2017/08/15 10:10:53 parsed 1 programs 2017/08/15 10:10:53 executed programs: 0 syzkaller login: [ 19.817304] kasan: CONFIG_KASAN_INLINE enabled [ 19.817745] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 19.818248] general protection fault: 0000 [#1] SMP KASAN [ 19.818727] Dumping ftrace buffer: [ 19.818967] (ftrace buffer empty) [ 19.819235] Modules linked in: [ 19.819456] CPU: 0 PID: 3473 Comm: syz-executor0 Not tainted 4.13.0-rc5-next-20170815+ #3 [ 19.820170] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Bochs 01/01/2011 [ 19.820874] task: ffff880038008880 task.stack: ffff880038d48000 [ 19.821396] RIP: 0010:skb_release_data+0x26c/0x790 [ 19.821820] RSP: 0018:ffff880038d4eda8 EFLAGS: 00010207 [ 19.822281] RAX: 0e824260409bede2 RBX: dffffc0000000000 RCX: 1ffff100071a9de4 [ 19.822764] RDX: 0000000000000000 RSI: 1ffff10007be96ef RDI: 7412130204df6f15 [ 19.823255] RBP: ffff880038d4eec8 R08: ffff88003df4b7c8 R09: 0000000000000000 [ 19.823754] R10: ffff880038d4f6b0 R11: 0000000000000007 R12: ffff88006c6401b0 [ 19.824241] R13: ffffed00071a9dcc R14: 1ffff100071a9dc4 R15: 7412130204df6ef5 [ 19.824720] FS: 00007f5848e36700(0000) GS:ffff88003ec00000(0000) knlGS:0000000000000000 [ 19.825210] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 19.825560] CR2: 0000000000457040 CR3: 000000006d361000 CR4: 00000000000006f0 [ 19.826027] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 19.826497] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 19.826941] Call Trace: [ 19.827100] ? skb_tx_error+0x2c0/0x2c0 [ 19.827348] ? uncharge_batch+0x340/0x340 [ 19.827691] ? should_fail+0x23b/0xa40 [ 19.828010] ? pagevec_move_tail_fn+0x1210/0x1210 [ 19.828378] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 19.828721] skb_release_all+0x4a/0x60 [ 19.828982] kfree_skb+0x15d/0x4c0 [ 19.829234] ? ip_rcv+0x40a/0x17d0 [ 19.829509] ? __kfree_skb+0x20/0x20 [ 19.829761] ? lock_acquire+0x1d5/0x580 [ 19.830033] ? lock_acquire+0x1d5/0x580 [ 19.830419] ? __is_insn_slot_addr+0x1fc/0x330 [ 19.830746] ? lock_downgrade+0x990/0x990 [ 19.831071] ? lock_release+0xa40/0xa40 [ 19.831401] ? __read_once_size_nocheck.constprop.8+0x10/0x10 [ 19.831812] ? entry_SYSCALL_64_fastpath+0x1f/0xbe [ 19.832159] ? bpf_prog_kallsyms_find+0xbd/0x440 [ 19.832485] ip_rcv+0x40a/0x17d0 [ 19.832722] ? ip_local_deliver+0x6d0/0x6d0 [ 19.833018] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 19.833372] ? lock_release+0xa40/0xa40 [ 19.833661] ? __free_insn_slot+0x5c0/0x5c0 [ 19.833943] ? unwind_dump+0x4c0/0x4c0 [ 19.834243] ? ip_local_deliver+0x6d0/0x6d0 [ 19.834554] __netif_receive_skb_core+0x19af/0x33d0 [ 19.834895] ? unwind_get_return_address+0x61/0xa0 [ 19.835281] ? nf_ingress+0x9f0/0x9f0 [ 19.835530] ? save_stack+0xa3/0xd0 [ 19.835813] ? save_stack_trace+0x16/0x20 [ 19.836111] ? save_stack+0x43/0xd0 [ 19.836348] ? kasan_kmalloc+0xad/0xe0 [ 19.836617] ? kasan_slab_alloc+0x12/0x20 [ 19.836903] ? kmem_cache_alloc+0x12e/0x760 [ 19.837210] ? __build_skb+0x9d/0x450 [ 19.837458] ? build_skb+0x6f/0x260 [ 19.837778] ? tun_get_user+0x1db7/0x2150 [ 19.838108] ? tun_chr_write_iter+0xd8/0x190 [ 19.838667] ? __vfs_write+0x684/0x970 [ 19.839016] ? vfs_write+0x189/0x510 [ 19.839286] ? __skb_flow_get_ports+0x151/0x400 [ 19.839569] ? flow_get_u32_dst+0x130/0x130 [ 19.839837] ? __skb_flow_get_ports+0x151/0x400 [ 19.840132] ? __skb_flow_dissect+0xfa1/0x3ae0 [ 19.840414] ? __sched_text_start+0x8/0x8 [ 19.840672] ? __skb_flow_get_ports+0x400/0x400 [ 19.840966] ? lock_acquire+0x1d5/0x580 [ 19.841216] ? netif_receive_skb_internal+0x1d7/0x5e0 [ 19.841536] ? lock_downgrade+0x990/0x990 [ 19.841794] ? pvclock_read_flags+0x160/0x160 [ 19.842075] ? __build_skb+0x325/0x450 [ 19.842315] ? lock_acquire+0x1d5/0x580 [ 19.842573] ? lock_acquire+0x1d5/0x580 [ 19.842825] ? netif_receive_skb_internal+0x93/0x5e0 [ 19.843143] ? ktime_get_with_offset+0x2c1/0x420 [ 19.843443] ? lock_release+0xa40/0xa40 [ 19.843681] ? do_gettimeofday+0x190/0x190 [ 19.843943] ? __build_skb+0x450/0x450 [ 19.844188] __netif_receive_skb+0x2c/0x1b0 [ 19.844454] ? __netif_receive_skb+0x2c/0x1b0 [ 19.844738] netif_receive_skb_internal+0x10b/0x5e0 [ 19.845063] ? dev_cpu_dead+0xb00/0xb00 [ 19.845330] ? tun_device_event+0xca0/0xca0 [ 19.845620] ? futex_wake+0x680/0x680 [ 19.845871] ? __unqueue_futex+0x1c0/0x290 [ 19.846173] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 19.846543] ? drop_futex_key_refs.isra.13+0x63/0xb0 [ 19.846942] netif_receive_skb+0xae/0x390 [ 19.847240] ? netif_receive_skb_internal+0x5e0/0x5e0 [ 19.847634] ? futex_wait_setup+0x3d0/0x3d0 [ 19.847935] ? tun_rx_batched.isra.43+0x5bd/0x860 [ 19.848297] tun_rx_batched.isra.43+0x5e7/0x860 [ 19.848632] ? skb_get_hash_perturb+0x9d0/0x9d0 [ 19.849008] ? tun_sock_write_space+0x370/0x370 [ 19.849361] ? tun_free_netdev+0x1b0/0x1b0 [ 19.849683] tun_get_user+0x11dd/0x2150 [ 19.849951] ? tun_flow_update+0xf70/0xf70 [ 19.850275] ? lock_acquire+0x1d5/0x580 [ 19.850573] ? lock_acquire+0x1d5/0x580 [ 19.850902] ? __tun_get+0x1ab/0x2e0 [ 19.851224] ? lock_downgrade+0x990/0x990 [ 19.851523] ? lock_release+0xa40/0xa40 [ 19.851801] ? __fget+0x35c/0x570 [ 19.852044] ? __tun_get+0x1d4/0x2e0 [ 19.852319] ? tun_chr_close+0x60/0x60 [ 19.852586] ? do_raw_spin_trylock+0x190/0x190 [ 19.852926] ? lock_acquire+0x190/0x580 [ 19.853241] ? lock_acquire+0x1d5/0x580 [ 19.853521] tun_chr_write_iter+0xd8/0x190 [ 19.853810] __vfs_write+0x684/0x970 [ 19.854115] ? default_llseek+0x290/0x290 [ 19.854457] ? _cond_resched+0x14/0x30 [ 19.854844] ? avc_policy_seqno+0x9/0x20 [ 19.855151] ? selinux_file_permission+0x82/0x460 [ 19.855521] ? rw_verify_area+0xe5/0x2b0 [ 19.855825] ? __fdget_raw+0x20/0x20 [ 19.856095] vfs_write+0x189/0x510 [ 19.856332] SyS_write+0xef/0x220 [ 19.856562] ? SyS_read+0x220/0x220 [ 19.856814] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 19.857141] entry_SYSCALL_64_fastpath+0x1f/0xbe [ 19.857453] RIP: 0033:0x40bab1 [ 19.857671] RSP: 002b:00007f5848e35c00 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 19.858224] RAX: ffffffffffffffda RBX: 000000000000003a RCX: 000000000040bab1 [ 19.858727] RDX: 000000000000003a RSI: 0000000020002000 RDI: 0000000000000003 [ 19.859598] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 19.860166] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 19.860736] R13: 0000000000000000 R14: 00007f5848e369c0 R15: 00007f5848e36700 [ 19.861257] Code: c6 e8 c9 78 8d fd 4c 89 e0 48 c1 e8 03 80 3c 18 00 0f 85 93 04 00 00 4d 8b 3c 24 41 c6 45 00 00 49 8d 7f 20 48 89 f8 48 c1 e8 03 <80> 3c 18 00 0f 85 6b 04 00 00 41 80 7d 00 00 49 8b 47 20 0f 85 [ 19.862665] RIP: skb_release_data+0x26c/0x790 RSP: ffff880038d4eda8 [ 19.863202] ---[ end trace 93f86c0b2d9f15fd ]--- [ 19.863532] Kernel panic - not syncing: Fatal exception in interrupt [ 19.863983] Dumping ftrace buffer: [ 19.864222] (ftrace buffer empty) [ 19.864467] Kernel Offset: disabled [ 19.864709] Rebooting in 86400 seconds..