[[36minfo[39;49m] Using makefile-style concurrent boot in runlevel 2.
[ 26.303326] audit: type=1800 audit(1544467057.659:21): pid=5837 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2419 res=0
[ 26.330762] audit: type=1800 audit(1544467057.659:22): pid=5837 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="motd" dev="sda1" ino=2447 res=0
[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
[....] Starting periodic command scheduler: cron[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
Debian GNU/Linux 7 syzkaller ttyS0
syzkaller login: [ 31.910808] sshd (5977) used greatest stack depth: 15744 bytes left
Warning: Permanently added '10.128.0.175' (ECDSA) to the list of known hosts.
executing program
[ 38.434038] Started in network mode
[ 38.438393] Own node identity 00000000000000000000000000000001, cluster identity 4711
[ 38.446774] New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[ 38.454187] ==================================================================
[ 38.461614] BUG: KASAN: use-after-free in kfree_skb+0xb7/0x580
[ 38.467691] Read of size 4 at addr ffff8881bd1712a4 by task syz-executor529/5993
[ 38.475202]
[ 38.476821] CPU: 1 PID: 5993 Comm: syz-executor529 Not tainted 4.20.0-rc6+ #370
[ 38.484376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 38.493831] Call Trace:
[ 38.496404] dump_stack+0x244/0x39d
[ 38.500019] ? dump_stack_print_info.cold.1+0x20/0x20
[ 38.505194] ? printk+0xa7/0xcf
[ 38.508460] ? kmsg_dump_rewind_nolock+0xe4/0xe4
[ 38.513207] print_address_description.cold.7+0x9/0x1ff
[ 38.518557] kasan_report.cold.8+0x242/0x309
[ 38.522949] ? kfree_skb+0xb7/0x580
[ 38.526563] check_memory_region+0x13e/0x1b0
[ 38.531228] kasan_check_read+0x11/0x20
[ 38.535184] kfree_skb+0xb7/0x580
[ 38.538624] ? __kfree_skb+0x20/0x20
[ 38.542321] ? skb_tstamp_tx+0x50/0x50
[ 38.546224] tipc_udp_send_msg+0x5a6/0x670
[ 38.550449] ? tipc_udp_xmit.isra.14+0xef0/0xef0
[ 38.555187] ? bearer_get+0x2f8/0x4e0
[ 38.558968] ? __tipc_nl_add_media+0xca0/0xca0
[ 38.563533] ? kasan_check_read+0x11/0x20
[ 38.567661] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 38.572917] ? rcu_softirq_qs+0x20/0x20
[ 38.576872] ? tipc_disc_remove_dest+0x120/0x120
[ 38.581613] ? tipc_enable_bearer+0x90d/0xf10
[ 38.586090] ? rcu_read_lock_sched_held+0x14f/0x180
[ 38.591096] tipc_bearer_xmit_skb+0x171/0x350
[ 38.595589] tipc_enable_bearer+0xc5e/0xf10
[ 38.599910] ? mutex_trylock+0x2b0/0x2b0
[ 38.603961] ? tipc_bearer_xmit_skb+0x350/0x350
[ 38.608633] ? nla_memcmp+0x90/0x90
[ 38.612248] ? lock_release+0xa00/0xa00
[ 38.616208] ? perf_trace_sched_process_exec+0x860/0x860
[ 38.621641] ? mark_held_locks+0x130/0x130
[ 38.625878] ? check_preemption_disabled+0x48/0x280
[ 38.630890] __tipc_nl_bearer_enable+0x37c/0x4a0
[ 38.635627] ? __tipc_nl_bearer_enable+0x37c/0x4a0
[ 38.640550] ? tipc_nl_bearer_disable+0x30/0x30
[ 38.645234] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 38.650753] ? __nla_parse+0x12c/0x3e0
[ 38.654626] tipc_nl_bearer_enable+0x22/0x30
[ 38.659018] genl_family_rcv_msg+0x8a7/0x11a0
[ 38.663515] ? genl_unregister_family+0x8a0/0x8a0
[ 38.668433] ? lock_downgrade+0x900/0x900
[ 38.672565] ? check_preemption_disabled+0x48/0x280
[ 38.677579] ? rcu_read_unlock_special+0x1c0/0x1c0
[ 38.682519] ? kasan_check_read+0x11/0x20
[ 38.686651] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 38.691912] ? rcu_softirq_qs+0x20/0x20
[ 38.695881] genl_rcv_msg+0xc6/0x168
[ 38.699583] netlink_rcv_skb+0x172/0x440
[ 38.703627] ? genl_family_rcv_msg+0x11a0/0x11a0
[ 38.708369] ? netlink_ack+0xb80/0xb80
[ 38.712240] ? down_read+0x8d/0x120
[ 38.715857] genl_rcv+0x28/0x40
[ 38.719119] netlink_unicast+0x5a5/0x760
[ 38.723170] ? netlink_attachskb+0x9a0/0x9a0
[ 38.727563] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 38.733083] ? __sanitizer_cov_trace_cmp4+0x16/0x20
[ 38.738097] netlink_sendmsg+0xa18/0xfc0
[ 38.742154] ? netlink_unicast+0x760/0x760
[ 38.746368] ? aa_sock_msg_perm.isra.14+0xba/0x160
[ 38.751291] ? apparmor_socket_sendmsg+0x29/0x30
[ 38.756031] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 38.761551] ? security_socket_sendmsg+0x94/0xc0
[ 38.766287] ? netlink_unicast+0x760/0x760
[ 38.770511] sock_sendmsg+0xd5/0x120
[ 38.774210] ___sys_sendmsg+0x7fd/0x930
[ 38.778173] ? copy_msghdr_from_user+0x580/0x580
