2017/08/15 10:45:16 parsed 1 programs 2017/08/15 10:45:16 executed programs: 0 syzkaller login: [ 22.760906] kasan: CONFIG_KASAN_INLINE enabled [ 22.761543] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 22.762517] general protection fault: 0000 [#1] SMP KASAN [ 22.762973] Dumping ftrace buffer: [ 22.763276] (ftrace buffer empty) [ 22.763590] Modules linked in: [ 22.763832] CPU: 3 PID: 3069 Comm: syz-executor0 Not tainted 4.13.0-rc5-next-20170815+ #3 [ 22.764503] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Bochs 01/01/2011 [ 22.765217] task: ffff88003ca4a880 task.stack: ffff880039da8000 [ 22.765727] RIP: 0010:skb_release_data+0x26c/0x790 [ 22.766144] RSP: 0018:ffff880039dae6b0 EFLAGS: 00010202 [ 22.766586] RAX: 0000000000000004 RBX: dffffc0000000000 RCX: 1ffff100073b5d05 [ 22.767188] RDX: 0000000000000000 RSI: ffff88006b484afa RDI: 0000000000000020 [ 22.767803] RBP: ffff880039dae7d0 R08: ffffffff84027169 R09: 0000000000000000 [ 22.768409] R10: ffff880039daec70 R11: ffffffff85b34c40 R12: ffff88003b2d81b0 [ 22.769027] R13: ffffed00073b5ced R14: 1ffff100073b5ce5 R15: 0000000000000000 [ 22.769646] FS: 00007f5e2478f700(0000) GS:ffff88006df00000(0000) knlGS:0000000000000000 [ 22.770346] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 22.770842] CR2: 00000000006e8740 CR3: 000000006a7b5000 CR4: 00000000000006e0 [ 22.771456] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 22.772022] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 22.772671] Call Trace: [ 22.773009] ? skb_tx_error+0x2c0/0x2c0 [ 22.773535] ? update_curr+0x30c/0x800 [ 22.774001] ? account_entity_dequeue+0x22e/0x590 [ 22.774587] skb_release_all+0x4a/0x60 [ 22.775018] kfree_skb+0x15d/0x4c0 [ 22.775333] ? sctp_rcv+0x6e9/0x3480 [ 22.775628] ? __kfree_skb+0x20/0x20 [ 22.775892] ? lock_release+0xa40/0xa40 [ 22.776246] ? __get_user_pages_fast+0xa22/0x2ea0 [ 22.776654] ? fib_validate_source+0x15f/0x3a0 [ 22.777040] sctp_rcv+0x6e9/0x3480 [ 22.777346] ? ip_route_input_rcu+0x2a73/0x3210 [ 22.777713] ? ip_route_input_rcu+0x1193/0x3210 [ 22.778122] ? sctp_addrs_lookup_transport+0x920/0x920 [ 22.778548] ? rt_flush_dev+0x290/0x290 [ 22.778887] ? ipt_do_table+0xc9e/0x12e0 [ 22.779245] ? trace_hardirqs_on+0xd/0x10 [ 22.779599] ? __local_bh_enable_ip+0x9d/0x160 [ 22.779988] ? ipt_do_table+0xc9e/0x12e0 [ 22.780349] ? trace_hardirqs_on+0xd/0x10 [ 22.780699] ? __local_bh_enable_ip+0x9d/0x160 [ 22.781107] ? raw_local_deliver+0x24f/0xb20 [ 22.781491] ? lock_acquire+0x1d5/0x580 [ 22.781832] ? lock_acquire+0x1d5/0x580 [ 22.782177] ? raw_rcv+0x410/0x410 [ 22.782482] ? lock_release+0xa40/0xa40 [ 22.782819] ? iptable_nat_ipv4_fn+0x40/0x40 [ 22.783440] ? nf_nat_ipv4_in_range+0xf0/0xf0 [ 22.783732] ? ip_local_deliver+0x48c/0x6d0 [ 