Warning: Permanently added '10.128.0.95' (ECDSA) to the list of known hosts. executing program [ 46.377998] audit: type=1400 audit(1544469169.833:36): avc: denied { map } for pid=6317 comm="syz-executor038" path="/root/syz-executor038972928" dev="sda1" ino=16483 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 46.385300] Started in network mode [ 46.404458] audit: type=1400 audit(1544469169.843:37): avc: denied { create } for pid=6317 comm="syz-executor038" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 46.408790] Own node identity 00000000000000000000000000000001, cluster identity 4711 [ 46.432926] audit: type=1400 audit(1544469169.843:38): avc: denied { write } for pid=6317 comm="syz-executor038" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 46.441239] New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 46.464444] audit: type=1400 audit(1544469169.843:39): avc: denied { read } for pid=6317 comm="syz-executor038" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 46.472266] ================================================================== [ 46.502259] BUG: KASAN: use-after-free in kfree_skb+0xb7/0x580 [ 46.508214] Read of size 4 at addr ffff8881bf77bc24 by task syz-executor038/6317 [ 46.515729] [ 46.517345] CPU: 1 PID: 6317 Comm: syz-executor038 Not tainted 4.20.0-rc6+ #150 [ 46.524783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 46.534122] Call Trace: [ 46.536703] dump_stack+0x244/0x39d [ 46.540317] ? dump_stack_print_info.cold.1+0x20/0x20 [ 46.545492] ? printk+0xa7/0xcf [ 46.548759] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 46.553506] print_address_description.cold.7+0x9/0x1ff [ 46.558874] kasan_report.cold.8+0x242/0x309 [ 46.563270] ? kfree_skb+0xb7/0x580 [ 46.566884] check_memory_region+0x13e/0x1b0 [ 46.571279] kasan_check_read+0x11/0x20 [ 46.575245] kfree_skb+0xb7/0x580 [ 46.578684] ? __kfree_skb+0x20/0x20 [ 46.582386] ? skb_tstamp_tx+0x50/0x50 [ 46.586273] tipc_udp_send_msg+0x5a6/0x670 [ 46.590503] ? tipc_udp_xmit.isra.14+0xef0/0xef0 [ 46.595261] ? bearer_get+0x2f8/0x4e0 [ 46.599049] ? __tipc_nl_add_media+0xca0/0xca0 [ 46.603639] ? kasan_check_read+0x11/0x20 [ 46.607780] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 46.613047] ? rcu_softirq_qs+0x20/0x20 [ 46.617017] ? tipc_disc_remove_dest+0x120/0x120 [ 46.621764] ? tipc_enable_bearer+0x90d/0xf10 [ 46.626261] ? rcu_read_lock_sched_held+0x14f/0x180 [ 46.631279] tipc_bearer_xmit_skb+0x171/0x350 [ 46.635770] tipc_enable_bearer+0xc5e/0xf10 [ 46.640084] ? mutex_trylock+0x2b0/0x2b0 [ 46.644139] ? tipc_bearer_xmit_skb+0x350/0x350 [ 46.648803] ? nla_memcmp+0x90/0x90 [ 46.652431] ? lock_release+0xa00/0xa00 [ 46.656393] ? perf_trace_sched_process_exec+0x860/0x860 [ 46.661831] ? mark_held_locks+0x130/0x130 [ 46.666062] ? check_preemption_disabled+0x48/0x280 [ 46.671084] __tipc_nl_bearer_enable+0x37c/0x4a0 [ 46.675836] ? __tipc_nl_bearer_enable+0x37c/0x4a0 [ 46.680762] ? tipc_nl_bearer_disable+0x30/0x30 [ 46.685434] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 46.690964] ? __nla_parse+0x12c/0x3e0 [ 46.694848] tipc_nl_bearer_enable+0x22/0x30 [ 46.699305] genl_family_rcv_msg+0x8a7/0x11a0 [ 46.703796] ? genl_unregister_family+0x8a0/0x8a0 [ 46.708629] ? lock_downgrade+0x900/0x900 [ 46.712778] ? check_preemption_disabled+0x48/0x280 [ 46.717784] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 46.722702] ? kasan_check_read+0x11/0x20 [ 46.726839] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 46.732107] ? rcu_softirq_qs+0x20/0x20 [ 46.736082] genl_rcv_msg+0xc6/0x168 [ 46.739791] netlink_rcv_skb+0x172/0x440 [ 46.743845] ? genl_family_rcv_msg+0x11a0/0x11a0 [ 46.748590] ? netlink_ack+0xb80/0xb80 [ 46.752468] ? down_read+0x8d/0x120 [ 46.756088] genl_rcv+0x28/0x40 [ 46.759353] netlink_unicast+0x5a5/0x760 [ 46.763407] ? netlink_attachskb+0x9a0/0x9a0 [ 46.767820] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 46.773349] netlink_sendmsg+0xa18/0xfc0 [ 46.777403] ? netlink_unicast+0x760/0x760 [ 46.781651] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 46.787180] ? security_socket_sendmsg+0x94/0xc0 [ 46.791942] ? netlink_unicast+0x760/0x760 [ 46.796181] sock_sendmsg+0xd5/0x120 [ 46.799892] ___sys_sendmsg+0x7fd/0x930 [ 46.803858] ? copy_msghdr_from_user+0x580/0x580 [ 46.808609] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 46.814146] ? rcu_pm_notify+0xc0/0xc0 [ 46.818177] ? blkcg_maybe_throttle_current+0xa38/0x1080 [ 46.823637] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 46.829181] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 46.834726] ? __fget_light+0x2e9/0x430 [ 46.838702] ? fget_raw+0x20/0x20 [ 46.842146] ? task_work_run+0x1af/0x2a0 [ 46.846194] ? _raw_spin_unlock_irq+0x27/0x80 [ 46.850674] ? _raw_spin_unlock_irq+0x27/0x80 [ 46.855157] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 46.859727] ? trace_hardirqs_on+0xbd/0x310 [ 46.864054] ? kasan_check_read+0x11/0x20 [ 46.868199] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 46.873730] ? sockfd_lookup_light+0xc5/0x160 [ 46.878218] __sys_sendmsg+0x11d/0x280 [ 46.882106] ? __ia32_sys_shutdown+0x80/0x80 [ 46.886509] ? do_syscall_64+0x6be/0x820 [ 46.890580] ? trace_hardirqs_on+0x310/0x310 [ 46.894979] ? do_syscall_64+0x9a/0x820 [ 46.898962] ? do_syscall_64+0x9a/0x820 [ 46.902931] ? trace_hardirqs_off_caller+0x310/0x310 [ 46.908031] __x64_sys_sendmsg+0x78/0xb0 [ 46.912079] do_syscall_64+0x1b9/0x820 [ 46.915959] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 46.921307] ? syscall_return_slowpath+0x5e0/0x5e0 [ 46.926218] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 46.931056] ? trace_hardirqs_on_caller+0x310/0x310 [ 46.936056] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 46.941056] ? prepare_exit_to_usermode+0x291/0x3b0 [ 46.946058] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 46.950889] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 46.956065] RIP: 0033:0x4446f9 [ 46.959251] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 1b d8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 46.978136] RSP: 002b:00007ffdcaf71ef8 EFLAGS: 00000213 ORIG_RAX: 000000000000002e [ 46.985845] RAX: ffffffffffffffda RBX: 00000000004002e0 RCX: 00000000004446f9 [ 46.993097] RDX: 0000000000000000 RSI: 0000000020000700 RDI: 0000000000000003 [ 47.000349] RBP: 00000000006cf018 R08: 0000000000000000 R09: 00000000004002e0 [ 47.007603] R10: 0000000000000000 R11: 0000000000000213 R12: 00000000004023a0 [ 47.014855] R13: 0000000000402430 R14: 0000000000000000 R15: 0000000000000000 [ 47.022115] [ 47.023726] Allocated by task 6317: [ 