executing program syzkaller login: [ 17.507076] netlink: 13 bytes leftover after parsing attributes in process `syzkaller048598'. [ 17.508135] kasan: CONFIG_KASAN_INLINE enabled [ 17.508631] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 17.509581] general protection fault: 0000 [#1] SMP KASAN [ 17.509982] Dumping ftrace buffer: [ 17.510237] (ftrace buffer empty) [ 17.510493] Modules linked in: [ 17.510710] CPU: 1 PID: 2926 Comm: syzkaller048598 Not tainted 4.13.0-rc4-next-20170811 #1 [ 17.511273] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Bochs 01/01/2011 [ 17.511893] task: ffff88006c752940 task.stack: ffff880068bc0000 [ 17.512511] RIP: 0010:fib_dump_info+0x3aa/0x1470 [ 17.512946] RSP: 0018:ffff880068bc6c08 EFLAGS: 00010206 [ 17.513313] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 17.513792] RDX: 0000000000000006 RSI: 0000000000000002 RDI: 0000000000000030 [ 17.514312] RBP: ffff880068bc6e60 R08: ffffed0007c78d81 R09: ffffed0007c78d81 [ 17.515020] R10: 0000000000000001 R11: ffffed0007c78d80 R12: ffff88003e3c6bf5 [ 17.515720] R13: 0000000000000000 R14: ffff88003e3c6be4 R15: ffff88003d4b76c0 [ 17.516211] FS: 00000000024ac880(0000) GS:ffff88003fd00000(0000) knlGS:0000000000000000 [ 17.516769] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 17.517199] CR2: 0000000020b9fff0 CR3: 000000003a032000 CR4: 00000000000006e0 [ 17.518014] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 17.518763] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 17.519539] Call Trace: [ 17.519770] ? ip_route_input_noref+0x1e0/0x1e0 [ 17.520172] ? kmem_cache_alloc_node_trace+0x323/0x710 [ 17.520651] ? fib_create_info+0x3870/0x3870 [ 17.521032] ? __kmalloc_node_track_caller+0x47/0x70 [ 17.521503] ? memset+0x31/0x40 [ 17.521794] ? __alloc_skb+0x548/0x740 [ 17.522155] ? lock_acquire+0x1d5/0x580 [ 17.522483] ? lock_acquire+0x1d5/0x580 [ 17.522750] ? inet_rtm_getroute+0xaa0/0x2d40 [ 17.523051] ? lock_release+0xa40/0xa40 [ 17.523326] ? nla_parse+0x29a/0x3d0 [ 17.523578] inet_rtm_getroute+0xfb7/0x2d40 [ 17.523867] ? rtnetlink_rcv_msg+0x65c/0x1090 [ 17.524214] ? ipv4_sk_update_pmtu+0xa90/0xa90 [ 17.524542] ? __might_sleep+0x95/0x190 [ 17.524809] ? rtnetlink_rcv_msg+0x65c/0x1090 [ 17.525108] ? __mutex_lock+0x16f/0x1870 [ 17.525386] ? rtnetlink_rcv_msg+0x65c/0x1090 [ 17.525685] ? rtnetlink_rcv_msg+0x65c/0x1090 [ 17.525986] ? mutex_lock_io_nested+0x1740/0x1740 [ 17.526374] ? __lock_acquire+0x6aa/0x3bc0 [ 17.526658] ? check_noncircular+0x20/0x20 [ 17.526945] ? __lock_acquire+0x6aa/0x3bc0 [ 17.527227] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 17.527585] ? check_noncircular+0x20/0x20 [ 17.528330] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 17.528689] ? __lock_acquire+0x6aa/0x3bc0 [ 17.528974] ? check_noncircular+0x20/0x20 [ 17.529279] ? ipv4_sk_update_pmtu+0xa90/0xa90 [ 17.529597] rtnetlink_rcv_msg+0x733/0x1090 [ 17.529888] ? rtnl_calcit.isra.23+0x4f0/0x4f0 [ 17.530203] ? trace_hardirqs_on+0xd/0x10 [ 17.530497] ? check_noncircular+0x20/0x20 [ 17.530781] ? find_held_lock+0x35/0x1d0 [ 17.531054] ? netlink_lookup+0x5f7/0xa90 [ 17.531341] ? find_held_lock+0x35/0x1d0 [ 17.531624] ? ipv4_sk_update_pmtu+0xa90/0xa90 [ 17.531933] ? lock_downgrade+0x990/0x990 [ 17.532209] ? lock_release+0xa40/0xa40 [ 17.532493] ? netlink_lookup+0x620/0xa90 [ 17.532770] ? ipv4_sk_update_pmtu+0xa90/0xa90 [ 17.533076] ? netlink_connect+0x4e0/0x4e0 [ 17.533366] ? netlink_deliver_tap+0x176/0xa60 [ 17.533681] ? iov_iter_advance+0x2a1/0x13f0 [ 17.533976] ? sock_has_perm+0x29c/0x400 [ 17.534262] netlink_rcv_skb+0x216/0x440 [ 17.534544] ? rtnl_calcit.isra.23+0x4f0/0x4f0 [ 17.534850] ? netlink_ack+0xab0/0xab0 [ 17.535111] ? netlink_skb_destructor+0x1d0/0x1d0 [ 17.535448] ? selinux_nlmsg_lookup+0x32b/0x430 [ 17.535768] rtnetlink_rcv+0x1c/0x20 [ 17.536016] netlink_unicast+0x4e8/0x6f0 [ 17.536300] ? netlink_attachskb+0x8a0/0x8a0 [ 17.536605] ? security_netlink_send+0x81/0xb0 [ 17.536910] netlink_sendmsg+0xa4a/0xe60 [ 17.537217] ? netlink_unicast+0x6f0/0x6f0 [ 17.537522] ? security_socket_sendmsg+0x89/0xb0 [ 17.537842] ? netlink_unicast+0x6f0/0x6f0 [ 17.538167] sock_sendmsg+0xca/0x110 [ 17.538450] sock_write_iter+0x31a/0x5d0 [ 17.538735] ? sock_sendmsg+0x110/0x110 [ 17.539004] ? selinux_capset+0x100/0x100 [ 17.539292] ? ___might_sleep+0x45c/0x470 [ 17.539582] do_iter_readv_writev+0x525/0x7f0 [ 17.539883] ? vfs_dedupe_file_range+0x900/0x900 [ 17.540201] ? rw_verify_area+0xe5/0x2b0 [ 17.540487] do_iter_write+0x154/0x540 [ 17.540759] ? dup_iter+0x260/0x260 [ 17.541006] ? __do_page_fault+0x51b/0xb60 [ 17.541303] vfs_writev+0x18a/0x340 [ 17.541554] ? __fget_light+0x297/0x380 [ 17.541818] ? vfs_iter_write+0xb0/0xb0 [ 17.542085] ? downgrade_write+0x150/0x150 [ 17.542383] ? vmacache_find+0x61/0x270 [ 17.542658] ? up_read+0x1a/0x40 [ 17.542883] ? __do_page_fault+0x35b/0xb60 [ 17.543169] ? __fdget_pos+0x130/0x190 [ 17.543438] ? __fdget_raw+0x20/0x20 [ 17.543695] ? do_page_fault+0x70/0x70 [ 17.543958] do_writev+0xfc/0x2a0 [ 17.544188] ? do_writev+0xfc/0x2a0 [ 17.544443] ? vfs_writev+0x340/0x340 [ 17.544704] ? entry_SYSCALL_64_fastpath+0x5/0xbe [ 17.545027] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 17.545374] SyS_writev+0x27/0x30 [ 17.545614] entry_SYSCALL_64_fastpath+0x1f/0xbe [ 17.545931] RIP: 0033:0x434ec9 [ 17.546144] RSP: 002b:00007ffe62164548 EFLAGS: 00000203 ORIG_RAX: 0000000000000014 [ 17.546675] RAX: ffffffffffffffda RBX: 00000000004002b0 RCX: 0000000000434ec9 [ 17.547150] RDX: 0000000000000001 RSI: 0000000020b9fff0 RDI: 0000000000000003 [ 17.547646] RBP: 0000000000000086 R08: 0000000000000000 R09: 0000000000000000 [ 17.548123] R10: 0000000000000000 R11: 0000000000000203 R12: 0000000000000000 [ 17.548620] R13: 0000000000401840 R14: 00000000004018d0 R15: 0000000000000000 [ 17.549125] Code: 0f b6 b5 e4 fd ff ff 48 8b 85 f0 fd ff ff 40 88 70 17 48 8b 45 28 48 8d 78 30 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 8d 0e 00 00 48 8b 45 28 44 [ 17.551168] RIP: fib_dump_info+0x3aa/0x1470 RSP: ffff880068bc6c08 [ 17.551732] ---[ end trace 3df3427e9b9d91b4 ]--- [ 17.552070] Kernel panic - not syncing: Fatal exception [ 17.553471] Dumping ftrace buffer: [ 17.553794] (ftrace buffer empty) [ 17.554112] Kernel Offset: disabled [ 17.554515] Rebooting in 86400 seconds..