0x10 [ 31.569954] ? selinux_socket_sock_rcv_skb+0x24e/0x850 [ 31.575200] ? _raw_spin_unlock_irqrestore+0x31/0xc0 [ 31.580282] tcp_v6_conn_request+0x212/0x270 [ 31.584661] ? tcp_v6_conn_request+0x212/0x270 [ 31.589215] tcp_rcv_state_process+0x8f5/0x4920 [ 31.593854] ? lock_release+0xa40/0xa40 [ 31.597802] ? __lock_is_held+0xb6/0x140 [ 31.601832] ? tcp_finish_connect+0x420/0x420 [ 31.606300] ? sk_filter_trim_cap+0xe7/0x9c0 [ 31.610685] ? ip_vs_out+0x24a/0x1b30 [ 31.614458] ? bpf_xdp_copy+0x40/0x40 [ 31.618231] ? tcp_v6_inbound_md5_hash+0x155/0x5c0 [ 31.623130] ? inet6_lookup_listener+0x35b/0xd60 [ 31.627857] tcp_v6_do_rcv+0x739/0x1250 [ 31.631800] ? tcp_v6_do_rcv+0x739/0x1250 [ 31.635916] ? tcp_v6_fill_cb+0x2a0/0x490 [ 31.640039] tcp_v6_rcv+0x24a1/0x2d70 [ 31.643813] ? trace_hardirqs_off+0x10/0x10 [ 31.648108] ? rawv6_rcv+0x11a5/0x1200 [ 31.651975] ? tcp_v6_reqsk_send_ack+0x370/0x370 [ 31.656706] ip6_input_finish+0x37e/0x17a0 [ 31.660910] ? ip6_input+0x3a7/0x560 [ 31.664599] ? ip6_make_skb+0x5e0/0x5e0 [ 31.668545] ? nf_hook_slow+0xd3/0x1a0 [ 31.672412] ip6_input+0xdb/0x560 [ 31.675846] ? ip6_input_finish+0x17a0/0x17a0 [ 31.680312] ? rt6_multipath_hash+0x730/0x730 [ 31.684779] ? ip6_make_skb+0x5e0/0x5e0 [ 31.688727] ip6_rcv_finish+0x297/0x8c0 [ 31.692671] ? ip6_input+0x560/0x560 [ 31.696356] ? ip6table_nat_in+0x2c/0x40 [ 31.700389] ? tcp_v6_mtu_reduced+0x60/0x60 [ 31.704681] ? nf_hook_slow+0xd3/0x1a0 [ 31.708541] ipv6_rcv+0xf38/0x1fb0 [ 31.712060] ? ip6_rcv_finish+0x8c0/0x8c0 [ 31.716181] ? __lock_acquire+0x664/0x3e00 [ 31.720403] ? ip6_input+0x560/0x560 [ 31.724090] ? ip6_rcv_finish+0x8c0/0x8c0 [ 31.728211] __netif_receive_skb_core+0x1a41/0x3460 [ 31.733202] ? nf_ingress+0x9f0/0x9f0 [ 31.736983] ? __skb_flow_get_ports+0x370/0x420 [ 31.741629] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 31.746809] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 31.751967] ? do_csum+0x288/0x360 [ 31.755500] ? trace_hardirqs_off+0x10/0x10 [ 31.759791] ? csum_partial+0x21/0x30 [ 31.763563] ? csum_partial_ext+0x25/0x30 [ 31.767681] ? trace_hardirqs_off+0x10/0x10 [ 31.771972] ? __skb_checksum+0x4a9/0x7e0 [ 31.776093] ? is_bpf_text_address+0xa4/0x120 [ 31.780574] ? find_held_lock+0x35/0x1d0 [ 31.784611] ? print_irqtrace_events+0x270/0x270 [ 31.789344] ? netif_receive_skb_internal+0x1d7/0x670 [ 31.794509] ? lock_downgrade+0x980/0x980 [ 31.798632] ? pvclock_read_flags+0x160/0x160 [ 31.803101] ? mark_held_locks+0xaf/0x100 [ 31.807220] ? lock_acquire+0x1d5/0x580 [ 31.811165] ? lock_acquire+0x1d5/0x580 [ 31.815112] ? netif_receive_skb_internal+0xa2/0x670 [ 31.820188] ? ktime_get_with_offset+0x2c1/0x420 [ 31.824915] ? lock_release+0xa40/0xa40 [ 31.828861] ? ktime_get+0x3a0/0x3a0 [ 31.832546] ? lock_release+0xa40/0xa40 [ 31.836500] __netif_receive_skb+0x2c/0x1b0 [ 31.840793] ? __netif_receive_skb+0x2c/0x1b0 [ 31.845265] netif_receive_skb_internal+0x10b/0x670 [ 31.850254] ? dev_cpu_dead+0xb00/0xb00 [ 31.854287] ? net_rx_action+0x1910/0x1910 [ 31.858491] ? eth_type_trans+0x2b2/0x710 [ 31.862611] ? eth_gro_receive+0x820/0x820 [ 31.866827] napi_gro_frags+0x58a/0xaf0 [ 31.870773] ? napi_gro_receive+0x500/0x500 [ 31.875079] ? tun_get_user+0x26f7/0x3810 [ 31.879203] tun_get_user+0x2720/0x3810 [ 31.883151] ? print_irqtrace_events+0x270/0x270 [ 31.887880] ? trace_hardirqs_off+0x10/0x10 [ 31.892183] ? tun_build_skb.isra.50+0x1850/0x1850 [ 31.897086] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 31.902247] ? sock_i_uid+0x8d/0xb0 [ 31.905854] ? tun_get+0x1ab/0x2e0 [ 31.909371] ? lock_release+0xa40/0xa40 [ 31.913316] ? __lock_is_held+0xb6/0x140 [ 31.917367] ? tun_get+0x1d4/0x2e0 [ 31.920877] ? tun_do_read+0x26c0/0x26c0 [ 31.924919] ? __check_object_size+0x8b/0x530 [ 31.929388] ? rcu_note_context_switch+0x710/0x710 [ 31.934297] tun_chr_write_iter+0xbd/0x1c0 [ 31.938510] do_iter_readv_writev+0x55c/0x830 [ 31.942977] ? vfs_dedupe_file_range+0x8f0/0x8f0 [ 31.947708] ? rw_verify_area+0xe5/0x2b0 [ 31.951741] do_iter_write+0x154/0x540 [ 31.955600] ? dup_iter+0x260/0x260 [ 31.959202] ? lock_release+0xa40/0xa40 [ 31.963161] vfs_writev+0x18a/0x340 [ 31.966765] ? vfs_iter_write+0xb0/0xb0 [ 31.970710] ? _raw_spin_unlock_bh+0x30/0x40 [ 31.975090] ? inet6_hash+0x7f/0x90 [ 31.978690] ? __fdget_pos+0x130/0x190 [ 31.982549] ? __fdget_raw+0x20/0x20 [ 31.986232] ? inet_exit_net+0x10/0x10 [ 31.990091] ? selinux_socket_listen+0x36/0x40 [ 31.994649] do_writev+0xfc/0x2a0 [ 31.998071] ? do_writev+0xfc/0x2a0 [ 32.001668] ? SyS_listen+0x207/0x350 [ 32.005442] ? vfs_writev+0x340/0x340 [ 32.009212] ? mm_fault_error+0x2c0/0x2c0 [ 32.013330] ? move_addr_to_kernel+0x60/0x60 [ 32.017713] SyS_writev+0x27/0x30 [ 32.021138] ? SyS_readv+0x30/0x30 [ 32.024651] do_syscall_64+0x281/0x940 [ 32.028509] ? __do_page_fault+0xc90/0xc90 [ 32.032716] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 32.038225] ? syscall_return_slowpath+0x550/0x550 [ 32.043128] ? syscall_return_slowpath+0x2ac/0x550 [ 32.048043] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 32.053393] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 32.058212] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 32.063372] RIP: 0033:0x443150 [ 32.066530] RSP: 002b:00007ffefe0bdad8 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 32.074206] RAX: ffffffffffffffda RBX: 000000000000001a RCX: 0000000000443150 [ 32.081457] RDX: 0000000000000001 RSI: 00007ffefe0bdaf0 RDI: 00000000000000fc [ 32.088708] RBP: 00000000004a4a9b R08: 0000000000000013 R09: 0000000000000000 [ 32.095964] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffefe0bdc10 [ 32.103208] R13: 00000000004042a0 R14: 0000000000000000 R15: 0000000000000000 [ 32.110916] Dumping ftrace buffer: [ 32.114441] (ftrace buffer empty) [ 32.118123] Kernel Offset: disabled [ 32.121727] Rebooting in 86400 seconds..