47.027338] save_stack+0x43/0xd0 [ 47.030791] kasan_kmalloc+0xc7/0xe0 [ 47.034489] kasan_slab_alloc+0x12/0x20 [ 47.038450] kmem_cache_alloc_node+0x144/0x730 [ 47.043019] __alloc_skb+0x119/0x770 [ 47.046729] __pskb_copy_fclone+0x16b/0xeb0 [ 47.051039] tipc_udp_send_msg+0x44e/0x670 [ 47.055263] tipc_bearer_xmit_skb+0x171/0x350 [ 47.059743] tipc_enable_bearer+0xc5e/0xf10 [ 47.064048] __tipc_nl_bearer_enable+0x37c/0x4a0 [ 47.068961] tipc_nl_bearer_enable+0x22/0x30 [ 47.073366] genl_family_rcv_msg+0x8a7/0x11a0 [ 47.077847] genl_rcv_msg+0xc6/0x168 [ 47.081543] netlink_rcv_skb+0x172/0x440 [ 47.085587] genl_rcv+0x28/0x40 [ 47.088850] netlink_unicast+0x5a5/0x760 [ 47.092897] netlink_sendmsg+0xa18/0xfc0 [ 47.096941] sock_sendmsg+0xd5/0x120 [ 47.100636] ___sys_sendmsg+0x7fd/0x930 [ 47.104592] __sys_sendmsg+0x11d/0x280 [ 47.108463] __x64_sys_sendmsg+0x78/0xb0 [ 47.112514] do_syscall_64+0x1b9/0x820 [ 47.116392] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 47.121566] [ 47.123175] Freed by task 6317: [ 47.126440] save_stack+0x43/0xd0 [ 47.129875] __kasan_slab_free+0x102/0x150 [ 47.134091] kasan_slab_free+0xe/0x10 [ 47.137874] kmem_cache_free+0x83/0x290 [ 47.141844] kfree_skbmem+0x154/0x230 [ 47.145625] kfree_skb+0x1c3/0x580 [ 47.149149] tipc_udp_xmit.isra.14+0x420/0xef0 [ 47.153717] tipc_udp_send_msg+0x398/0x670 [ 47.157932] tipc_bearer_xmit_skb+0x171/0x350 [ 47.162410] tipc_enable_bearer+0xc5e/0xf10 [ 47.166714] __tipc_nl_bearer_enable+0x37c/0x4a0 [ 47.171465] tipc_nl_bearer_enable+0x22/0x30 [ 47.175855] genl_family_rcv_msg+0x8a7/0x11a0 [ 47.180331] genl_rcv_msg+0xc6/0x168 [ 47.184024] netlink_rcv_skb+0x172/0x440 [ 47.188069] genl_rcv+0x28/0x40 [ 47.191332] netlink_unicast+0x5a5/0x760 [ 47.195374] netlink_sendmsg+0xa18/0xfc0 [ 47.199416] sock_sendmsg+0xd5/0x120 [ 47.203113] ___sys_sendmsg+0x7fd/0x930 [ 47.207068] __sys_sendmsg+0x11d/0x280 [ 47.210954] __x64_sys_sendmsg+0x78/0xb0 [ 47.215004] do_syscall_64+0x1b9/0x820 [ 47.218877] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 47.224041] [ 47.225652] The buggy address belongs to the object at ffff8881bf77bb40 [ 47.225652] which belongs to the cache skbuff_head_cache of size 232 [ 47.238813] The buggy address is located 228 bytes inside of [ 47.238813] 232-byte region [ffff8881bf77bb40, ffff8881bf77bc28) [ 47.250664] The buggy address belongs to the page: [ 47.255575] page:ffffea0006fddec0 count:1 mapcount:0 mapping:ffff8881d9405c40 index:0x0 [ 47.263700] flags: 0x2fffc0000000200(slab) [ 47.267935] raw: 02fffc0000000200 ffffea0006fa14c8 ffff8881d9408748 ffff8881d9405c40 [ 47.275801] raw: 0000000000000000 ffff8881bf77b000 000000010000000c 0000000000000000 [ 47.283660] page dumped because: kasan: bad access detected [ 47.289344] [ 47.290952] Memory state around the buggy address: [ 47.295864] ffff8881bf77bb00: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 47.303203] ffff8881bf77bb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 47.310547] >ffff8881bf77bc00: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc [ 47.317883] ^ [ 47.322274] ffff8881bf77bc80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 47.329611] ffff8881bf77bd00: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc [ 47.336950] ================================================================== [ 47.344289] