[ 38.674693] audit: type=1800 audit(1559572573.641:31): pid=7497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0 [ 38.698361] audit: type=1800 audit(1559572573.641:32): pid=7497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2450 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.1' (ECDSA) to the list of known hosts. 2019/06/03 14:36:21 fuzzer started syzkaller login: [ 46.668460] kauditd_printk_skb: 3 callbacks suppressed [ 46.668475] audit: type=1400 audit(1559572581.691:36): avc: denied { map } for pid=7679 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/06/03 14:36:24 dialing manager at 10.128.0.105:46883 2019/06/03 14:36:24 syscalls: 2456 2019/06/03 14:36:24 code coverage: enabled 2019/06/03 14:36:24 comparison tracing: enabled 2019/06/03 14:36:24 extra coverage: extra coverage is not supported by the kernel 2019/06/03 14:36:24 setuid sandbox: enabled 2019/06/03 14:36:24 namespace sandbox: enabled 2019/06/03 14:36:24 Android sandbox: /sys/fs/selinux/policy does not exist 2019/06/03 14:36:24 fault injection: enabled 2019/06/03 14:36:24 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/06/03 14:36:24 net packet injection: enabled 2019/06/03 14:36:24 net device setup: enabled 14:36:26 executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0) close(r1) close(r2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)) write$cgroup_type(r2, &(0x7f0000000080)='threaded\x00', 0xfffffc61) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x26e1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000440)) close(r3) write$cgroup_subtree(r3, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) close(r0) recvmsg(r1, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x2000012e}], 0x1}, 0x3f00) r4 = gettid() perf_event_open(0x0, r4, 0xf, r3, 0x2) close(r2) [ 51.679476] audit: type=1400 audit(1559572586.701:37): avc: denied { map } for pid=7696 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=53 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 51.800624] IPVS: ftp: loaded support on port[0] = 21 [ 51.811213] NET: Registered protocol family 30 [ 51.816752] Failed to register TIPC socket type 14:36:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {{}, 0x0, 0xb, 0x0, {0x7, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) [ 52.036758] IPVS: ftp: loaded support on port[0] = 21 [ 52.056274] NET: Registered protocol family 30 [ 52.060920] Failed to register TIPC socket type 14:36:27 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x6, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f0000000200)={[{0x0, '\x03\xa1xI?\x1e\xc2\xce\xc9`~\x88d\xc4W\x8a\xd7\xfd\x93\x00WeX\xcd\x02\x00\x93\xdd\x86\xdd\x00\x00\x00\x00\xba\x99$0\x1fr\x94\"\xadlh\x83B\xb9\xc3\x9e\x80\xac\xa4\xb1\xd8\xc4\x01v\xec\t\xb4(\x04R\xfdy\x86z?_\xa4R\x06\r)\x7f\x94\x01\xb4\xe3^\xb9\xe6\x8b\x9a\xdf\xd1xQJ\x94\x1a\xf9o\xe5@U\x16\x80\x10\x7f\xdfy\xd1\xaf\x8fNV0\x9a\xc9s=A\xcc\x0f\xf1\x19\x99\xc3\xc3t\x0f\bZ'}]}, 0xfda7) [ 52.328076] IPVS: ftp: loaded support on port[0] = 21 [ 52.357460] NET: Registered protocol family 30 [ 52.362094] Failed to register TIPC socket type 14:36:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00007a8000)={&(0x7f0000000000)={0x14, 0x3, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) [ 52.791168] IPVS: ftp: loaded support on port[0] = 21 [ 52.827383] NET: Registered protocol family 30 [ 52.832021] Failed to register TIPC socket type 14:36:28 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) [ 53.398754] IPVS: ftp: loaded support on port[0] = 21 [ 53.427454] NET: Registered protocol family 30 [ 53.432093] Failed to register TIPC socket type 14:36:28 executing program 5: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) [ 54.029549] IPVS: ftp: loaded support on port[0] = 21 [ 54.067321] NET: Registered protocol family 30 [ 54.071944] Failed to register TIPC socket type [ 54.588969] chnl_net:caif_netlink_parms(): no params data found [ 55.016044] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.024317] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.143167] device