[ 38.782918] ? blkcg_maybe_throttle_current+0xa38/0x1080
[ 38.788362] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 38.793882] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 38.799402] ? __fget_light+0x2e9/0x430
[ 38.803359] ? fget_raw+0x20/0x20
[ 38.806823] ? task_work_run+0x1af/0x2a0
[ 38.810870] ? _raw_spin_unlock_irq+0x27/0x80
[ 38.815351] ? _raw_spin_unlock_irq+0x27/0x80
[ 38.819851] ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 38.824427] ? trace_hardirqs_on+0xbd/0x310
[ 38.828739] ? kasan_check_read+0x11/0x20
[ 38.832874] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 38.838396] ? sockfd_lookup_light+0xc5/0x160
[ 38.842876] __sys_sendmsg+0x11d/0x280
[ 38.846768] ? __ia32_sys_shutdown+0x80/0x80
[ 38.851178] ? do_syscall_64+0x6be/0x820
[ 38.855218] ? trace_hardirqs_on+0x310/0x310
[ 38.859609] ? do_syscall_64+0x9a/0x820
[ 38.863564] ? do_syscall_64+0x9a/0x820
[ 38.867527] ? trace_hardirqs_off_caller+0x310/0x310
[ 38.872616] __x64_sys_sendmsg+0x78/0xb0
[ 38.876662] do_syscall_64+0x1b9/0x820
[ 38.880531] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[ 38.885878] ? syscall_return_slowpath+0x5e0/0x5e0
[ 38.890796] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 38.895641] ? trace_hardirqs_on_caller+0x310/0x310
[ 38.900736] ? prepare_exit_to_usermode+0x3b0/0x3b0
[ 38.905733] ? prepare_exit_to_usermode+0x291/0x3b0
[ 38.910736] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 38.915563] entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 38.920733] RIP: 0033:0x4446f9
[ 38.923911] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 1b d8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 38.942807] RSP: 002b:00007ffde52c0e58 EFLAGS: 00000213 ORIG_RAX: 000000000000002e
[ 38.950499] RAX: ffffffffffffffda RBX: 00000000004002e0 RCX: 00000000004446f9
[ 38.957767] RDX: 0000000000000000 RSI: 0000000020000700 RDI: 0000000000000003
[ 38.965037] RBP: 00000000006cf018 R08: 0000000000000000 R09: 00000000004002e0
[ 38.972295] R10: 0000000000000000 R11: 0000000000000213 R12: 00000000004023a0
[ 38.979546] R13: 0000000000402430 R14: 0000000000000000 R15: 0000000000000000
[ 38.986803]
[ 38.988412] Allocated by task 5993:
[ 38.992025] save_stack+0x43/0xd0
[ 38.995459] kasan_kmalloc+0xc7/0xe0
[ 38.999172] kasan_slab_alloc+0x12/0x20
[ 39.003148] kmem_cache_alloc_node+0x144/0x730
[ 39.007724] __alloc_skb+0x119/0x770
[ 39.011427] __pskb_copy_fclone+0x16b/0xeb0
[ 39.015733] tipc_udp_send_msg+0x44e/0x670
[ 39.019966] tipc_bearer_xmit_skb+0x171/0x350
[ 39.024456] tipc_enable_bearer+0xc5e/0xf10
[ 39.028759] __tipc_nl_bearer_enable+0x37c/0x4a0
[ 39.033503] tipc_nl_bearer_enable+0x22/0x30
[ 39.037905] genl_family_rcv_msg+0x8a7/0x11a0
[ 39.042384] genl_rcv_msg+0xc6/0x168
[ 39.046081] netlink_rcv_skb+0x172/0x440
[ 39.050124] genl_rcv+0x28/0x40
[ 39.053390] netlink_unicast+0x5a5/0x760
[ 39.057430] netlink_sendmsg+0xa18/0xfc0
[ 39.061475] sock_sendmsg+0xd5/0x120
[ 39.065168] ___sys_sendmsg+0x7fd/0x930
[ 39.069125] __sys_sendmsg+0x11d/0x280
[ 39.072997] __x64_sys_sendmsg+0x78/0xb0
[ 39.077043] do_syscall_64+0x1b9/0x820
[ 39.080916] entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 39.086079]
[ 39.087697] Freed by task 5993:
[ 39.090957] save_stack+0x43/0xd0
[ 39.094394] __kasan_slab_free+0x102/0x150
[ 39.098623] kasan_slab_free+0xe/0x10
[ 39.102404] kmem_cache_free+0x83/0x290
[ 39.106371] kfree_skbmem+0x154/0x230
[ 39.110153] kfree_skb+0x1c3/0x580
[ 39.113674] tipc_udp_xmit.isra.14+0x420/0xef0
[ 39.118239] tipc_udp_send_msg+0x398/0x670
[ 39.122555] tipc_bearer_xmit_skb+0x171/0x350
[ 39.127046] tipc_enable_bearer+0xc5e/0xf10
[ 39.131347] __tipc_nl_bearer_enable+0x37c/0x4a0
[ 39.136085] tipc_nl_bearer_enable+0x22/0x30
[ 39.140496] genl_family_rcv_msg+0x8a7/0x11a0
[ 39.144969] genl_rcv_msg+0xc6/0x168
[ 39.148671] netlink_rcv_skb+0x172/0x440
[ 39.152722] genl_rcv+0x28/0x40
[ 39.155985] netlink_unicast+0x5a5/0x760
[ 39.160043] netlink_sendmsg+0xa18/0xfc0
[ 39.164089] sock_sendmsg+0xd5/0x120
[ 39.167783] ___sys_sendmsg+0x7fd/0x930
[ 39.171747] __sys_sendmsg+0x11d/0x280
[ 39.175625] __x64_sys_sendmsg+0x78/0xb0
[ 39.179667] do_syscall_64+0x1b9/0x820
[ 39.183540] entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 39.188705]
[ 39.190318] The buggy address belongs to the object at ffff8881bd1711c0
