------------[ cut here ]------------ WARNING: CPU: 1 PID: 3005 at mm/slab_common.c:962 kmalloc_slab+0x5d/0x70 mm/slab_common.c:962 Kernel panic - not syncing: panic_on_warn set ... CPU: 1 PID: 3005 Comm: syzkaller431298 Not tainted 4.13.0-rc5+ #13 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:16 [inline] dump_stack+0x194/0x257 lib/dump_stack.c:52 panic+0x1e4/0x417 kernel/panic.c:180 __warn+0x1c4/0x1d9 kernel/panic.c:541 report_bug+0x211/0x2d0 lib/bug.c:183 fixup_bug+0x40/0x90 arch/x86/kernel/traps.c:190 do_trap_no_signal arch/x86/kernel/traps.c:224 [inline] do_trap+0x260/0x390 arch/x86/kernel/traps.c:273 do_error_trap+0x120/0x390 arch/x86/kernel/traps.c:310 do_invalid_op+0x1b/0x20 arch/x86/kernel/traps.c:323 invalid_op+0x1e/0x30 arch/x86/entry/entry_64.S:846 RIP: 0010:kmalloc_slab+0x5d/0x70 mm/slab_common.c:962 RSP: 0018:ffff8801d0116a98 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffff8801d9a8c280 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000700040 RBP: ffff8801d0116a98 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000001 R14: 00000000014080c0 R15: dffffc0000000000 __do_kmalloc mm/slab.c:3720 [inline] __kmalloc+0x25/0x760 mm/slab.c:3734 kmalloc include/linux/slab.h:498 [inline] kzalloc include/linux/slab.h:666 [inline] __ptr_ring_init_queue_alloc include/linux/ptr_ring.h:441 [inline] ptr_ring_resize_multiple include/linux/ptr_ring.h:598 [inline] skb_array_resize_multiple include/linux/skb_array.h:199 [inline] tun_queue_resize drivers/net/tun.c:2746 [inline] tun_device_event+0x403/0xcb0 drivers/net/tun.c:2764 notifier_call_chain+0x136/0x2c0 kernel/notifier.c:93 __raw_notifier_call_chain kernel/notifier.c:394 [inline] raw_notifier_call_chain+0x2d/0x40 kernel/notifier.c:401 call_netdevice_notifiers_info+0x51/0x90 net/core/dev.c:1671 call_netdevice_notifiers+0x6a/0x90 net/core/dev.c:1687 do_setlink+0xbe5/0x38d0 net/core/rtnetlink.c:2089 rtnl_setlink+0x270/0x3c0 net/core/rtnetlink.c:2300 rtnetlink_rcv_msg+0x733/0x1090 net/core/rtnetlink.c:4246 netlink_rcv_skb+0x216/0x440 net/netlink/af_netlink.c:2397 rtnetlink_rcv+0x1c/0x20 net/core/rtnetlink.c:4258 netlink_unicast_kernel net/netlink/af_netlink.c:1265 [inline] netlink_unicast+0x4e8/0x6f0 net/netlink/af_netlink.c:1291 netlink_sendmsg+0xa4a/0xe60 net/netlink/af_netlink.c:1854 sock_sendmsg_nosec net/socket.c:633 [inline] sock_sendmsg+0xca/0x110 net/socket.c:643 sock_write_iter+0x31a/0x5d0 net/socket.c:912 call_write_iter include/linux/fs.h:1743 [inline] do_iter_readv_writev+0x525/0x7f0 fs/read_write.c:650 do_iter_write+0x154/0x540 fs/read_write.c:929 vfs_writev+0x18a/0x340 fs/read_write.c:975 do_writev+0xfc/0x2a0 fs/read_write.c:1011 SYSC_writev fs/read_write.c:1084 [inline] SyS_writev+0x27/0x30 fs/read_write.c:1081 entry_SYSCALL_64_fastpath+0x1f/0xbe RIP: 0033:0x445139 RSP: 002b:00000000007efe68 EFLAGS: 00000207 ORIG_RAX: 0000000000000014 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000445139 RDX: 0000000000000001 RSI: 0000000020001ff0 RDI: 0000000000000004 RBP: 0000000000000086 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000207 R12: 00000000004027f0 R13: 0000000000402880 R14: 0000000000000000 R15: 0000000000000000 Dumping ftrace buffer: (ftrace buffer empty) Kernel Offset: disabled Rebooting in 86400 seconds..