bridge_slave_0 entered promiscuous mode [ 55.221034] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.353173] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.360616] device bridge_slave_1 entered promiscuous mode [ 55.955114] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 56.275880] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 56.920075] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 57.062823] team0: Port device team_slave_0 added [ 57.349004] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 57.474902] team0: Port device team_slave_1 added [ 57.675565] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 57.937069] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 58.770424] device hsr_slave_0 entered promiscuous mode [ 59.016286] device hsr_slave_1 entered promiscuous mode [ 59.236970] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 59.445509] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 59.808635] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 60.378599] IPVS: ftp: loaded support on port[0] = 21 [ 60.487135] NET: Registered protocol family 30 [ 60.553779] Failed to register TIPC socket type [ 60.646197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.834672] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 60.993620] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 60.999961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.014733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.204894] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 61.211037] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.440048] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 61.539783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.556645] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.655478] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.662047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.819192] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 61.914278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.921950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.014703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.076683] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.083141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.188616] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 62.254490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.332300] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 62.404206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.452226] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 62.545114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.553674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.696493] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 62.743595] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.750889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.824139] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.904983] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 62.912331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.936071] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.019869] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 63.134127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.141991] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.229845] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 63.314167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.420386] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 63.562763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.707761] audit: type=1400 audit(1559572598.731:38): avc: denied { associate } for pid=7697 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 64.144844] hrtimer: interrupt took 34484 ns 14:36:40 executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0) close(r1) close(r2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)) write$cgroup_type(r2, &(0x7f0000000080)='threaded\x00', 0xfffffc61) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x26e1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000440)) close(r3) write$cgroup_subtree(r3, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) close(r0) recvmsg(r1, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x2000012e}], 0x1}, 0x3f00) r4 = gettid() perf_event_open(0x0, r4, 0xf, r3, 0x2) close(r2) [ 66.562212] IPVS: ftp: loaded support on port[0] = 21 [ 66.596251] NET: Registered protocol family 30 [ 66.597057] IPVS: ftp: loaded support on port[0] = 21 [ 66.600885] Failed to register TIPC socket type [ 66.619467] NET: Registered protocol family 30 [ 66.628834] Failed to register TIPC socket type 14:36:41 executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0) close(r1) close(r2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)) write$cgroup_type(r2, &(0x7f0000000080)='threaded\x00', 0xfffffc61) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x26e1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000440)) close(r3) write$cgroup_subtree(r3, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) close(r0) recvmsg(r1, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x2000012e}], 0x1}, 0x3f00) r4 = gettid() perf_event_open(0x0, r4, 0xf, r3, 0x2) close(r2) [ 67.040021] IPVS: ftp: loaded support on port[0] = 21 [ 67.067628] NET: Registered protocol family 30 [ 67.072267] Failed to register TIPC socket type 14:36:42 executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0) close(r1) close(r2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)) write$cgroup_type(r2, &(0x7f0000000080)='threaded\x00', 0xfffffc61) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x26e1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000440)) close(r3) write$cgroup_subtree(r3, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) close(r0) recvmsg(r1, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x2000012e}], 0x1}, 0x3f00) r4 = gettid() perf_event_open(0x0, r4, 0xf, r3, 0x2) close(r2) [ 67.737623] IPVS: ftp: loaded support on port[0] = 21 [ 67.756960] NET: Registered protocol family 30 [ 67.767145] Failed to register TIPC socket type [ 67.832306] kmem_cache_destroy TIPC: Slab cache still has objects [ 67.847276] CPU: 1 PID: 8366 Comm: syz-executor.5 Not tainted 4.19.47 #19 [ 67.854284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.863651] Call Trace: [ 67.866265] dump_stack+0x172/0x1f0 [ 67.869912] kmem_cache_destroy.cold+0x15/0x1a [ 67.874530] proto_unregister+0x1d5/0x4e0 [ 67.878709] tipc_socket_init.cold+0x33/0x47 [ 67.883123] tipc_init_net+0x2ed/0x570 [ 67.887011] ? tipc_exit_net+0x40/0x40 [ 67.890901] ops_init+0xb3/0x410 [ 67.894281] setup_net+0x2d3/0x740 [ 67.897837] ? lock_acquire+0x16f/0x3f0 [ 67.901818] ? ops_init+0x410/0x410 [ 67.905476] copy_net_ns+0x1df/0x340 [ 67.909203] create_new_namespaces+0x400/0x7b0 [ 67.913812] unshare_nsproxy_namespaces+0xc2/0x200 [ 67.918755] ksys_unshare+0x440/0x980 [ 67.922552] ? walk_process_tree+0x2c0/0x2c0 [ 67.926958] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 67.931708] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 67.937065] ? do_syscall_64+0x26/0x620 [ 67.941035] ? lockdep_hardirqs_on+0x415/0x5d0 [ 67.945614] __x64_sys_unshare+0x31/0x40 [ 67.949668] do_syscall_64+0xfd/0x620 [ 67.953467] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 67.958647] RIP: 0033:0x45bd47 [ 67.961833] Code: 00 00 00 b8 63 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 1d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 fd 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 67.980723] RSP: 002b:00007ffdfe1323f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 67.988423] RAX: ffffffffffffffda RBX: 000000000075c9a8 RCX: 000000000045bd47 [ 67.995693] RDX: 0000000000000000 RSI: 00007ffdfe1323a0 RDI: 0000000040000000 [ 68.002951] RBP: 00000000000000f8 R08: 0000000000000000 R09: 0000000000000005 [ 68.010211] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000075c9a8 [ 68.017477] R13: 00007ffdfe132668 R14: 0000000000000000 R15: 0000000000000000 14:36:43 executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0) close(r1) close(r2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)) write$cgroup_type(r2, &(0x7f0000000080)='threaded\x00', 0xfffffc61) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x26e1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000440)) close(r3) write$cgroup_subtree(r3, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) close(r0) recvmsg(r1, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x2000012e}], 0x1}, 0x3f00) r4 = gettid() perf_event_open(0x0, r4, 0xf, r3, 0x2) close(r2) 14:36:44 executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0) close(r1) close(r2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)) write$cgroup_type(r2, &(0x7f0000000080)='threaded\x00', 0xfffffc61) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x26e1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000440)) close(r3) write$cgroup_subtree(r3, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) close(r0) recvmsg(r1, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x2000012e}], 0x1}, 0x3f00) r4 = gettid() perf_event_open(0x0, r4, 0xf, r3, 0x2) close(r2) [ 69.564031] IPVS: ftp: loaded support on port[0] = 21 [ 69.584725] NET: Registered protocol family 30 [ 69.589469] Failed to register TIPC socket type 14:36:45 executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0) close(r1) close(r2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)) write$cgroup_type(r2, &(0x7f0000000080)='threaded\x00', 0xfffffc61) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x26e1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000440)) close(r3) write$cgroup_subtree(r3, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) close(r0) recvmsg(r1, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x2000012e}], 0x1}, 0x3f00) r4 = gettid() perf_event_open(0x0, r4, 0xf, r3, 0x2) close(r2) 14:36:45 executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0) close(r1) close(r2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)) write$cgroup_type(r2, &(0x7f0000000080)='threaded\x00', 0xfffffc61) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x26e1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000440)) close(r3) write$cgroup_subtree(r3, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) close(r0) recvmsg(r1, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x2000012e}], 0x1}, 0x3f00) r4 = gettid() perf_event_open(0x0, r4, 0xf, r3, 0x2) close(r2) [ 71.006087] IPVS: ftp: loaded support on port[0] = 21 [ 71.017901] NET: Registered protocol family 30 [ 71.022759] Failed to register TIPC socket type [ 71.181472] IPVS: ftp: loaded support on port[0] = 21 [ 71.206042] NET: Registered protocol family 30 [ 71.212792] Failed to register TIPC socket type [ 71.213043] cache_from_obj: Wrong slab cache. TIPC but object is from kmalloc-2048 [ 71.225611] WARNING: CPU: 0 PID: 8389 at mm/slab.h:380 kmem_cache_free.cold+0x1c/0x23 [ 71.233593] Kernel panic - not syncing: panic_on_warn set ... [ 71.233593] [ 71.240974] CPU: 0 PID: 8389 Comm: syz-executor.0 Not tainted 4.19.47 #19 [ 71.247901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.257264] Call Trace: [ 71.259850] [ 71.262013] dump_stack+0x172/0x1f0 [ 71.265651] panic+0x263/0x507 [ 71.268849] ? __warn_printk+0xf3/0xf3 [ 71.272746] ? kmem_cache_free.cold+0x1c/0x23 [ 71.277252] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 71.282794] ? __warn.cold+0x5/0x4a [ 71.286425] ? __warn+0xe8/0x1d0 [ 71.289798] ? kmem_cache_free.cold+0x1c/0x23 [ 71.294304] __warn.cold+0x20/0x4a [ 71.297851] ? lockdep_hardirqs_on+0x19b/0x5d0 [ 71.302436] ? kmem_cache_free.cold+0x1c/0x23 [ 71.306943] report_bug+0x263/0x2b0 [ 71.310579] do_error_trap+0x204/0x360 [ 71.314474] ? math_error+0x340/0x340 [ 71.319227] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 71.324774] ? wake_up_klogd+0x99/0xd0 [ 71.328670] ? error_entry+0x76/0xd0 [ 71.332390] ? trace_hardirqs_off_caller+0x65/0x220 [ 71.337421] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 71.342277] do_invalid_op+0x1b/0x20 [ 71.346005] invalid_op+0x14/0x20 [ 