[ 39.190318] which belongs to the cache skbuff_head_cache of size 232
[ 39.203478] The buggy address is located 228 bytes inside of
[ 39.203478] 232-byte region [ffff8881bd1711c0, ffff8881bd1712a8)
[ 39.215334] The buggy address belongs to the page:
[ 39.220244] page:ffffea0006f45c40 count:1 mapcount:0 mapping:ffff8881d9a1c0c0 index:0x0
[ 39.228369] flags: 0x2fffc0000000200(slab)
[ 39.232586] raw: 02fffc0000000200 ffffea0006f2a4c8 ffffea0006f2fec8 ffff8881d9a1c0c0
[ 39.240448] raw: 0000000000000000 ffff8881bd171080 000000010000000c 0000000000000000
[ 39.248304] page dumped because: kasan: bad access detected
[ 39.253992]
[ 39.255598] Memory state around the buggy address:
[ 39.260518] ffff8881bd171180: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb
[ 39.267860] ffff8881bd171200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 39.275197] >ffff8881bd171280: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc
[ 39.282533] ^
[ 39.286923] ffff8881bd171300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 39.294268] ffff8881bd171380: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc
[ 39.301603] ==================================================================
[ 39.308937] Disabling lock debugging due to kernel taint
[ 39.314508] ==================================================================
[ 39.321871] BUG: KASAN: double-free or invalid-free in skb_free_head+0x99/0xc0
[ 39.329208]
[ 39.330824] CPU: 1 PID: 5993 Comm: syz-executor529 Tainted: G B 4.20.0-rc6+ #370
[ 39.339640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 39.348973] Call Trace:
[ 39.351546]
[ 39.353687] dump_stack+0x244/0x39d
[ 39.357310] ? dump_stack_print_info.cold.1+0x20/0x20
[ 39.362483] ? printk+0xa7/0xcf
[ 39.365749] ? kmsg_dump_rewind_nolock+0xe4/0xe4
[ 39.370491] ? debug_check_no_obj_freed+0x305/0x58d
[ 39.375489] print_address_description.cold.7+0x9/0x1ff
[ 39.380849] ? skb_free_head+0x99/0xc0
[ 39.384714] kasan_report_invalid_free+0x64/0xa0
[ 39.389467] ? skb_free_head+0x99/0xc0
[ 39.393336] __kasan_slab_free+0x13a/0x150
[ 39.397559] ? skb_free_head+0x99/0xc0
[ 39.401423] kasan_slab_free+0xe/0x10
[ 39.405201] kfree+0xcf/0x230
[ 39.408286] skb_free_head+0x99/0xc0
[ 39.411978] skb_release_data+0x70c/0x9a0
[ 39.416104] ? __copy_skb_header+0x350/0x6b0
[ 39.420491] ? skb_tx_error+0x410/0x410
[ 39.424447] ? tipc_udp_xmit.isra.14+0x425/0xef0
[ 39.429302] ? kasan_end_report+0x32/0x4f
[ 39.433427] ? kasan_report.cold.8+0x76/0x309
[ 39.437910] skb_release_all+0x4a/0x60
[ 39.441777] kfree_skb+0x1bb/0x580
[ 39.445311] ? tipc_udp_send_msg+0x5a6/0x670
[ 39.450030] ? __kfree_skb+0x20/0x20
[ 39.453723] ? skb_tstamp_tx+0x50/0x50
[ 39.457604] tipc_udp_send_msg+0x5a6/0x670
[ 39.461822] ? tipc_udp_xmit.isra.14+0xef0/0xef0
[ 39.466556] ? bearer_get+0x2f8/0x4e0
[ 39.470335] ? __tipc_nl_add_media+0xca0/0xca0
[ 39.474894] ? skb_clone+0x21a/0x500
[ 39.478592] ? _raw_spin_unlock_bh+0x30/0x40
[ 39.482984] ? trace_hardirqs_off_caller+0x310/0x310
[ 39.488076] ? do_raw_spin_trylock+0x270/0x270
[ 39.492640] tipc_bearer_xmit_skb+0x171/0x350
[ 39.497133] tipc_disc_timeout+0xb2b/0xfc0
[ 39.501361] ? tipc_disc_msg_xmit.isra.19+0x180/0x180
[ 39.506532] ? _raw_spin_unlock+0x2c/0x50
[ 39.510662] ? clocksource_watchdog+0xc4/0xb00
[ 39.515226] ? lock_acquire+0x1ed/0x520
[ 39.519186] ? call_timer_fn+0x1db/0x920
[ 39.523229] ? lock_downgrade+0x900/0x900
[ 39.527364] ? lock_release+0xa00/0xa00
[ 39.531324] ? cpuacct_css_alloc+0x160/0x160
[ 39.535714] call_timer_fn+0x272/0x920
[ 39.539607] ? tipc_disc_msg_xmit.isra.19+0x180/0x180
[ 39.544779] ? process_timeout+0x40/0x40
[ 39.548826] ? trace_hardirqs_off+0xb8/0x310
[ 39.553219] ? kasan_check_read+0x11/0x20
[ 39.557353] ? do_raw_spin_unlock+0xa7/0x330
[ 39.561765] ? trace_hardirqs_on+0x310/0x310
[ 39.566153] ? __run_timers+0x7da/0xc70
[ 39.570111] ? lock_downgrade+0x900/0x900
[ 39.574243] ? _raw_spin_unlock_irqrestore+0x6d/0xd0
[ 39.579325] ? trace_hardirqs_on+0xbd/0x310
[ 39.583622] ? kasan_check_read+0x11/0x20
[ 39.587751] ? __run_timers+0x7da/0xc70
[ 39.591705] ? trace_hardirqs_off_caller+0x310/0x310
[ 39.596796] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 39.602329] ? tipc_disc_msg_xmit.isra.19+0x180/0x180
[ 39.607815] __run_timers+0x7e5/0xc70
