net.ipv6.conf.syz0.accept_dad = 0 net.ipv6.conf.syz0.router_solicitations = 0 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program syzkaller login: [ 60.578781] kasan: CONFIG_KASAN_INLINE enabled [ 60.579178] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 60.579736] general protection fault: 0000 [#1] SMP KASAN [ 60.580186] Dumping ftrace buffer: [ 60.580424] (ftrace buffer empty) [ 60.580673] Modules linked in: [ 60.580892] CPU: 3 PID: 5265 Comm: syzkaller452061 Not tainted 4.13.0-next-20170905+ #15 [ 60.581446] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Bochs 01/01/2011 [ 60.581999] task: ffff88003d384100 task.stack: ffff880039a60000 [ 60.582409] RIP: 0010:__list_add_valid+0x46/0xd0 [ 60.582757] RSP: 0018:ffff880039a673d0 EFLAGS: 00010246 [ 60.583118] RAX: dffffc0000000000 RBX: ffff88006aa6dce8 RCX: 0000000000000000 [ 60.583604] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88006aa6dcf0 [ 60.584102] RBP: ffff880039a673e8 R08: 0000000000000000 R09: 1ffff1000734cddc [ 60.584600] R10: 0000000011024d81 R11: 00000000a5f4a619 R12: ffff88006d83ca00 [ 60.585130] R13: ffff88003ca0c800 R14: ffff88006aa6dce8 R15: 0000000000000000 [ 60.585616] FS: 00007fcde7c66700(0000) GS:ffff88006df00000(0000) knlGS:0000000000000000 [ 60.586163] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 60.586555] CR2: 0000000020eb1000 CR3: 0000000039ae3000 CR4: 00000000000006e0 [ 60.587040] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 60.587525] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 60.588011] Call Trace: [ 60.588190] sock_map_ctx_update_elem.isra.11+0x9e9/0x1a00 [ 60.588568] ? sock_map_free+0x870/0x870 [ 60.588842] ? lock_downgrade+0x990/0x990 [ 60.589125] ? __fget+0xbb/0x580 [ 60.589355] ? lock_release+0xd70/0xd70 [ 60.589628] ? __fget+0x362/0x580 [ 60.589864] ? iterate_fd+0x3f0/0x3f0 [ 60.590125] ? retint_kernel+0x10/0x10 [ 60.590390] ? fget+0x18/0x20 [ 60.590601] sock_map_update_elem+0x145/0x2d0 [ 60.590905] ? bpf_sock_map_update+0x50/0x50 [ 60.591203] ? rcutorture_record_progress+0x10/0x10 [ 60.591540] ? copy_user_generic_string+0x31/0x40 [ 60.591879] ? bpf_sock_map_update+0x50/0x50 [ 60.592178] SyS_bpf+0x20cb/0x4c50 [ 60.592418] ? bpf_prog_get+0x20/0x20 [ 60.592676] ? lock_downgrade+0x990/0x990 [ 60.592959] ? lru_cache_add_active_or_unevictable+0x20e/0x540 [ 60.593362] ? add_page_to_unevictable_list+0x730/0x730 [ 60.593724] ? __handle_mm_fault+0x2780/0x39c0 [ 60.594059] ? do_raw_spin_trylock+0x190/0x190 [ 60.594377] ? check_noncircular+0x20/0x20 [ 60.594666] ? _raw_spin_unlock+0x22/0x30 [ 60.594949] ? __handle_mm_fault+0x587/0x39c0 [ 60.595258] ? __pmd_alloc+0x4e0/0x4e0 [ 60.595528] ? find_held_lock+0x39/0x1d0 [ 60.595810] ? lock_downgrade+0x990/0x990 [ 60.596109] ? handle_mm_fault+0x4a2/0x860 [ 60.596397] ? down_read_trylock+0xdb/0x170 [ 60.596693] ? __handle_mm_fault+0x39c0/0x39c0 [ 60.597005] ? vmacache_find+0x61/0x270 [ 60.597279] ? up_read+0x1a/0x40 [ 60.597510] ? __do_page_fault+0x35b/0xb60 [ 60.597804] ? do_page_fault+0xee/0x720 [ 60.598076] ? __do_page_fault+0xb60/0xb60 [ 60.598366] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 60.598708] ? lockdep_sys_exit+0x47/0xf0 [ 60.598993] ? syscall_return_slowpath+0x2b3/0x500 [ 60.599327] ? finish_task_switch+0x1aa/0x740 [ 60.599593] ? lockdep_sys_exit+0x47/0xf0 [ 60.600186] ? entry_SYSCALL_64_fastpath+0x5/0xbe [ 60.600523] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 60.600854] entry_SYSCALL_64_fastpath+0x1f/0xbe [ 60.601194] RIP: 0033:0x440389 [ 60.601413] RSP: 002b:00007fcde7c65db8 EFLAGS: 00000206 ORIG_RAX: 0000000000000141 [ 60.601940] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000440389 [ 60.602489] RDX: 0000000000000020 RSI: 00000000204eefe0 RDI: 0000000000000002 [ 60.603024] RBP: 0000000000000082 R08: 00007fcde7c66700 R09: 0000000000000000 [ 60.603551] R10: 00007fcde7c66700 R11: 0000000000000206 R12: 0000000000000000 [ 60.604053] R13: 0000000000000000 R14: 00007fcde7c669c0 R15: 00007fcde7c66700 [ 60.604550] Code: 48 89 fa 48 83 ec 08 48 c1 ea 03 80 3c 02 00 75 7c 48 8b 53 08 48 39 f2 75 37 48 89 f2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 75 6e 48 8b 16 48 39 da 75 29 49 39 f4 74 38 49 39 [ 60.605926] RIP: __list_add_valid+0x46/0xd0 RSP: ffff880039a673d0 [ 60.606389] ---[ end trace 90291bcf1b4371c8 ]--- [ 60.606800] Kernel panic - not syncing: Fatal exception in interrupt [ 60.607706] Dumping ftrace buffer: [ 60.607961] (ftrace buffer empty) [ 60.608238] Kernel Offset: disabled [ 60.608513] Rebooting in 86400 seconds..