22.784030] ip_local_deliver_finish+0x2e2/0xba0 [ 22.784400] ? ip_local_deliver_finish+0x2e2/0xba0 [ 22.784787] ? inet_del_offload+0x40/0x40 [ 22.785131] ip_local_deliver+0x1ce/0x6d0 [ 22.785456] ? ip_call_ra_chain+0x6d0/0x6d0 [ 22.785824] ? ip_route_input_noref+0x13c/0x1e0 [ 22.786233] ? ip_route_input_rcu+0x3210/0x3210 [ 22.786629] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 22.787068] ? inet_del_offload+0x40/0x40 [ 22.787419] ip_rcv_finish+0x8db/0x19c0 [ 22.787756] ? iptable_nat_ipv4_fn+0x40/0x40 [ 22.788081] ? ip_local_deliver_finish+0xba0/0xba0 [ 22.788498] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 22.788933] ? ip_rcv+0xf05/0x17d0 [ 22.789233] ? lock_downgrade+0x990/0x990 [ 22.789585] ? iptable_nat_ipv4_in+0x2c/0x40 [ 22.789961] ? nf_hook_slow+0x12d/0x290 [ 22.790250] ? nf_unregister_afinfo+0x150/0x150 [ 22.790587] ? lock_release+0xa40/0xa40 [ 22.790928] ? __read_once_size_nocheck.constprop.8+0x10/0x10 [ 22.791378] ip_rcv+0xc3f/0x17d0 [ 22.791666] ? ip_local_deliver+0x6d0/0x6d0 [ 22.792033] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 22.792372] ? lock_release+0xa40/0xa40 [ 22.792675] ? unwind_dump+0x4c0/0x4c0 [ 22.793018] ? ip_local_deliver_finish+0xba0/0xba0 [ 22.793431] ? ip_local_deliver+0x6d0/0x6d0 [ 22.793780] __netif_receive_skb_core+0x19af/0x33d0 [ 22.794186] ? unwind_get_return_address+0x61/0xa0 [ 22.794606] ? nf_ingress+0x9f0/0x9f0 [ 22.794905] ? save_stack+0xa3/0xd0 [ 22.795212] ? save_stack_trace+0x16/0x20 [ 22.795558] ? save_stack+0x43/0xd0 [ 22.795804] ? kasan_kmalloc+0xad/0xe0 [ 22.796111] ? kasan_slab_alloc+0x12/0x20 [ 22.796430] ? kmem_cache_alloc+0x12e/0x760 [ 22.796787] ? __build_skb+0x9d/0x450 [ 22.797110] ? build_skb+0x6f/0x260 [ 22.797419] ? tun_get_user+0x1db7/0x2150 [ 22.797773] ? tun_chr_write_iter+0xd8/0x190 [ 22.798147] ? __vfs_write+0x684/0x970 [ 22.798440] ? vfs_write+0x189/0x510 [ 22.798755] ? __skb_flow_get_ports+0x151/0x400 [ 22.799147] ? flow_get_u32_dst+0x130/0x130 [ 22.799466] ? __skb_flow_get_ports+0x151/0x400 [ 22.799831] ? __skb_flow_dissect+0xfa1/0x3ae0 [ 22.800220] ? __sched_text_start+0x8/0x8 [ 22.800576] ? __skb_flow_get_ports+0x400/0x400 [ 22.800976] ? lock_acquire+0x1d5/0x580 [ 22.801311] ? netif_receive_skb_internal+0x1d7/0x5e0 [ 22.801749] ? lock_downgrade+0x990/0x990 [ 22.802100] ? pvclock_read_flags+0x160/0x160 [ 22.802459] ? __build_skb+0x325/0x450 [ 22.802791] ? lock_acquire+0x1d5/0x580 [ 22.803124] ? lock_acquire+0x1d5/0x580 [ 22.803458] ? netif_receive_skb_internal+0x93/0x5e0 [ 22.803879] ? ktime_get_with_offset+0x2c1/0x420 [ 22.804500] ? lock_release+0xa40/0xa40 [ 22.804804] ? do_gettimeofday+0x190/0x190 [ 22.805110] ? __build_skb+0x450/0x450 [ 22.805397] __netif_receive_skb+0x2c/0x1b0 [ 22.805762] ? __netif_receive_skb+0x2c/0x1b0 [ 