[ 39.611609] ? timer_fixup_init+0x70/0x70
[ 39.615742] ? __sanitizer_cov_trace_cmp8+0x18/0x20
[ 39.620744] ? timerqueue_add+0x207/0x2b0
[ 39.624871] ? enqueue_hrtimer+0x1a5/0x560
[ 39.629084] ? hrtimer_update_softirq_timer+0xa0/0xa0
[ 39.634253] ? rwlock_bug.part.2+0x90/0x90
[ 39.638466] ? hrtimer_forward+0x1e5/0x2a0
[ 39.642685] ? pvclock_read_flags+0x160/0x160
[ 39.647161] ? lock_downgrade+0x900/0x900
[ 39.651296] ? trace_hardirqs_on+0xbd/0x310
[ 39.655597] ? kvm_sched_clock_read+0x9/0x20
[ 39.659999] ? irq_exit+0x17f/0x1c0
[ 39.663609] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 39.669132] ? check_preemption_disabled+0x48/0x280
[ 39.674240] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 39.679770] run_timer_softirq+0x52/0xb0
[ 39.683834] ? __this_cpu_preempt_check+0x1c/0x20
[ 39.688660] __do_softirq+0x308/0xb7e
[ 39.692442] ? ktime_get_raw_ts64+0x4d0/0x4d0
[ 39.696916] ? lock_downgrade+0x900/0x900
[ 39.701051] ? __irqentry_text_end+0x1f9658/0x1f9658
[ 39.706137] ? pvclock_read_flags+0x160/0x160
[ 39.710615] ? lapic_next_event+0x5a/0x90
[ 39.714743] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 39.720261] ? clockevents_program_event+0x140/0x370
[ 39.725344] ? kvm_clock_read+0x18/0x30
[ 39.729299] ? kvm_sched_clock_read+0x9/0x20
[ 39.733687] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 39.739214] ? check_preemption_disabled+0x48/0x280
[ 39.744216] irq_exit+0x17f/0x1c0
[ 39.747662] smp_apic_timer_interrupt+0x1cb/0x760
[ 39.752483] ? smp_reschedule_interrupt+0x109/0x650
[ 39.757476] ? smp_call_function_single_interrupt+0x650/0x650
[ 39.763342] ? interrupt_entry+0xb5/0xc0
[ 39.767384] ? trace_hardirqs_off_caller+0xbb/0x310
[ 39.772392] ? trace_hardirqs_off_caller+0xbb/0x310
[ 39.777390] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 39.782214] ? trace_hardirqs_on_caller+0x310/0x310
[ 39.787214] ? trace_hardirqs_on_caller+0x310/0x310
[ 39.792211] ? task_prio+0x50/0x50
[ 39.795739] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 39.801271] ? check_preemption_disabled+0x48/0x280
[ 39.806270] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 39.811099] apic_timer_interrupt+0xf/0x20
[ 39.815312]
[ 39.817531] RIP: 0010:_raw_spin_unlock_irqrestore+0xaf/0xd0
[ 39.823235] Code: f0 00 52 89 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 28 48 83 3d 18 ef 76 01 00 74 15 48 89 df 57 9d <0f> 1f 44 00 00 eb ad e8 1c 6b 25 f9 eb bb 0f 0b 0f 0b e8 9a d7 e7
[ 39.842116] RSP: 0018:ffff8881c1d4ede8 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13
[ 39.849805] RAX: dffffc0000000000 RBX: 0000000000000286 RCX: ffffffff8185acea
[ 39.857053] RDX: 1ffffffff12a401e RSI: ffffffff8185ad04 RDI: 0000000000000286
[ 39.864301] RBP: ffff8881c1d4edf8 R08: ffff8881c2236140 R09: fffffbfff12c7248
[ 39.871558] R10: fffffbfff12c7248 R11: ffffffff89639243 R12: ffffffff89639240
[ 39.878813] R13: 0000000000000000 R14: ffff8881bd1712a4 R15: ffff8881bd1712a4
[ 39.886072] ? trace_hardirqs_on+0x9a/0x310
[ 39.890393] ? trace_hardirqs_on+0xb4/0x310
[ 39.894704] kasan_end_report+0x32/0x4f
[ 39.898665] kasan_report.cold.8+0x76/0x309
[ 39.902968] ? kfree_skb+0xb7/0x580
[ 39.906589] check_memory_region+0x13e/0x1b0
[ 39.910983] kasan_check_read+0x11/0x20
[ 39.914941] kfree_skb+0xb7/0x580
[ 39.918378] ? __kfree_skb+0x20/0x20
[ 39.922072] ? skb_tstamp_tx+0x50/0x50
[ 39.925951] tipc_udp_send_msg+0x5a6/0x670
[ 39.930170] ? tipc_udp_xmit.isra.14+0xef0/0xef0
[ 39.934907] ? bearer_get+0x2f8/0x4e0
[ 39.938696] ? __tipc_nl_add_media+0xca0/0xca0
[ 39.943265] ? kasan_check_read+0x11/0x20
[ 39.947396] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 39.952651] ? rcu_softirq_qs+0x20/0x20
[ 39.956605] ? tipc_disc_remove_dest+0x120/0x120
[ 39.961357] ? tipc_enable_bearer+0x90d/0xf10
[ 39.965840] ? rcu_read_lock_sched_held+0x14f/0x180
[ 39.970838] tipc_bearer_xmit_skb+0x171/0x350
[ 39.975312] tipc_enable_bearer+0xc5e/0xf10
[ 39.979618] ? mutex_trylock+0x2b0/0x2b0
[ 39.983663] ? tipc_bearer_xmit_skb+0x350/0x350
[ 39.988324] ? nla_memcmp+0x90/0x90
[ 39.991939] ? lock_release+0xa00/0xa00
[ 39.995894] ? perf_trace_sched_process_exec+0x860/0x860
[ 40.001323] ? mark_held_locks+0x130/0x130
[ 40.005540] ? check_preemption_disabled+0x48/0x280
[ 40.010663] __tipc_nl_bearer_enable+0x37c/0x4a0
[ 40.015408] ? __tipc_nl_bearer_enable+0x37c/0x4a0
