Debian GNU/Linux 7 syzkaller ttyS0 2017/08/15 17:38:49 parsed 1 programs 2017/08/15 17:38:49 executed programs: 0 syzkaller login: [ 22.314870] BUG: unable to handle kernel paging request at ffffff0100008000 [ 22.315347] IP: skb_release_data+0x3c2/0x790 [ 22.315636] PGD 644b067 [ 22.315639] P4D 644b067 [ 22.315802] PUD 0 [ 22.315969] [ 22.316226] Oops: 0000 [#1] SMP KASAN [ 22.316484] Dumping ftrace buffer: [ 22.316700] (ftrace buffer empty) [ 22.316929] Modules linked in: [ 22.317135] CPU: 2 PID: 3117 Comm: syz-executor0 Not tainted 4.13.0-rc5-next-20170815+ #3 [ 22.317651] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Bochs 01/01/2011 [ 22.318146] task: ffff88003c9266c0 task.stack: ffff88003b358000 [ 22.318532] RIP: 0010:skb_release_data+0x3c2/0x790 [ 22.318834] RSP: 0018:ffff88003b35eda8 EFLAGS: 00010246 [ 22.319163] RAX: 1fffffe020001000 RBX: 0000000000000020 RCX: 1ffff1000766bde4 [ 22.319622] RDX: 0000000000000000 RSI: 1ffff1000d3d275f RDI: ffff880068e90188 [ 22.320070] RBP: ffff88003b35eec8 R08: ffff880069e93b48 R09: 0000000000000000 [ 22.320533] R10: ffff88003b35f6b0 R11: 0000000000000007 R12: dffffc0000000000 [ 22.320980] R13: ffffff0100008000 R14: ffff880069e93a80 R15: 0000000000000000 [ 22.321431] FS: 00007f977032d700(0000) GS:ffff88006de00000(0000) knlGS:0000000000000000 [ 22.321980] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 22.322396] CR2: ffffff0100008000 CR3: 000000003ac69000 CR4: 00000000000006e0 [ 22.322888] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 22.323366] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 22.323855] Call Trace: [ 22.324034] ? perf_tp_event+0x7f4/0xae0 [ 22.324308] ? perf_trace_run_bpf_submit+0x1a7/0x290 [ 22.324669] ? skb_tx_error+0x2c0/0x2c0 [ 22.324942] ? find_get_context.isra.84+0x670/0x670 [ 22.325279] ? tracing_generic_entry_update+0x15a/0x1d0 [ 22.325655] ? perf_trace_buf_update+0x66/0xb0 [ 22.325969] skb_release_all+0x4a/0x60 [ 22.326233] kfree_skb+0x15d/0x4c0 [ 22.326473] ? ip_rcv+0x40a/0x17d0 [ 22.326723] ? __kfree_skb+0x20/0x20 [ 22.326978] ? find_get_context.isra.84+0x670/0x670 [ 22.327633] ? __is_insn_slot_addr+0x1fc/0x330 [ 22.327950] ? lock_release+0xa40/0xa40 [ 22.328231] ip_rcv+0x40a/0x17d0 [ 22.328466] ? ip_local_deliver+0x6d0/0x6d0 [ 22.328755] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 22.329106] ? lock_release+0xa40/0xa40 [ 22.329387] ? __free_insn_slot+0x5c0/0x5c0 [ 22.329694] ? ip_local_deliver+0x6d0/0x6d0 [ 22.329989] __netif_receive_skb_core+0x19af/0x33d0 [ 22.330326] ? unwind_get_return_address+0x61/0xa0 [ 22.330668] ? nf_ingress+0x9f0/0x9f0 [ 22.330957] ? perf_trace_run_bpf_submit+0x1a7/0x290 [ 22.331300] ? perf_trace_run_bpf_submit+0x1ae/0x290 [ 22.331640] ? save_stack+0xa3/0xd0 [ 22.331888] ? perf_tp_event+0xae0/0xae0 [ 22.332160] ? kasan_slab_alloc+0x12/0x20 [ 22.332441] ? kmem_cache_alloc+0x12e/0x760 [ 22.332730] ? __build_skb+0x9d/0x450 [ 22.332987] ? memset+0x31/0x40 [ 22.333216] ? perf_trace_run_bpf_submit+0x1a7/0x290 [ 22.333562] ? perf_trace_run_bpf_submit+0x1a7/0x290 [ 22.333904] ? perf_trace_run_bpf_submit+0x1ae/0x290 [ 22.334249] ? perf_tp_event+0xae0/0xae0 [ 22.334526] ? memset+0x31/0x40 [ 22.334754] ? perf_trace_lock_acquire+0x445/0x900 [ 22.335102] ? perf_trace_lock+0x860/0x860 [ 22.335389] ? lock_acquire+0x1d5/0x580 [ 