Warning: Permanently added '10.128.0.126' (ECDSA) to the list of known hosts. executing program [ 53.622598] audit: type=1400 audit(1555502539.675:36): avc: denied { map } for pid=7759 comm="syz-executor372" path="/root/syz-executor372599776" dev="sda1" ino=16483 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 53.663095] page:ffffea0002999200 count:0 mapcount:-128 mapping:0000000000000000 index:0x0 [ 53.671619] flags: 0x1fffc0000000000() [ 53.675512] raw: 01fffc0000000000 ffffea000220fc08 ffffea0002994808 0000000000000000 [ 53.683429] raw: 0000000000000000 0000000000000003 00000000ffffff7f 0000000000000000 [ 53.691336] page dumped because: VM_BUG_ON_PAGE(page_ref_count(page) == 0) [ 53.698778] ------------[ cut here ]------------ [ 53.703519] kernel BUG at include/linux/mm.h:519! [ 53.708390] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 53.713771] CPU: 1 PID: 7759 Comm: syz-executor372 Not tainted 4.19.35 #3 [ 53.720675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.730035] RIP: 0010:skb_release_data+0x5ab/0x7c0 [ 53.734957] Code: f6 fe ff e9 b6 fb ff ff e8 b2 83 09 fc 4c 8d 63 ff e9 c8 fc ff ff e8 a4 83 09 fc 48 c7 c6 00 b2 dc 87 4c 89 e7 e8 b5 86 31 fc <0f> 0b e8 8e 83 09 fc 4d 8d 66 0e 48 b8 00 00 00 00 00 fc ff df 4c [ 53.753847] RSP: 0018:ffff8880a4a9f8a8 EFLAGS: 00010293 [ 53.759189] RAX: ffff88808cbd0640 RBX: ffffea0002999234 RCX: 0000000000000000 [ 53.766435] RDX: 0000000000000000 RSI: ffffffff81934797 RDI: ffffea0002999238 [ 53.773683] RBP: ffff8880a4a9f910 R08: 000000000000003e R09: ffff88808cbd0f80 [ 53.780933] R10: 0000000000000000 R11: 0000000000000000 R12: ffffea0002999200 [ 53.788182] R13: ffff8880932ee2f0 R14: 0000000000000000 R15: dffffc0000000000 [ 53.795431] FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 53.803639] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.809502] CR2: 0000000020014000 CR3: 000000000866d000 CR4: 00000000001406e0 [ 53.816750] Call Trace: [ 53.819341] skb_release_all+0x4d/0x60 [ 53.823210] __kfree_skb+0x16/0x30 [ 53.826742] tcp_write_queue_purge+0x253/0x7d0 [ 53.831309] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 53.836824] tcp_v4_destroy_sock+0xe7/0x7e0 [ 53.841133] inet_csk_destroy_sock+0x1a7/0x450 [ 53.845692] tcp_close+0xa5e/0x10c0 [ 53.849301] ? _raw_spin_unlock+0x50/0x50 [ 53.853430] tls_sk_proto_close+0x6b1/0xaa0 [ 53.857770] ? tcp_check_oom+0x560/0x560 [ 53.861816] ? tls_write_space+0x310/0x310 [ 53.866031] ? __local_bh_enable_ip+0x15a/0x270 [ 53.870681] ? lockdep_hardirqs_on+0x415/0x5d0 [ 53.875248] ? ip_mc_drop_socket+0x20c/0x270 [ 53.879637] ? trace_hardirqs_on+0x67/0x230 [ 53.884133] inet_release+0x105/0x1f0 [ 53.887981] __sock_release+0x1fe/0x2b0 [ 53.891961] sock_release+0x18/0x20 [ 53.895564] smc_release+0x2c7/0x810 [ 53.899261] __sock_release+0xd3/0x2b0 [ 53.903130] ? __sock_release+0x2b0/0x2b0 [ 53.907257] sock_close+0x1b/0x30 [ 53.910696] __fput+0x2df/0x8b0 [ 53.913964] ____fput+0x16/0x20 [ 53.917239] task_work_run+0x14a/0x1c0 [ 53.921110] do_exit+0x933/0x2fa0 [ 53.924540] ? mm_update_next_owner+0x660/0x660 [ 53.929203] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 53.934717] ? ksys_write+0x166/0x1f0 [ 53.938507] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 53.943243] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 53.947987] do_group_exit+0x135/0x370 [ 53.951872] __x64_sys_exit_group+0x44/0x50 [ 53.956171] do_syscall_64+0x103/0x610 [ 53.960041] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 53.965207] RIP: 0033:0x43eeb8 [ 53.968384] Code: Bad RIP value. [ 53.971729] RSP: 002b:00007ffc5471c228 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 53.979430] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000043eeb8 [ 53.986675] RDX: 0000000000000000 RSI: 000000000000003c RDI: 0000000000000000 [ 53.993922] RBP: 00000000004be6c8 R08: 00000000000000e7 R09: ffffffffffffffd0 [ 54.001193] R10: 0000000000000028 R11: 0000000000000246 R12: 0000000000000001 [ 54.008466] R13: 00000000006d0180 R14: 0000000000000000 R15: 0000000000000000 [ 54.015717] Modules linked in: [ 54.018939] ---[ end trace b8f1210f0d732120 ]--- [ 54.023706] RIP: 0010:skb_release_data+0x5ab/0x7c0 [ 54.028686] Code: f6 fe ff e9 b6 fb ff ff e8 b2 83 09 fc 4c 8d 63 ff e9 c8 fc ff ff e8 a4 83 09 fc 48 c7 c6 00 b2 dc 87 4c 89 e7 e8 b5 86 31 fc <0f> 0b e8 8e 83 09 fc 4d 8d 66 0e 48 b8 00 00 00 00 00 fc ff df 4c [ 54.047632] RSP: 0018:ffff8880a4a9f8a8 EFLAGS: 00010293 [ 54.053023] RAX: ffff88808cbd0640 RBX: ffffea0002999234 RCX: 0000000000000000 [ 54.060307] RDX: 0000000000000000 RSI: ffffffff81934797 RDI: ffffea0002999238 [ 54.067556] RBP: ffff8880a4a9f910 R08: 000000000000003e R09: ffff88808cbd0f80 [ 54.074835] R10: 0000000000000000 R11: 0000000000000000 R12: ffffea0002999200 [ 54.082116] R13: ffff8880932ee2f0 R14: 0000000000000000 R15: dffffc0000000000 [ 54.089399] FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 54.097617] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.103502] CR2: 000000000043ee8e CR3: 000000000866d000 CR4: 00000000001406e0 [ 54.110811] Kernel panic - not syncing: Fatal exception in interrupt [ 54.117964] Kernel Offset: disabled [ 54.121582] Rebooting in 86400 seconds..