[ 40.020322] ? tipc_nl_bearer_disable+0x30/0x30
[ 40.024978] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 40.030498] ? __nla_parse+0x12c/0x3e0
[ 40.034508] tipc_nl_bearer_enable+0x22/0x30
[ 40.038903] genl_family_rcv_msg+0x8a7/0x11a0
[ 40.043379] ? genl_unregister_family+0x8a0/0x8a0
[ 40.048211] ? lock_downgrade+0x900/0x900
[ 40.052344] ? check_preemption_disabled+0x48/0x280
[ 40.057343] ? rcu_read_unlock_special+0x1c0/0x1c0
[ 40.062269] ? kasan_check_read+0x11/0x20
[ 40.066409] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 40.071669] ? rcu_softirq_qs+0x20/0x20
[ 40.075633] genl_rcv_msg+0xc6/0x168
[ 40.079326] netlink_rcv_skb+0x172/0x440
[ 40.083367] ? genl_family_rcv_msg+0x11a0/0x11a0
[ 40.088213] ? netlink_ack+0xb80/0xb80
[ 40.092183] ? down_read+0x8d/0x120
[ 40.095793] genl_rcv+0x28/0x40
[ 40.099053] netlink_unicast+0x5a5/0x760
[ 40.103097] ? netlink_attachskb+0x9a0/0x9a0
[ 40.107487] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 40.113019] ? __sanitizer_cov_trace_cmp4+0x16/0x20
[ 40.118015] netlink_sendmsg+0xa18/0xfc0
[ 40.122057] ? netlink_unicast+0x760/0x760
[ 40.126271] ? aa_sock_msg_perm.isra.14+0xba/0x160
[ 40.131180] ? apparmor_socket_sendmsg+0x29/0x30
[ 40.135919] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 40.141440] ? security_socket_sendmsg+0x94/0xc0
[ 40.146179] ? netlink_unicast+0x760/0x760
[ 40.150403] sock_sendmsg+0xd5/0x120
[ 40.154210] ___sys_sendmsg+0x7fd/0x930
[ 40.158169] ? copy_msghdr_from_user+0x580/0x580
[ 40.162914] ? blkcg_maybe_throttle_current+0xa38/0x1080
[ 40.168452] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 40.173981] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 40.179587] ? __fget_light+0x2e9/0x430
[ 40.183540] ? fget_raw+0x20/0x20
[ 40.186977] ? task_work_run+0x1af/0x2a0
[ 40.191017] ? _raw_spin_unlock_irq+0x27/0x80
[ 40.195491] ? _raw_spin_unlock_irq+0x27/0x80
[ 40.199968] ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 40.204527] ? trace_hardirqs_on+0xbd/0x310
[ 40.208937] ? kasan_check_read+0x11/0x20
[ 40.213066] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 40.218583] ? sockfd_lookup_light+0xc5/0x160
[ 40.223059] __sys_sendmsg+0x11d/0x280
[ 40.226930] ? __ia32_sys_shutdown+0x80/0x80
[ 40.231536] ? do_syscall_64+0x6be/0x820
[ 40.235577] ? trace_hardirqs_on+0x310/0x310
[ 40.239968] ? do_syscall_64+0x9a/0x820
[ 40.243922] ? do_syscall_64+0x9a/0x820
[ 40.247880] ? trace_hardirqs_off_caller+0x310/0x310
[ 40.252968] __x64_sys_sendmsg+0x78/0xb0
[ 40.257013] do_syscall_64+0x1b9/0x820
[ 40.260881] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[ 40.266228] ? syscall_return_slowpath+0x5e0/0x5e0
[ 40.271139] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 40.275961] ? trace_hardirqs_on_caller+0x310/0x310
[ 40.280959] ? prepare_exit_to_usermode+0x3b0/0x3b0
[ 40.285957] ? prepare_exit_to_usermode+0x291/0x3b0
[ 40.290953] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 40.295780] entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 40.300954] RIP: 0033:0x4446f9
[ 40.304130] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 1b d8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 40.323011] RSP: 002b:00007ffde52c0e58 EFLAGS: 00000213 ORIG_RAX: 000000000000002e
[ 40.330701] RAX: ffffffffffffffda RBX: 00000000004002e0 RCX: 00000000004446f9
[ 40.337953] RDX: 0000000000000000 RSI: 0000000020000700 RDI: 0000000000000003
[ 40.345214] RBP: 00000000006cf018 R08: 0000000000000000 R09: 00000000004002e0
[ 40.352462] R10: 0000000000000000 R11: 0000000000000213 R12: 00000000004023a0
[ 40.359712] R13: 0000000000402430 R14: 0000000000000000 R15: 0000000000000000
[ 40.366964]
[ 40.368585] Allocated by task 5993:
[ 40.372197] save_stack+0x43/0xd0
[ 40.375630] kasan_kmalloc+0xc7/0xe0
[ 40.379334] __kmalloc_node_track_caller+0x50/0x70
[ 40.384247] __kmalloc_reserve.isra.40+0x41/0xe0
[ 40.388982] __alloc_skb+0x155/0x770
[ 40.392677] __pskb_copy_fclone+0x16b/0xeb0
[ 40.396984] tipc_udp_send_msg+0x44e/0x670
[ 40.401213] tipc_bearer_xmit_skb+0x171/0x350
[ 40.405698] tipc_disc_timeout+0xb2b/0xfc0
[ 40.409913] call_timer_fn+0x272/0x920
[ 40.413779] __run_timers+0x7e5/0xc70
[ 40.417560] run_timer_softirq+0x52/0xb0
[ 40.421619] __do_softirq+0x308/0xb7e
[ 40.425403]
[ 40.427018] Freed by task 5993:
[ 40.430279] save_stack+0x43/0xd0
