net.ipv6.conf.syz0.accept_dad = 0 net.ipv6.conf.syz0.router_solicitations = 0 executing program syzkaller login: [ 18.562776] netlink: 13 bytes leftover after parsing attributes in process `syzkaller265807'. [ 18.563599] ------------[ cut here ]------------ [ 18.564053] WARNING: CPU: 0 PID: 3009 at mm/slab_common.c:962 kmalloc_slab+0x5d/0x70 [ 18.564734] Kernel panic - not syncing: panic_on_warn set ... [ 18.564734] [ 18.565379] CPU: 0 PID: 3009 Comm: syzkaller265807 Not tainted 4.13.0-rc5-next-20170817+ #5 [ 18.566112] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Bochs 01/01/2011 [ 18.566824] Call Trace: [ 18.567052] dump_stack+0x194/0x257 [ 18.567293] ? arch_local_irq_restore+0x53/0x53 [ 18.567604] panic+0x1e4/0x417 [ 18.567818] ? __warn+0x1d9/0x1d9 [ 18.568056] ? show_regs_print_info+0x65/0x65 [ 18.568363] ? kmalloc_slab+0x5d/0x70 [ 18.568620] __warn+0x1c4/0x1d9 [ 18.568843] ? kmalloc_slab+0x5d/0x70 [ 18.569102] report_bug+0x211/0x2d0 [ 18.569350] fixup_bug+0x40/0x90 [ 18.569579] do_trap+0x260/0x390 [ 18.569809] ? kasan_kmalloc+0xad/0xe0 [ 18.570071] ? __kmalloc+0x162/0x760 [ 18.570324] do_error_trap+0x120/0x390 [ 18.570587] ? rtnetlink_rcv+0x1c/0x20 [ 18.570850] ? netlink_unicast+0x4e8/0x6f0 [ 18.571175] ? netlink_sendmsg+0xa4a/0xe60 [ 18.571542] ? do_trap+0x390/0x390 [ 18.571852] ? do_writev+0xfc/0x2a0 [ 18.572166] ? kmalloc_slab+0x5d/0x70 [ 18.572422] ? lock_acquire+0x1d5/0x580 [ 18.573085] ? lock_acquire+0x1d5/0x580 [ 18.573351] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 18.573674] do_invalid_op+0x1b/0x20 [ 18.573921] invalid_op+0x18/0x20 [ 18.574151] RIP: 0010:kmalloc_slab+0x5d/0x70 [ 18.574441] RSP: 0018:ffff880068edea98 EFLAGS: 00010246 [ 18.574793] RAX: 0000000000000000 RBX: ffff88003e97df40 RCX: 0000000000000000 [ 18.575268] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000700040 [ 18.575749] RBP: ffff880068edea98 R08: 0000000000000000 R09: 1ffff1000d1dbcd9 [ 18.576221] R10: ffff880068ede690 R11: ffffffff85cc0538 R12: 0000000000000000 [ 18.576695] R13: 0000000000000001 R14: 00000000014080c0 R15: dffffc0000000000 [ 18.577176] __kmalloc+0x25/0x760 [ 18.577407] ? dev_map_notification+0x9a/0x5e0 [ 18.577713] ? put_dec_trunc8+0x13f/0x2d0 [ 18.577992] ? tun_device_event+0x403/0xcb0 [ 18.578280] tun_device_event+0x403/0xcb0 [ 18.578557] ? sel_netif_destroy+0x250/0x250 [ 18.578849] ? netlbl_unlhsh_netdev_handler+0xba/0x380 [ 18.579199] ? netlbl_unlhsh_free_iface+0x5e0/0x5e0 [ 18.579530] ? fib_rules_event+0x94/0x590 [ 18.579811] notifier_call_chain+0x136/0x2c0 [ 18.580141] ? raw_notifier_chain_unregister+0x1b0/0x1b0 [ 18.580613] ? dev_set_rx_mode+0x2f/0x40 [ 18.580884] ? __dev_change_flags+0x643/0x990 [ 18.581182] ? lock_downgrade+0x990/0x990 [ 18.581461] ? __dev_notify_flags+0x155/0x2e0 [ 18.581763] ? rtnl_is_locked+0x54/0xb0 [ 18.582032] ? rtnl_kfree_skbs+0x70/0x70 [ 18.582308] raw_notifier_call_chain+0x2d/0x40 [ 18.582616] call_netdevice_notifiers_info+0x51/0x90 [ 18.582959] call_netdevice_notifiers+0x6a/0x90 [ 18.583272] ? call_netdevice_notifiers_info+0x90/0x90 [ 18.583627] ? dev_change_flags+0xfa/0x140 [ 18.583916] do_setlink+0xbe5/0x38d0 [ 18.584171] ? rtnl_register+0x70/0x70 [ 18.584434] ? trace_hardirqs_off_caller+0x230/0x2c0 [ 18.584775] ? wake_up_klogd+0x100/0x100 [ 18.585048] ? vprintk_emit+0x49b/0x590 [ 18.585315] ? __down_trylock_console_sem+0x18b/0x1e0 [ 18.585660] ? __down_trylock_console_sem+0x10d/0x1e0 [ 18.586007] ? vprintk_emit+0x3ea/0x590 [ 18.586277] ? vprintk_default+0x28/0x30 [ 18.586549] ? vprintk_func+0x5e/0xc0 [ 18.586805] ? printk+0xaa/0xca [ 18.587026] ? show_regs_print_info+0x65/0x65 [ 18.587328] ? idr_get_free+0xff0/0xff0 [ 18.587621] ? mutex_lock_io_nested+0x1740/0x1740 [ 18.587968] ? nla_parse+0x29a/0x3d0 [ 18.588258] ? nla_validate+0x1c0/0x1c0 [ 18.588581] ? fs_reclaim_acquire+0x20/0x20 [ 18.588881] ? lock_downgrade+0x990/0x990 [ 18.589170] ? validate_linkmsg+0x31b/0x4e0 [ 18.589551] rtnl_setlink+0x270/0x3c0 [ 18.589859] ? do_setlink+0x38d0/0x38d0 [ 18.590191] ? cred_has_capability+0x1a0/0x3d0 [ 18.590521] ? do_setlink+0x38d0/0x38d0 [ 18.590838] rtnetlink_rcv_msg+0x733/0x1090 [ 18.591140] ? rtnl_calcit.isra.23+0x4f0/0x4f0 [ 18.591442] ? trace_hardirqs_on+0xd/0x10 [ 18.591720] ? depot_save_stack+0x3b5/0x490 [ 18.592010] ? lock_acquire+0x1d5/0x580 [ 18.592299] ? lock_acquire+0x1d5/0x580 [ 18.592598] ? netlink_lookup+0x5f7/0xa90 [ 18.592926] ? lock_downgrade+0x990/0x990 [ 18.593215] ? vfs_writev+0x18a/0x340 [ 18.593469] ? lock_release+0xa40/0xa40 [ 18.593801] ? lock_acquire+0x1d5/0x580 [ 18.594410] ? lock_acquire+0x1d5/0x580 [ 18.594712] ? do_setlink+0x38d0/0x38d0 [ 18.594973] ? lock_downgrade+0x990/0x990 [ 18.595242] ? lock_release+0xa40/0xa40 [ 18.595527] ? netlink_lookup+0x620/0xa90 [ 18.595806] ? do_setlink+0x38d0/0x38d0 [ 18.596090] ? netlink_connect+0x4e0/0x4e0 [ 18.596381] ? netlink_deliver_tap+0x176/0xa60 [ 18.596709] ? iov_iter_advance+0x2a1/0x13f0 [ 18.597023] ? sock_has_perm+0x29c/0x400 [ 18.597301] netlink_rcv_skb+0x216/0x440 [ 18.597564] ? rtnl_calcit.isra.23+0x4f0/0x4f0 [ 18.597904] ? netlink_ack+0xab0/0xab0 [ 18.598186] ? netlink_skb_destructor+0x1d0/0x1d0 [ 18.598537] ? selinux_nlmsg_lookup+0x32b/0x430 [ 18.598878] rtnetlink_rcv+0x1c/0x20 [ 18.599153] netlink_unicast+0x4e8/0x6f0 [ 18.599428] ? netlink_attachskb+0x8a0/0x8a0 [ 18.599753] ? security_netlink_send+0x81/0xb0 [ 18.600060] netlink_sendmsg+0xa4a/0xe60 [ 18.600348] ? netlink_unicast+0x6f0/0x6f0 [ 18.600647] ? security_socket_sendmsg+0x89/0xb0 [ 18.601031] ? netlink_unicast+0x6f0/0x6f0 [ 18.601336] sock_sendmsg+0xca/0x110 [ 18.601608] sock_write_iter+0x31a/0x5d0 [ 18.601874] ? sock_sendmsg+0x110/0x110 [ 18.602168] ? selinux_capset+0x100/0x100 [ 18.602465] ? __might_sleep+0x4c/0x190 [ 18.602776] do_iter_readv_writev+0x525/0x7f0 [ 18.603129] ? vfs_dedupe_file_range+0x900/0x900 [ 18.603441] ? rw_verify_area+0xe5/0x2b0 [ 18.603727] do_iter_write+0x154/0x540 [ 18.603989] ? dup_iter+0x260/0x260 [ 18.604234] ? __do_page_fault+0x51b/0xb60 [ 18.604573] vfs_writev+0x18a/0x340 [ 18.604830] ? __fget_light+0x297/0x380 [ 18.605138] ? vfs_iter_write+0xb0/0xb0 [ 18.605405] ? __handle_mm_fault+0x3980/0x3980 [ 18.605723] ? vmacache_find+0x61/0x270 [ 18.605999] ? up_read+0x1a/0x40 [ 18.606277] ? __do_page_fault+0x35b/0xb60 [ 18.606556] ? __fdget_pos+0x130/0x190 [ 18.606840] ? __fdget_raw+0x20/0x20 [ 18.607110] ? do_page_fault+0x70/0x70 [ 18.607366] do_writev+0xfc/0x2a0 [ 18.607591] ? do_writev+0xfc/0x2a0 [ 18.607863] ? vfs_writev+0x340/0x340 [ 18.608132] ? perf_trace_sys_enter+0xc20/0xc20 [ 18.608439] SyS_writev+0x27/0x30 [ 18.608667] entry_SYSCALL_64_fastpath+0x1f/0xbe [ 18.609005] RIP: 0033:0x43a3a9 [ 18.609239] RSP: 002b:00000000007dfe58 EFLAGS: 00000207 ORIG_RAX: 0000000000000014 [ 18.609735] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000043a3a9 [ 18.610270] RDX: 0000000000000001 RSI: 0000000020001ff0 RDI: 0000000000000004 [ 18.610734] RBP: 00000000007dff70 R08: 0000000000000000 R09: 0000000000000000 [ 18.611259] R10: 0000000000000000 R11: 0000000000000207 R12: 0000000000000000 [ 18.611743] R13: 00000000004029d0 R14: 0000000000402a60 R15: 0000000000000000 [ 18.612384] Dumping ftrace buffer: [ 18.612630] (ftrace buffer empty) [ 18.612885] Kernel Offset: disabled [ 18.613140] Rebooting in 86400 seconds..