BUG: unable to handle page fault for address: ffffde2022b7ab8b #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 0 P4D 0 Oops: 0000 [#1] PREEMPT SMP KASAN CPU: 0 PID: 24605 Comm: syz-executor.2 Not tainted 5.1.0+ #8 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:iptunnel_xmit_stats include/net/ip_tunnels.h:444 [inline] RIP: 0010:iptunnel_xmit+0x6e5/0x970 net/ipv4/ip_tunnel_core.c:94 Code: c1 e9 03 80 3c 11 00 0f 85 72 02 00 00 48 03 1c c5 60 70 6f 88 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 18 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 5d 02 00 00 48 8d 7b 10 4d 63 e4 48 b8 00 00 00 RSP: 0018:ffff8880ae809878 EFLAGS: 00010a06 RAX: dffffc0000000000 RBX: ffff110115bd5c40 RCX: 1ffffffff10dee0c RDX: 1fffe22022b7ab8b RSI: ffffffff8334ff3c RDI: ffff110115bd5c58 RBP: ffff8880ae8098d8 R08: ffff888099a866c0 R09: ffffed1015d06be0 R10: ffffed1015d06bdf R11: ffff8880ae835efb R12: 00000000000000fc R13: ffff88805be341c0 R14: ffff88806717e0d4 R15: ffff888055072b40 FS: 00007fc30b38f700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffde2022b7ab8b CR3: 0000000091043000 CR4: 00000000001406f0 Call Trace: <IRQ> udp_tunnel_xmit_skb+0x236/0x310 net/ipv4/udp_tunnel.c:191 tipc_udp_xmit.isra.0+0x805/0xcc0 net/tipc/udp_media.c:181 tipc_udp_send_msg+0x295/0x4a0 net/tipc/udp_media.c:247 tipc_bearer_xmit_skb+0x172/0x360 net/tipc/bearer.c:503 tipc_disc_timeout+0x933/0xd60 net/tipc/discover.c:332 call_timer_fn+0x196/0x720 kernel/time/timer.c:1322 expire_timers kernel/time/timer.c:1366 [inline] __run_timers kernel/time/timer.c:1685 [inline] __run_timers kernel/time/timer.c:1653 [inline] run_timer_softirq+0x66f/0x1740 kernel/time/timer.c:1698 __do_softirq+0x266/0x95a kernel/softirq.c:293 invoke_softirq kernel/softirq.c:374 [inline] irq_exit+0x180/0x1d0 kernel/softirq.c:414 exiting_irq arch/x86/include/asm/apic.h:536 [inline] smp_apic_timer_interrupt+0x14a/0x570 arch/x86/kernel/apic/apic.c:1067 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:806 </IRQ> RIP: 0010:mark_page_accessed+0x662/0x1140 mm/swap.c:393 Code: c7 c7 ff ff ff ff 48 89 de e8 9a 28 df ff 48 83 fb ff 0f 84 f9 02 00 00 e8 eb 26 df ff 49 8b 1c 24 31 ff 48 c1 eb 18 83 e3 01 <89> de e8 17 28 df ff 84 db 0f 85 d8 01 00 00 e8 ca 26 df ff 5b 41 RSP: 0018:ffff888091e17498 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 RAX: 0000000000040000 RBX: 0000000000000000 RCX: ffffc90005f0d000 RDX: 0000000000040000 RSI: ffffffff8191b2f5 RDI: 0000000000000000 RBP: ffff888091e174c0 R08: ffff888099a866c0 R09: ffffed1015d06be0 R10: ffffed1015d06bdf R11: ffff8880ae835efb R12: ffffea0001a77980 R13: ffffea0001a77988 R14: 0000000000000000 R15: ffffea0002277008 touch_buffer fs/buffer.c:59 [inline] __find_get_block+0x312/0xcf0 fs/buffer.c:1299 __getblk_gfp+0x38/0x970 fs/buffer.c:1317 sb_getblk include/linux/buffer_head.h:325 [inline] __ext4_get_inode_loc+0x362/0x10e0 fs/ext4/inode.c:4594 ext4_get_inode_loc fs/ext4/inode.c:4707 [inline] ext4_reserve_inode_write+0xf0/0x260 fs/ext4/inode.c:5891 ext4_mark_inode_dirty+0x178/0x940 fs/ext4/inode.c:6043 ext4_dirty_inode+0x8f/0xc0 fs/ext4/inode.c:6082 __mark_inode_dirty+0x919/0x1290 fs/fs-writeback.c:2155 mark_inode_dirty include/linux/fs.h:2137 [inline] __generic_write_end+0xad/0x130 fs/buffer.c:2117 generic_write_end+0x74/0x1a0 fs/buffer.c:2161 ext4_da_write_end+0x3c8/0xa50 fs/ext4/inode.c:3201 generic_perform_write+0x2f0/0x530 mm/filemap.c:3310 __generic_file_write_iter+0x25e/0x630 mm/filemap.c:3428 ext4_file_write_iter+0x346/0x11c0 fs/ext4/file.c:266 call_write_iter include/linux/fs.h:1872 [inline] new_sync_write+0x4d9/0x770 fs/read_write.c:483 __vfs_write+0xe4/0x110 fs/read_write.c:496 vfs_write+0x20c/0x580 fs/read_write.c:558 ksys_write+0x14f/0x290 fs/read_write.c:611 __do_sys_write fs/read_write.c:623 [inline] __se_sys_write fs/read_write.c:620 [inline] __x64_sys_write+0x73/0xb0 fs/read_write.c:620 do_syscall_64+0x103/0x670 arch/x86/entry/common.c:298 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x458da9 Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007fc30b38ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458da9 RDX: 000000004557434d RSI: 00000000200000c0 RDI: 0000000000000005 RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc30b38f6d4 R13: 00000000004c892a R14: 00000000004df338 R15: 00000000ffffffff Modules linked in: CR2: ffffde2022b7ab8b ---[ end trace 029caa2ea9f6e476 ]--- RIP: 0010:iptunnel_xmit_stats include/net/ip_tunnels.h:444 [inline] RIP: 0010:iptunnel_xmit+0x6e5/0x970 net/ipv4/ip_tunnel_core.c:94 Code: c1 e9 03 80 3c 11 00 0f 85 72 02 00 00 48 03 1c c5 60 70 6f 88 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 18 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 5d 02 00 00 48 8d 7b 10 4d 63 e4 48 b8 00 00 00 RSP: 0018:ffff8880ae809878 EFLAGS: 00010a06 RAX: dffffc0000000000 RBX: ffff110115bd5c40 RCX: 1ffffffff10dee0c RDX: 1fffe22022b7ab8b RSI: ffffffff8334ff3c RDI: ffff110115bd5c58 RBP: ffff8880ae8098d8 R08: ffff888099a866c0 R09: ffffed1015d06be0 R10: ffffed1015d06bdf R11: ffff8880ae835efb R12: 00000000000000fc R13: ffff88805be341c0 R14: ffff88806717e0d4 R15: ffff888055072b40 FS: 00007fc30b38f700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffde2022b7ab8b CR3: 0000000091043000 CR4: 00000000001406f0