[ 40.433712] __kasan_slab_free+0x102/0x150
[ 40.438031] kasan_slab_free+0xe/0x10
[ 40.441811] kfree+0xcf/0x230
[ 40.444910] skb_free_head+0x99/0xc0
[ 40.448603] skb_release_data+0x70c/0x9a0
[ 40.452822] skb_release_all+0x4a/0x60
[ 40.456707] kfree_skb+0x1bb/0x580
[ 40.460230] tipc_udp_xmit.isra.14+0x420/0xef0
[ 40.464793] tipc_udp_send_msg+0x398/0x670
[ 40.469010] tipc_bearer_xmit_skb+0x171/0x350
[ 40.473484] tipc_disc_timeout+0xb2b/0xfc0
[ 40.477700] call_timer_fn+0x272/0x920
[ 40.481564] __run_timers+0x7e5/0xc70
[ 40.485343] run_timer_softirq+0x52/0xb0
[ 40.489387] __do_softirq+0x308/0xb7e
[ 40.493166]
[ 40.494773] The buggy address belongs to the object at ffff8881cd41d240
[ 40.494773] which belongs to the cache kmalloc-1k of size 1024
[ 40.507410] The buggy address is located 0 bytes inside of
[ 40.507410] 1024-byte region [ffff8881cd41d240, ffff8881cd41d640)
[ 40.519176] The buggy address belongs to the page:
[ 40.524085] page:ffffea0007350700 count:1 mapcount:0 mapping:ffff8881da800ac0 index:0x0 compound_mapcount: 0
[ 40.534033] flags: 0x2fffc0000010200(slab|head)
[ 40.538684] raw: 02fffc0000010200 ffffea0007364208 ffffea0007350c08 ffff8881da800ac0
[ 40.546635] raw: 0000000000000000 ffff8881cd41c040 0000000100000007 0000000000000000
[ 40.554497] page dumped because: kasan: bad access detected
[ 40.560182]
[ 40.561888] Memory state around the buggy address:
[ 40.566797] ffff8881cd41d100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 40.574137] ffff8881cd41d180: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 40.581482] >ffff8881cd41d200: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb
[ 40.588821] ^
[ 40.594257] ffff8881cd41d280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 40.601595] ffff8881cd41d300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 40.608937] ==================================================================
[ 40.616286] Kernel panic - not syncing: panic_on_warn set ...
[ 40.622241] CPU: 1 PID: 5993 Comm: syz-executor529 Tainted: G B 4.20.0-rc6+ #370
[ 40.631056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 40.640389] Call Trace:
[ 40.642954]
[ 40.645099] dump_stack+0x244/0x39d
[ 40.648711] ? dump_stack_print_info.cold.1+0x20/0x20
[ 40.653894] ? skb_free_head+0x30/0xc0
[ 40.657767] panic+0x2ad/0x55c
[ 40.660944] ? add_taint.cold.5+0x16/0x16
[ 40.665074] ? print_shadow_for_address+0xb6/0x116
[ 40.669984] ? trace_hardirqs_off+0xaf/0x310
[ 40.674375] ? skb_free_head+0x99/0xc0
[ 40.678241] kasan_end_report+0x47/0x4f
[ 40.682195] kasan_report_invalid_free+0x81/0xa0
[ 40.686930] ? skb_free_head+0x99/0xc0
[ 40.690797] __kasan_slab_free+0x13a/0x150
[ 40.695025] ? skb_free_head+0x99/0xc0
[ 40.698911] kasan_slab_free+0xe/0x10
[ 40.702690] kfree+0xcf/0x230
[ 40.705776] skb_free_head+0x99/0xc0
[ 40.709475] skb_release_data+0x70c/0x9a0
[ 40.713600] ? __copy_skb_header+0x350/0x6b0
[ 40.717988] ? skb_tx_error+0x410/0x410
[ 40.721945] ? tipc_udp_xmit.isra.14+0x425/0xef0
[ 40.726677] ? kasan_end_report+0x32/0x4f
[ 40.730825] ? kasan_report.cold.8+0x76/0x309
[ 40.735301] skb_release_all+0x4a/0x60
[ 40.739168] kfree_skb+0x1bb/0x580
[ 40.742691] ? tipc_udp_send_msg+0x5a6/0x670
[ 40.747166] ? __kfree_skb+0x20/0x20
[ 40.750862] ? skb_tstamp_tx+0x50/0x50
[ 40.754738] tipc_udp_send_msg+0x5a6/0x670
[ 40.758955] ? tipc_udp_xmit.isra.14+0xef0/0xef0
[ 40.763695] ? bearer_get+0x2f8/0x4e0
[ 40.767474] ? __tipc_nl_add_media+0xca0/0xca0
[ 40.772037] ? skb_clone+0x21a/0x500
[ 40.775733] ? _raw_spin_unlock_bh+0x30/0x40
[ 40.780125] ? trace_hardirqs_off_caller+0x310/0x310
[ 40.785211] ? do_raw_spin_trylock+0x270/0x270
[ 40.789778] tipc_bearer_xmit_skb+0x171/0x350
[ 40.794256] tipc_disc_timeout+0xb2b/0xfc0
[ 40.798477] ? tipc_disc_msg_xmit.isra.19+0x180/0x180
[ 40.803649] ? _raw_spin_unlock+0x2c/0x50
[ 40.807779] ? clocksource_watchdog+0xc4/0xb00
[ 40.812347] ? lock_acquire+0x1ed/0x520
[ 40.816315] ? call_timer_fn+0x1db/0x920
[ 40.820359] ? lock_downgrade+0x900/0x900
[ 40.824487] ? lock_release+0xa00/0xa00
[ 40.828457] ? cpuacct_css_alloc+0x160/0x160
[ 40.832853] call_timer_fn+0x272/0x920
[ 40.836739] ? tipc_disc_msg_xmit.isra.19+0x180/0x180
[ 40.841911] ? process_timeout+0x40/0x40
[ 40.845954] ? trace_hardirqs_off+0xb8/0x310
[ 40.850343] ? kasan_check_read+0x11/0x20
