------------[ cut here ]------------ WARNING: CPU: 3 PID: 12092 at net/ipv4/tcp_input.c:867 tcp_update_reordering+0x257/0x2c0 net/ipv4/tcp_input.c:867 Kernel panic - not syncing: panic_on_warn set ... CPU: 3 PID: 12092 Comm: syz-executor1 Not tainted 4.14.0-rc7-next-20171103+ #10 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Bochs 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x194/0x257 lib/dump_stack.c:53 panic+0x1e4/0x41c kernel/panic.c:183 __warn+0x1c4/0x1e0 kernel/panic.c:546 report_bug+0x211/0x2d0 lib/bug.c:184 fixup_bug+0x40/0x90 arch/x86/kernel/traps.c:177 do_trap_no_signal arch/x86/kernel/traps.c:211 [inline] do_trap+0x260/0x390 arch/x86/kernel/traps.c:260 do_error_trap+0x120/0x390 arch/x86/kernel/traps.c:297 do_invalid_op+0x1b/0x20 arch/x86/kernel/traps.c:310 invalid_op+0x18/0x20 arch/x86/entry/entry_64.S:906 RIP: 0010:tcp_update_reordering+0x257/0x2c0 net/ipv4/tcp_input.c:867 RSP: 0018:ffff880056f4f600 EFLAGS: 00010212 RAX: 0000000000010000 RBX: ffff880057f76080 RCX: ffffffff843b7bf7 rfkill: input handler disabled RDX: 0000000000001dfe RSI: ffffc900011c8000 RDI: ffff880057f76080 RBP: ffff880056f4f628 R08: 0000000000000001 R09: 1ffff1000ade9e69 R10: ffff880057f76a4c R11: 000000003439db32 R12: 00000000fffffff9 R13: 0000000000000001 R14: 0000000000000000 R15: ffff880057f76080 tcp_sacktag_write_queue+0x1760/0x2240 net/ipv4/tcp_input.c:1840 device gre0 entered promiscuous mode tcp_ack+0x2837/0x5130 net/ipv4/tcp_input.c:3620 tcp_rcv_state_process+0xcbd/0x48c0 net/ipv4/tcp_input.c:5911 tcp_v6_do_rcv+0x739/0x11b0 net/ipv6/tcp_ipv6.c:1331 sk_backlog_rcv include/net/sock.h:909 [inline] __release_sock+0x124/0x360 net/core/sock.c:2264 release_sock+0xa4/0x2a0 net/core/sock.c:2776 inet_shutdown+0x1a8/0x350 net/ipv4/af_inet.c:853 SYSC_shutdown net/socket.c:1903 [inline] SyS_shutdown+0x137/0x290 net/socket.c:1894 entry_SYSCALL_64_fastpath+0x1f/0xbe RIP: 0033:0x447c89 RSP: 002b:00007fdf53582bd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000030 RAX: ffffffffffffffda RBX: 00007fdf535836cc RCX: 0000000000447c89 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000001e RBP: 0000000000000086 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff R13: 00000000000090d8 R14: 00000000006ed178 R15: 00007fdf53583700 Dumping ftrace buffer: (ftrace buffer empty) Kernel Offset: disabled Rebooting in 86400 seconds..