2017/08/16 10:25:15 parsed 1 programs 2017/08/16 10:25:15 executed programs: 0 syzkaller login: [ 23.010022] hrtimer: interrupt took 17486 ns [ 24.905469] BUG: unable to handle kernel paging request at ffffff0100008000 [ 24.906233] IP: skb_release_data+0x3c2/0x790 [ 24.906645] PGD 644c067 [ 24.906649] P4D 644c067 [ 24.907007] PUD 0 [ 24.907262] [ 24.907580] Oops: 0000 [#1] SMP KASAN [ 24.907882] Dumping ftrace buffer: [ 24.908174] (ftrace buffer empty) [ 24.908468] Modules linked in: [ 24.909157] CPU: 2 PID: 3385 Comm: syz-executor0 Not tainted 4.13.0-rc5-next-20170816+ #4 [ 24.909817] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Bochs 01/01/2011 [ 24.910471] task: ffff88006983e440 task.stack: ffff88006a8e0000 [ 24.910950] RIP: 0010:skb_release_data+0x3c2/0x790 [ 24.911338] RSP: 0018:ffff88006a8e6da8 EFLAGS: 00010246 [ 24.911762] RAX: 1fffffe020001000 RBX: 0000000000000020 RCX: 1ffff1000d51cde4 [ 24.912340] RDX: 0000000000000000 RSI: 1ffff1000d5da75f RDI: ffff88006d180188 [ 24.912845] RBP: ffff88006a8e6ec8 R08: ffff88006aed3b48 R09: 0000000000000000 [ 24.913360] R10: ffff88006a8e76b0 R11: 0000000000000007 R12: dffffc0000000000 [ 24.913864] R13: ffffff0100008000 R14: ffff88006aed3a80 R15: 0000000000000000 [ 24.914371] FS: 00007fdd0118a700(0000) GS:ffff88006de00000(0000) knlGS:0000000000000000 [ 24.914942] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 24.915353] CR2: ffffff0100008000 CR3: 000000003af57000 CR4: 00000000000006e0 [ 24.915863] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 24.916373] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 24.916878] Call Trace: [ 24.917066] ? perf_trace_lock_acquire+0xfe/0x900 [ 24.917414] ? perf_swevent_hrtimer+0x4c0/0x4c0 [ 24.917719] ? skb_tx_error+0x2c0/0x2c0 [ 24.917975] ? perf_trace_lock+0x860/0x860 [ 24.918323] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 24.918634] ? perf_trace_lock_acquire+0xfe/0x900 [ 24.918966] skb_release_all+0x4a/0x60 [ 24.919231] kfree_skb+0x15d/0x4c0 [ 24.919493] ? ip_rcv+0x40a/0x17d0 [ 24.919722] ? __kfree_skb+0x20/0x20 [ 24.919965] ? lock_acquire+0x1d5/0x580 [ 24.920251] ? lock_acquire+0x1d5/0x580 [ 24.920507] ? __is_insn_slot_addr+0x1fc/0x330 [ 24.920806] ? lock_downgrade+0x990/0x990 [ 24.921127] ? lock_release+0xa40/0xa40 [ 24.921382] ? __read_once_size_nocheck.constprop.8+0x10/0x10 [ 24.921812] ? bpf_prog_kallsyms_find+0xbd/0x440 [ 24.922155] ip_rcv+0x40a/0x17d0 [ 24.922383] ? ip_local_deliver+0x6d0/0x6d0 [ 24.922671] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 24.923049] ? lock_release+0xa40/0xa40 [ 24.923323] ? __free_insn_slot+0x5c0/0x5c0 [ 24.923619] ? unwind_dump+0x4c0/0x4c0 [ 24.923896] ? ip_local_deliver+0x6d0/0x6d0 [ 24.924187] __netif_receive_skb_core+0x19af/0x33d0 [ 24.924521] ? unwind_get_return_address+0x61/0xa0 [ 24.924855] ? nf_ingress+0x9f0/0x9f0 [ 24.925119] ? __sanitizer_cov_trace_pc+0x23/0x60 [ 24.925445] ? vfs_write+0x189/0x510 [ 24.925726] ? __skb_flow_get_ports+0x151/0x400 [ 24.926088] ? flow_get_u32_dst+0x130/0x130 [ 24.926445] ? __skb_flow_get_ports+0x151/0x400 [ 24.926783] ? perf_trace_lock+0x860/0x860 [ 24.927082] ? perf_trace_lock_acquire+0xfe/0x900 [ 24.927460] ? perf_trace_lock+0x860/0x860 [ 24.927768] ? lock_acquire+0x1d5/0x580 [ 24.928071] ? netif_receive_skb_internal+0x1d7/0x5e0 [ 24.928441] ? lock_downgrade+0x990/0x990 [ 24.928760] ? pvclock_read_flags+0x160/0x160 [ 24.929088] ? lock_acquire+0x1d5/0x580 [ 24.929344] ? lock_acquire+0x1d5/0x580 [ 24.929601] ? netif_receive_skb_internal+0x93/0x5e0 [ 24.929930] ? ktime_get_with_offset+0x2c1/0x420 [ 24.930593] ? lock_release+0xa40/0xa40 [ 24.930906] ? do_gettimeofday+0x190/0x190 [ 24.931223] __netif_receive_skb+0x2c/0x1b0 [ 24.931578] ? __netif_receive_skb+0x2c/0x1b0 [ 24.931916] netif_receive_skb_internal+0x10b/0x5e0 [ 24.932301] ? dev_cpu_dead+0xb00/0xb00 [ 24.932606] ? tun_device_event+0xca0/0xca0 [ 24.932955] ? futex_wake+0x680/0x680 [ 24.933223] ? drop_futex_key_refs.isra.13+0x63/0xb0 [ 24.933641] netif_receive_skb+0xae/0x390 [ 24.933942] ? netif_receive_skb_internal+0x5e0/0x5e0 [ 24.934298] ? mark_wake_futex+0xc0/0x1c0 [ 24.934572] ? futex_wait_setup+0x3d0/0x3d0 [ 24.934858] ? tun_rx_batched.isra.43+0x5bd/0x860 [ 24.935220] tun_rx_batched.isra.43+0x5e7/0x860 [ 24.935527] ? skb_get_hash_perturb+0x9d0/0x9d0 [ 24.935833] ? tun_sock_write_space+0x370/0x370 [ 24.936153] ? tun_free_netdev+0x1b0/0x1b0 [ 24.936464] tun_get_user+0x11dd/0x2150 [ 24.936772] ? tun_flow_update+0xf70/0xf70 [ 24.937083] ? lock_acquire+0x1d5/0x580 [ 24.937405] ? lock_acquire+0x1d5/0x580 [ 24.937689] ? __tun_get+0x1ab/0x2e0 [ 24.937930] ? lock_downgrade+0x990/0x990 [ 24.938243] ? lock_release+0xa40/0xa40 [ 24.938499] ? __fget+0x35c/0x570 [ 24.938772] ? __tun_get+0x1d4/0x2e0 [ 24.939027] ? tun_chr_close+0x60/0x60 [ 24.939309] ? __fget+0x35c/0x570 [ 24.939577] tun_chr_write_iter+0xd8/0x190 [ 24.939923] __vfs_write+0x684/0x970 [ 24.940200] ? default_llseek+0x290/0x290 [ 24.940478] ? _cond_resched+0x14/0x30 [ 24.940738] ? avc_policy_seqno+0x9/0x20 [ 24.941025] ? selinux_file_permission+0x82/0x460 [ 24.941371] ? rw_verify_area+0xe5/0x2b0 [ 24.941675] ? __fdget_raw+0x20/0x20 [ 24.941961] vfs_write+0x189/0x510 [ 24.942250] SyS_write+0xef/0x220 [ 24.942505] ? SyS_read+0x220/0x220 [ 24.942770] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 24.943153] entry_SYSCALL_64_fastpath+0x1f/0xbe [ 24.943516] RIP: 0033:0x40bab1 [ 24.943738] RSP: 002b:00007fdd01189c00 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 24.944316] RAX: ffffffffffffffda RBX: 0000000000000036 RCX: 000000000040bab1 [ 24.944811] RDX: 0000000000000036 RSI: 0000000020002000 RDI: 0000000000000003 [ 24.945367] RBP: 00007ffc1830dcb0 R08: 0000000000000000 R09: 0000000000000000 [ 24.945862] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 24.946393] R13: 0000000000000000 R14: 00007fdd0118a9c0 R15: 00007fdd0118a700 [ 24.946895] Code: ff 49 bc 00 00 00 00 00 fc ff df 4c 8b 68 08 4d 85 ed 74 2b e8 60 67 8d fd 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 0f 85 97 03 00 00 <49> 8b 5d 00 4c 89 ef e8 42 cf ff ff 48 85 db 49 89 dd 75 d5 e8 [ 24.948321] RIP: skb_release_data+0x3c2/0x790 RSP: ffff88006a8e6da8 [ 24.948763] CR2: ffffff0100008000 [ 24.949021] ---[ end trace 8153cfc9e80c06c2 ]--- [ 24.949356] Kernel panic - not syncing: Fatal exception in interrupt [ 24.949910] Dumping ftrace buffer: [ 24.950143] (ftrace buffer empty) [ 24.950428] Kernel Offset: disabled [ 24.950711] Rebooting in 86400 seconds..