22.335657] ? netif_receive_skb_internal+0x1d7/0x5e0 [ 22.336009] ? pvclock_read_flags+0x160/0x160 [ 22.336295] ? lock_acquire+0x1d5/0x580 [ 22.336563] ? lock_acquire+0x1d5/0x580 [ 22.336831] ? netif_receive_skb_internal+0x93/0x5e0 [ 22.337175] ? ktime_get_with_offset+0x2c1/0x420 [ 22.337499] ? lock_release+0xa40/0xa40 [ 22.337766] ? do_gettimeofday+0x190/0x190 [ 22.338053] ? __build_skb+0x450/0x450 [ 22.338324] __netif_receive_skb+0x2c/0x1b0 [ 22.338622] ? __netif_receive_skb+0x2c/0x1b0 [ 22.338928] netif_receive_skb_internal+0x10b/0x5e0 [ 22.339264] ? dev_cpu_dead+0xb00/0xb00 [ 22.339534] ? tun_device_event+0xca0/0xca0 [ 22.339828] ? futex_wake+0x680/0x680 [ 22.340072] ? perf_trace_run_bpf_submit+0x1a7/0x290 [ 22.340398] netif_receive_skb+0xae/0x390 [ 22.340654] ? netif_receive_skb_internal+0x5e0/0x5e0 [ 22.340975] ? perf_trace_run_bpf_submit+0x1a7/0x290 [ 22.341310] ? memset+0x31/0x40 [ 22.341532] ? perf_trace_run_bpf_submit+0x1a7/0x290 [ 22.341851] ? tun_rx_batched.isra.43+0x5bd/0x860 [ 22.342151] tun_rx_batched.isra.43+0x5e7/0x860 [ 22.342438] ? skb_get_hash_perturb+0x9d0/0x9d0 [ 22.342725] ? tun_sock_write_space+0x370/0x370 [ 22.343037] ? tun_free_netdev+0x1b0/0x1b0 [ 22.343330] tun_get_user+0x11dd/0x2150 [ 22.343590] ? tun_flow_update+0xf70/0xf70 [ 22.343866] ? lock_acquire+0x1d5/0x580 [ 22.344121] ? lock_acquire+0x1d5/0x580 [ 22.344370] ? __tun_get+0x1ab/0x2e0 [ 22.344602] ? lock_downgrade+0x990/0x990 [ 22.344873] ? lock_release+0xa40/0xa40 [ 22.345115] ? __fget+0x35c/0x570 [ 22.345345] ? __tun_get+0x1d4/0x2e0 [ 22.345572] ? tun_chr_close+0x60/0x60 [ 22.345818] ? rcu_note_context_switch+0x710/0x710 [ 22.346130] tun_chr_write_iter+0xd8/0x190 [ 22.346390] __vfs_write+0x684/0x970 [ 22.346623] ? default_llseek+0x290/0x290 [ 22.346888] ? _cond_resched+0x14/0x30 [ 22.347131] ? avc_policy_seqno+0x9/0x20 [ 22.347381] ? selinux_file_permission+0x82/0x460 [ 22.347688] ? rw_verify_area+0xe5/0x2b0 [ 22.347939] ? __fdget_raw+0x20/0x20 [ 22.348173] vfs_write+0x189/0x510 [ 22.348394] SyS_write+0xef/0x220 [ 22.348909] ? SyS_socket+0x137/0x200 [ 22.349146] ? SyS_read+0x220/0x220 [ 22.349372] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 22.349672] entry_SYSCALL_64_fastpath+0x1f/0xbe [ 22.349968] RIP: 0033:0x40bab1 [ 22.350163] RSP: 002b:00007f977032cc00 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 22.350636] RAX: ffffffffffffffda RBX: 0000000000000036 RCX: 000000000040bab1 [ 22.351077] RDX: 0000000000000036 RSI: 0000000020002000 RDI: 0000000000000003 [ 22.351521] RBP: 0000000000708000 R08: 0000000000000000 R09: 0000000000000000 [ 22.351961] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000ffffffff [ 22.352420] R13: 0000000000005510 R14: 00000000006e75d0 R15: 0000000000000004 [ 22.352892] Code: ff 49 bc 00 00 00 00 00 fc ff df 4c 8b 68 08 4d 85 ed 74 2b e8 60 77 8d fd 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 0f 85 97 03 00 00 <49> 8b 5d 00 4c 89 ef e8 42 cf ff ff 48 85 db 49 89 dd 75 d5 e8 [ 22.354206] RIP: skb_release_data+0x3c2/0x790 RSP: ffff88003b35eda8 [ 22.354590] CR2: ffffff0100008000 [ 22.354804] ---[ end trace 755787487774a961 ]--- [ 22.355095] Kernel panic - not syncing: Fatal exception in interrupt [ 22.355547] Dumping ftrace buffer: [ 22.355783] (ftrace buffer empty) [ 22.356028] Kernel Offset: disabled [ 22.356279] Rebooting in 86400 seconds..