22.806112] netif_receive_skb_internal+0x10b/0x5e0 [ 22.806536] ? dev_cpu_dead+0xb00/0xb00 [ 22.806825] ? tun_device_event+0xca0/0xca0 [ 22.807151] ? futex_wake+0x680/0x680 [ 22.807474] ? __unqueue_futex+0x1c0/0x290 [ 22.807846] ? drop_futex_key_refs.isra.13+0x63/0xb0 [ 22.808271] netif_receive_skb+0xae/0x390 [ 22.808628] ? netif_receive_skb_internal+0x5e0/0x5e0 [ 22.809062] ? mark_wake_futex+0xc0/0x1c0 [ 22.809393] ? futex_wait_setup+0x3d0/0x3d0 [ 22.809739] ? tun_rx_batched.isra.43+0x5bd/0x860 [ 22.810085] tun_rx_batched.isra.43+0x5e7/0x860 [ 22.810470] ? skb_get_hash_perturb+0x9d0/0x9d0 [ 22.810863] ? tun_sock_write_space+0x370/0x370 [ 22.811177] ? tun_free_netdev+0x1b0/0x1b0 [ 22.811465] tun_get_user+0x11dd/0x2150 [ 22.811740] ? tun_flow_update+0xf70/0xf70 [ 22.812103] ? lock_acquire+0x1d5/0x580 [ 22.812418] ? lock_acquire+0x1d5/0x580 [ 22.812757] ? __tun_get+0x1ab/0x2e0 [ 22.813082] ? lock_downgrade+0x990/0x990 [ 22.813433] ? lock_release+0xa40/0xa40 [ 22.813762] ? __fget+0x35c/0x570 [ 22.814059] ? __fget+0x35c/0x570 [ 22.814358] ? __tun_get+0x1d4/0x2e0 [ 22.814674] ? tun_chr_close+0x60/0x60 [ 22.815005] ? userfaultfd_unmap_prep+0x540/0x540 [ 22.815400] tun_chr_write_iter+0xd8/0x190 [ 22.815759] __vfs_write+0x684/0x970 [ 22.816076] ? default_llseek+0x290/0x290 [ 22.816433] ? _cond_resched+0x14/0x30 [ 22.816729] ? avc_policy_seqno+0x9/0x20 [ 22.817059] ? selinux_file_permission+0x82/0x460 [ 22.817423] ? rw_verify_area+0xe5/0x2b0 [ 22.817765] ? __fdget_raw+0x20/0x20 [ 22.818076] vfs_write+0x189/0x510 [ 22.818378] SyS_write+0xef/0x220 [ 22.818671] ? SyS_read+0x220/0x220 [ 22.818953] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 22.819360] entry_SYSCALL_64_fastpath+0x1f/0xbe [ 22.819759] RIP: 0033:0x40bab1 [ 22.820026] RSP: 002b:00007f5e2478ec00 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 22.820642] RAX: ffffffffffffffda RBX: 000000000000002a RCX: 000000000040bab1 [ 22.821208] RDX: 000000000000002a RSI: 0000000020000000 RDI: 0000000000000003 [ 22.821722] RBP: 00007ffd4707ec70 R08: 0000000000000000 R09: 0000000000000000 [ 22.822325] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 22.822941] R13: 0000000000000000 R14: 00007f5e2478f9c0 R15: 00007f5e2478f700 [ 22.823553] Code: c6 e8 c9 78 8d fd 4c 89 e0 48 c1 e8 03 80 3c 18 00 0f 85 93 04 00 00 4d 8b 3c 24 41 c6 45 00 00 49 8d 7f 20 48 89 f8 48 c1 e8 03 <80> 3c 18 00 0f 85 6b 04 00 00 41 80 7d 00 00 49 8b 47 20 0f 85 [ 22.825252] RIP: skb_release_data+0x26c/0x790 RSP: ffff880039dae6b0 [ 22.826125] ---[ end trace f3d4c36f8f3e37dc ]--- [ 22.826655] Kernel panic - not syncing: Fatal exception in interrupt [ 22.827329] Dumping ftrace buffer: [ 22.827565] (ftrace buffer empty) [ 22.827876] Kernel Offset: disabled [ 22.828186] Rebooting in 86400 seconds..