[ 40.854470] ? do_raw_spin_unlock+0xa7/0x330
[ 40.858870] ? trace_hardirqs_on+0x310/0x310
[ 40.863270] ? __run_timers+0x7da/0xc70
[ 40.867225] ? lock_downgrade+0x900/0x900
[ 40.871354] ? _raw_spin_unlock_irqrestore+0x6d/0xd0
[ 40.876436] ? trace_hardirqs_on+0xbd/0x310
[ 40.880741] ? kasan_check_read+0x11/0x20
[ 40.884868] ? __run_timers+0x7da/0xc70
[ 40.888822] ? trace_hardirqs_off_caller+0x310/0x310
[ 40.893909] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 40.899427] ? tipc_disc_msg_xmit.isra.19+0x180/0x180
[ 40.904594] __run_timers+0x7e5/0xc70
[ 40.908382] ? timer_fixup_init+0x70/0x70
[ 40.912510] ? __sanitizer_cov_trace_cmp8+0x18/0x20
[ 40.917507] ? timerqueue_add+0x207/0x2b0
[ 40.921636] ? enqueue_hrtimer+0x1a5/0x560
[ 40.925857] ? hrtimer_update_softirq_timer+0xa0/0xa0
[ 40.931035] ? rwlock_bug.part.2+0x90/0x90
[ 40.935252] ? hrtimer_forward+0x1e5/0x2a0
[ 40.939478] ? pvclock_read_flags+0x160/0x160
[ 40.943977] ? lock_downgrade+0x900/0x900
[ 40.948129] ? trace_hardirqs_on+0xbd/0x310
[ 40.952437] ? kvm_sched_clock_read+0x9/0x20
[ 40.956824] ? irq_exit+0x17f/0x1c0
[ 40.960440] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 40.965958] ? check_preemption_disabled+0x48/0x280
[ 40.970953] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 40.976472] run_timer_softirq+0x52/0xb0
[ 40.980514] ? __this_cpu_preempt_check+0x1c/0x20
[ 40.985341] __do_softirq+0x308/0xb7e
[ 40.989133] ? ktime_get_raw_ts64+0x4d0/0x4d0
[ 40.993616] ? lock_downgrade+0x900/0x900
[ 40.997746] ? __irqentry_text_end+0x1f9658/0x1f9658
[ 41.002833] ? pvclock_read_flags+0x160/0x160
[ 41.007310] ? lapic_next_event+0x5a/0x90
[ 41.011436] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 41.016956] ? clockevents_program_event+0x140/0x370
[ 41.022043] ? kvm_clock_read+0x18/0x30
[ 41.025996] ? kvm_sched_clock_read+0x9/0x20
[ 41.030386] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 41.035903] ? check_preemption_disabled+0x48/0x280
[ 41.040906] irq_exit+0x17f/0x1c0
[ 41.044349] smp_apic_timer_interrupt+0x1cb/0x760
[ 41.049173] ? smp_reschedule_interrupt+0x109/0x650
[ 41.054177] ? smp_call_function_single_interrupt+0x650/0x650
[ 41.060059] ? interrupt_entry+0xb5/0xc0
[ 41.064103] ? trace_hardirqs_off_caller+0xbb/0x310
[ 41.069118] ? trace_hardirqs_off_caller+0xbb/0x310
[ 41.074132] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 41.078958] ? trace_hardirqs_on_caller+0x310/0x310
[ 41.083960] ? trace_hardirqs_on_caller+0x310/0x310
[ 41.088966] ? task_prio+0x50/0x50
[ 41.092496] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 41.098015] ? check_preemption_disabled+0x48/0x280
[ 41.103013] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 41.107846] apic_timer_interrupt+0xf/0x20
[ 41.112060]
[ 41.114281] RIP: 0010:_raw_spin_unlock_irqrestore+0xaf/0xd0
[ 41.119978] Code: f0 00 52 89 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 28 48 83 3d 18 ef 76 01 00 74 15 48 89 df 57 9d <0f> 1f 44 00 00 eb ad e8 1c 6b 25 f9 eb bb 0f 0b 0f 0b e8 9a d7 e7
[ 41.138875] RSP: 0018:ffff8881c1d4ede8 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13
[ 41.146563] RAX: dffffc0000000000 RBX: 0000000000000286 RCX: ffffffff8185acea
[ 41.153824] RDX: 1ffffffff12a401e RSI: ffffffff8185ad04 RDI: 0000000000000286
[ 41.161071] RBP: ffff8881c1d4edf8 R08: ffff8881c2236140 R09: fffffbfff12c7248
[ 41.168322] R10: fffffbfff12c7248 R11: ffffffff89639243 R12: ffffffff89639240
[ 41.175673] R13: 0000000000000000 R14: ffff8881bd1712a4 R15: ffff8881bd1712a4
[ 41.182948] ? trace_hardirqs_on+0x9a/0x310
[ 41.187248] ? trace_hardirqs_on+0xb4/0x310
[ 41.191553] kasan_end_report+0x32/0x4f
[ 41.195505] kasan_report.cold.8+0x76/0x309
[ 41.199807] ? kfree_skb+0xb7/0x580
[ 41.203418] check_memory_region+0x13e/0x1b0
[ 41.207818] kasan_check_read+0x11/0x20
[ 41.211777] kfree_skb+0xb7/0x580
[ 41.215208] ? __kfree_skb+0x20/0x20
[ 41.218904] ? skb_tstamp_tx+0x50/0x50
[ 41.222777] tipc_udp_send_msg+0x5a6/0x670
[ 41.226996] ? tipc_udp_xmit.isra.14+0xef0/0xef0
[ 41.231733] ? bearer_get+0x2f8/0x4e0
[ 41.235512] ? __tipc_nl_add_media+0xca0/0xca0
[ 41.240085] ? kasan_check_read+0x11/0x20
[ 41.244220] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 41.249480] ? rcu_softirq_qs+0x20/0x20
[ 41.253437] ? tipc_disc_remove_dest+0x120/0x120
[ 41.258175] ? tipc_enable_bearer+0x90d/0xf10
