2017/08/15 12:04:29 parsed 1 programs 2017/08/15 12:04:29 executed programs: 0 syzkaller login: [ 38.479491] kasan: CONFIG_KASAN_INLINE enabled [ 38.479819] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 38.480442] general protection fault: 0000 [#1] SMP KASAN [ 38.480829] Dumping ftrace buffer: [ 38.481135] (ftrace buffer empty) [ 38.481452] Modules linked in: [ 38.481726] CPU: 1 PID: 3038 Comm: syz-executor0 Not tainted 4.13.0-rc5-next-20170815+ #3 [ 38.482422] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Bochs 01/01/2011 [ 38.483134] task: ffff88006c7fc340 task.stack: ffff880069728000 [ 38.483649] RIP: 0010:skb_release_data+0x26c/0x790 [ 38.484065] RSP: 0018:ffff88006972eda8 EFLAGS: 00010207 [ 38.484520] RAX: 0e824260409bede2 RBX: dffffc0000000000 RCX: 1ffff1000d2e5de4 [ 38.485132] RDX: 0000000000000000 RSI: 1ffff100076c44e7 RDI: 7412130204df6f15 [ 38.485743] RBP: ffff88006972eec8 R08: ffff88003b622788 R09: 0000000000000000 [ 38.486357] R10: ffff88006972f6b0 R11: 0000000000000007 R12: ffff8800388a01b0 [ 38.486972] R13: ffffed000d2e5dcc R14: 1ffff1000d2e5dc4 R15: 7412130204df6ef5 [ 38.487581] FS: 00007f8e80a85700(0000) GS:ffff88003ed00000(0000) knlGS:0000000000000000 [ 38.488269] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.488763] CR2: 0000000000457040 CR3: 000000003b6bb000 CR4: 00000000000006e0 [ 38.489377] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.489985] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 38.490593] Call Trace: [ 38.490823] ? skb_tx_error+0x2c0/0x2c0 [ 38.491172] ? should_fail+0x23b/0xa40 [ 38.491432] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 38.491771] skb_release_all+0x4a/0x60 [ 38.492027] kfree_skb+0x15d/0x4c0 [ 38.492262] ? ip_rcv+0x40a/0x17d0 [ 38.492496] ? __kfree_skb+0x20/0x20 [ 38.492745] ? lock_acquire+0x1d5/0x580 [ 38.493006] ? lock_acquire+0x1d5/0x580 [ 38.493269] ? __is_insn_slot_addr+0x1fc/0x330 [ 38.493608] ? lock_downgrade+0x990/0x990 [ 38.493880] ? lock_release+0xa40/0xa40 [ 38.494193] ? __read_once_size_nocheck.constprop.8+0x10/0x10 [ 38.494630] ? entry_SYSCALL_64_fastpath+0x1f/0xbe [ 38.494955] ? bpf_prog_kallsyms_find+0xbd/0x440 [ 38.495275] ip_rcv+0x40a/0x17d0 [ 38.495536] ? ip_local_deliver+0x6d0/0x6d0 [ 38.495826] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 38.496185] ? lock_release+0xa40/0xa40 [ 38.496455] ? __free_insn_slot+0x5c0/0x5c0 [ 38.496746] ? unwind_dump+0x4c0/0x4c0 [ 38.497012] ? ip_local_deliver+0x6d0/0x6d0 [ 38.497303] __netif_receive_skb_core+0x19af/0x33d0 [ 38.497649] ? unwind_get_return_address+0x61/0xa0 [ 38.497992] ? nf_ingress+0x9f0/0x9f0 [ 38.498279] ? save_stack+0xa3/0xd0 [ 38.498574] ? save_stack_trace+0x16/0x20 [ 38.498870] ? save_stack+0x43/0xd0 [ 38.499135] ? kasan_kmalloc+0xad/0xe0 [ 38.499388] ? kasan_slab_alloc+0x12/0x20 [ 38.499879] ? kmem_cache_alloc+0x12e/0x760 [ 38.500188] ? __build_skb+0x9d/0x450 [ 38.500431] ? build_skb+0x6f/0x260 [ 38.500664] ? tun_get_user+0x1db7/0x2150 [ 38.500936] ? tun_chr_write_iter+0xd8/0x190 [ 38.501268] ? __vfs_write+0x684/0x970 [ 38.501515] ? vfs_write+0x189/0x510 [ 38.501753] ? __skb_flow_get_ports+0x151/0x400 [ 38.502097] ? flow_get_u32_dst+0x130/0x130 [ 38.502401] ? __skb_flow_get_ports+0x151/0x400 [ 38.502740] ? __skb_flow_dissect+0xfa1/0x3ae0 [ 38.503061] ? __sched_text_start+0x8/0x8 [ 38.503371] ? __skb_flow_get_ports+0x400/0x400 [ 38.503719] ? lock_acquire+0x1d5/0x580 [ 38.504030] ? netif_receive_skb_internal+0x1d7/0x5e0 [ 38.504456] ? lock_downgrade+0x990/0x990 [ 38.504741] ? pvclock_read_flags+0x160/0x160 [ 38.505102] ? __build_skb+0x325/0x450 [ 38.505359] ? lock_acquire+0x1d5/0x580 [ 38.505666] ? lock_acquire+0x1d5/0x580 [ 38.505937] ? netif_receive_skb_internal+0x93/0x5e0 [ 38.506299] ? ktime_get_with_offset+0x2c1/0x420 [ 38.506609] ? lock_release+0xa40/0xa40 [ 38.506907] ? do_gettimeofday+0x190/0x190 [ 38.507260] ? __build_skb+0x450/0x450 [ 38.507541] __netif_receive_skb+0x2c/0x1b0 [ 38.507849] ? __netif_receive_skb+0x2c/0x1b0 [ 38.508160] netif_receive_skb_internal+0x10b/0x5e0 [ 38.508550] ? dev_cpu_dead+0xb00/0xb00 [ 38.508903] ? tun_device_event+0xca0/0xca0 [ 38.509232] ? futex_wake+0x680/0x680 [ 38.509519] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 38.509878] ? drop_futex_key_refs.isra.13+0x63/0xb0 [ 38.510218] netif_receive_skb+0xae/0x390 [ 38.510501] ? netif_receive_skb_internal+0x5e0/0x5e0 [ 38.510880] ? futex_wait_setup+0x3d0/0x3d0 [ 38.511183] ? tun_rx_batched.isra.43+0x5bd/0x860 [ 38.511562] tun_rx_batched.isra.43+0x5e7/0x860 [ 38.511893] ? skb_get_hash_perturb+0x9d0/0x9d0 [ 38.512245] ? tun_sock_write_space+0x370/0x370 [ 38.512598] ? security_file_alloc+0x6d/0xa0 [ 38.512903] ? tun_free_netdev+0x1b0/0x1b0 [ 38.513192] tun_get_user+0x11dd/0x2150 [ 38.513463] ? tun_flow_update+0xf70/0xf70 [ 38.513751] ? lock_acquire+0x1d5/0x580 [ 38.514014] ? lock_acquire+0x1d5/0x580 [ 38.514319] ? __tun_get+0x1ab/0x2e0 [ 38.514575] ? lock_downgrade+0x990/0x990 [ 38.514857] ? lock_release+0xa40/0xa40 [ 38.515150] ? __fget+0x35c/0x570 [ 38.515395] ? __tun_get+0x1d4/0x2e0 [ 38.515651] ? tun_chr_close+0x60/0x60 [ 38.515917] ? rcu_note_context_switch+0x710/0x710 [ 38.516249] tun_chr_write_iter+0xd8/0x190 [ 38.516528] __vfs_write+0x684/0x970 [ 38.516773] ? default_llseek+0x290/0x290 [ 38.517067] ? _cond_resched+0x14/0x30 [ 38.517319] ? avc_policy_seqno+0x9/0x20 [ 38.517584] ? selinux_file_permission+0x82/0x460 [ 38.517905] ? rw_verify_area+0xe5/0x2b0 [ 38.518194] ? __fdget_raw+0x20/0x20 [ 38.518439] vfs_write+0x189/0x510 [ 38.518674] SyS_write+0xef/0x220 [ 38.518900] ? SyS_socket+0x137/0x200 [ 38.519166] ? SyS_read+0x220/0x220 [ 38.519431] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 38.519793] entry_SYSCALL_64_fastpath+0x1f/0xbe [ 38.520118] RIP: 0033:0x40bab1 [ 38.520326] RSP: 002b:00007f8e80a84c00 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 38.521146] RAX: ffffffffffffffda RBX: 000000000000003a RCX: 000000000040bab1 [ 38.521853] RDX: 000000000000003a RSI: 0000000020d96000 RDI: 0000000000000003 [ 38.522465] RBP: 0000000000a5f870 R08: 0000000000000000 R09: 0000000000000000 [ 38.523005] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 38.523613] R13: 0000000000000000 R14: 00007f8e80a859c0 R15: 00007f8e80a85700 [ 38.524263] Code: c6 e8 c9 78 8d fd 4c 89 e0 48 c1 e8 03 80 3c 18 00 0f 85 93 04 00 00 4d 8b 3c 24 41 c6 45 00 00 49 8d 7f 20 48 89 f8 48 c1 e8 03 <80> 3c 18 00 0f 85 6b 04 00 00 41 80 7d 00 00 49 8b 47 20 0f 85 [ 38.525672] RIP: skb_release_data+0x26c/0x790 RSP: ffff88006972eda8 [ 38.526192] ---[ end trace 055286025edfdd34 ]--- [ 38.526683] Kernel panic - not syncing: Fatal exception in interrupt [ 38.527267] Dumping ftrace buffer: [ 38.527505] (ftrace buffer empty) [ 38.527744] Kernel Offset: disabled [ 38.527984] Rebooting in 86400 seconds..