71.349457] RIP: 0010:kmem_cache_free.cold+0x1c/0x23 [ 71.354560] Code: e8 95 ab 47 05 44 8b 6d c4 e9 74 a5 ff ff 48 8b 48 58 48 c7 c6 c0 44 54 87 48 c7 c7 78 66 38 88 49 8b 54 24 58 e8 44 3d b4 ff <0f> 0b e9 89 df ff ff 49 8b 4f 58 48 c7 c6 c0 44 54 87 48 c7 c7 78 [ 71.373472] RSP: 0018:ffff8880ae807cf8 EFLAGS: 00010286 [ 71.378846] RAX: 0000000000000046 RBX: ffff88806c5e1300 RCX: 0000000000000000 [ 71.386120] RDX: 0000000000000000 RSI: ffffffff81559f66 RDI: ffffed1015d00f91 [ 71.393398] RBP: ffff8880ae807d18 R08: 0000000000000046 R09: ffff8880852329e0 [ 71.400669] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888085106000 [ 71.407944] R13: 0000000000000000 R14: ffff888085106000 R15: ffff88806c5e1610 [ 71.415249] ? vprintk_func+0x86/0x189 [ 71.419161] ? kmem_cache_free.cold+0x1c/0x23 [ 71.423663] __sk_destruct+0x4b4/0x6d0 [ 71.427559] ? tipc_wait_for_connect.isra.0+0x4c0/0x4c0 [ 71.432942] sk_destruct+0x7b/0x90 [ 71.436487] __sk_free+0xce/0x300 [ 71.439944] sk_free+0x42/0x50 [ 71.443153] tipc_sk_callback+0x48/0x60 [ 71.447144] rcu_process_callbacks+0xba0/0x1a30 [ 71.451837] ? __rcu_read_unlock+0x170/0x170 [ 71.456263] ? __lock_is_held+0xb6/0x140 [ 71.460345] __do_softirq+0x25c/0x921 [ 71.464155] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 71.469702] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 71.475431] irq_exit+0x180/0x1d0 [ 71.478894] smp_apic_timer_interrupt+0x13b/0x550 [ 71.483743] apic_timer_interrupt+0xf/0x20 [ 71.487976] [ 71.490222] RIP: 0010:unmap_page_range+0xaa0/0x1e20 [ 71.495253] Code: 41 18 0f 84 85 04 00 00 e8 dd b1 d6 ff 49 8d 45 08 48 89 85 30 ff ff ff 48 c1 e8 03 80 3c 18 00 0f 85 3a 10 00 00 49 8b 45 08 <31> ff 4d 89 ee 48 89 c6 48 89 85 b0 fe ff ff 83 e6 01 48 89 b5 e8 [ 71.514171] RSP: 0018:ffff88807f06f9e0 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 71.521891] RAX: dead000000000100 RBX: dffffc0000000000 RCX: ffff88807f06fc28 [ 71.529169] RDX: 0000000000000000 RSI: ffffffff81945293 RDI: ffff88807f06fc40 [ 71.536442] RBP: ffff88807f06fb48 R08: ffff888085232140 R09: fffff940004cd3c7 [ 71.543715] R10: fffff940004cd3c6 R11: ffffea0002669e33 R12: 00007f96ca38b000 [ 71.550987] R13: ffffea0002669e40 R14: 0000000000000001 R15: ffff888095d16c50 [ 71.558291] ? unmap_page_range+0xa83/0x1e20 [ 71.562730] ? vm_normal_page_pmd+0x2f0/0x2f0 [ 71.567234] ? kasan_check_read+0x11/0x20 [ 71.571395] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 71.576942] ? uprobe_munmap+0xad/0x2b0 [ 71.580922] unmap_single_vma+0x19d/0x300 [ 71.585081] unmap_vmas+0xae/0x180 [ 71.588631] exit_mmap+0x2c2/0x530 [ 71.592182] ? __ia32_sys_munmap+0x80/0x80 [ 71.596440] ? __khugepaged_exit+0x2da/0x400 [ 71.600860] ? rcu_read_lock_sched_held+0x110/0x130 [ 71.605893] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 71.611444] ? __khugepaged_exit+0xcf/0x400 [ 71.615776] mmput+0x15f/0x4c0 [ 71.618983] do_exit+0x838/0x2fa0 [ 71.622442] ? pci_mmcfg_check_reserved+0x170/0x170 [ 71.627468] ? do_group_exit+0x2e9/0x370 [ 71.631535] ? mm_update_next_owner+0x660/0x660 [ 71.636232] ? preempt_schedule_common+0x4f/0xe0 [ 71.640999] ? preempt_schedule+0x4b/0x60 [ 71.645162] ? ___preempt_schedule+0x16/0x18 [ 71.649690] do_group_exit+0x135/0x370 [ 71.653591] __x64_sys_exit_group+0x44/0x50 [ 71.657922] do_syscall_64+0xfd/0x620 [ 71.661738] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 71.666934] RIP: 0033:0x459279 [ 71.670139] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 71.689148] RSP: 002b:00007ffeff5b09e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 71.696957] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 0000000000459279 [ 71.704238] RDX: 0000000000412f61 RSI: fffffffffffffff7 RDI: 0000000000000000 [ 71.711509] RBP: 0000000000000000 R08: 00000000ff4f8b01 R09: 00007ffeff5b0a40 [ 71.718783] R10: ffffffff812face6 R11: 0000000000000246 R12: 0000000000000000 [ 71.726064] R13: 00007ffeff5b0a40 R14: 0000000000000000 R15: 00007ffeff5b0a50 [ 71.733363] ? __do_page_fault+0x276/0xe90 [ 71.739154] Kernel Offset: disabled [ 71.742933] Rebooting in 86400 seconds..