[ 41.262657] ? rcu_read_lock_sched_held+0x14f/0x180
[ 41.267653] tipc_bearer_xmit_skb+0x171/0x350
[ 41.272127] tipc_enable_bearer+0xc5e/0xf10
[ 41.276430] ? mutex_trylock+0x2b0/0x2b0
[ 41.280474] ? tipc_bearer_xmit_skb+0x350/0x350
[ 41.285125] ? nla_memcmp+0x90/0x90
[ 41.288736] ? lock_release+0xa00/0xa00
[ 41.292687] ? perf_trace_sched_process_exec+0x860/0x860
[ 41.298118] ? mark_held_locks+0x130/0x130
[ 41.302336] ? check_preemption_disabled+0x48/0x280
[ 41.307335] __tipc_nl_bearer_enable+0x37c/0x4a0
[ 41.312081] ? __tipc_nl_bearer_enable+0x37c/0x4a0
[ 41.317018] ? tipc_nl_bearer_disable+0x30/0x30
[ 41.321690] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 41.327206] ? __nla_parse+0x12c/0x3e0
[ 41.331074] tipc_nl_bearer_enable+0x22/0x30
[ 41.335466] genl_family_rcv_msg+0x8a7/0x11a0
[ 41.339945] ? genl_unregister_family+0x8a0/0x8a0
[ 41.344777] ? lock_downgrade+0x900/0x900
[ 41.348908] ? check_preemption_disabled+0x48/0x280
[ 41.353907] ? rcu_read_unlock_special+0x1c0/0x1c0
[ 41.358817] ? kasan_check_read+0x11/0x20
[ 41.362948] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 41.368203] ? rcu_softirq_qs+0x20/0x20
[ 41.372164] genl_rcv_msg+0xc6/0x168
[ 41.375883] netlink_rcv_skb+0x172/0x440
[ 41.379928] ? genl_family_rcv_msg+0x11a0/0x11a0
[ 41.384663] ? netlink_ack+0xb80/0xb80
[ 41.388529] ? down_read+0x8d/0x120
[ 41.392138] genl_rcv+0x28/0x40
[ 41.395394] netlink_unicast+0x5a5/0x760
[ 41.399440] ? netlink_attachskb+0x9a0/0x9a0
[ 41.403830] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 41.409350] ? __sanitizer_cov_trace_cmp4+0x16/0x20
[ 41.414348] netlink_sendmsg+0xa18/0xfc0
[ 41.418396] ? netlink_unicast+0x760/0x760
[ 41.422623] ? aa_sock_msg_perm.isra.14+0xba/0x160
[ 41.427532] ? apparmor_socket_sendmsg+0x29/0x30
[ 41.432283] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 41.437809] ? security_socket_sendmsg+0x94/0xc0
[ 41.442551] ? netlink_unicast+0x760/0x760
[ 41.447134] sock_sendmsg+0xd5/0x120
[ 41.450834] ___sys_sendmsg+0x7fd/0x930
[ 41.454793] ? copy_msghdr_from_user+0x580/0x580
[ 41.459534] ? blkcg_maybe_throttle_current+0xa38/0x1080
[ 41.464967] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 41.470483] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 41.476008] ? __fget_light+0x2e9/0x430
[ 41.479962] ? fget_raw+0x20/0x20
[ 41.483397] ? task_work_run+0x1af/0x2a0
[ 41.487442] ? _raw_spin_unlock_irq+0x27/0x80
[ 41.491920] ? _raw_spin_unlock_irq+0x27/0x80
[ 41.496397] ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 41.500964] ? trace_hardirqs_on+0xbd/0x310
[ 41.505266] ? kasan_check_read+0x11/0x20
[ 41.509395] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 41.514910] ? sockfd_lookup_light+0xc5/0x160
[ 41.519388] __sys_sendmsg+0x11d/0x280
[ 41.523381] ? __ia32_sys_shutdown+0x80/0x80
[ 41.527774] ? do_syscall_64+0x6be/0x820
[ 41.531833] ? trace_hardirqs_on+0x310/0x310
[ 41.536230] ? do_syscall_64+0x9a/0x820
[ 41.540185] ? do_syscall_64+0x9a/0x820
[ 41.544153] ? trace_hardirqs_off_caller+0x310/0x310
[ 41.549238] __x64_sys_sendmsg+0x78/0xb0
[ 41.553276] do_syscall_64+0x1b9/0x820
[ 41.557142] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[ 41.562489] ? syscall_return_slowpath+0x5e0/0x5e0
[ 41.567506] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 41.572331] ? trace_hardirqs_on_caller+0x310/0x310
[ 41.577327] ? prepare_exit_to_usermode+0x3b0/0x3b0
[ 41.582325] ? prepare_exit_to_usermode+0x291/0x3b0
[ 41.587321] ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 41.592146] entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 41.597327] RIP: 0033:0x4446f9
[ 41.600501] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 1b d8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 41.619659] RSP: 002b:00007ffde52c0e58 EFLAGS: 00000213 ORIG_RAX: 000000000000002e
[ 41.627349] RAX: ffffffffffffffda RBX: 00000000004002e0 RCX: 00000000004446f9
[ 41.634597] RDX: 0000000000000000 RSI: 0000000020000700 RDI: 0000000000000003
[ 41.641847] RBP: 00000000006cf018 R08: 0000000000000000 R09: 00000000004002e0
[ 41.649098] R10: 0000000000000000 R11: 0000000000000213 R12: 00000000004023a0
[ 41.656350] R13: 0000000000402430 R14: 0000000000000000 R15: 0000000000000000
[ 41.664626] Kernel Offset: disabled
[ 41.668248] Rebooting in 86400 seconds..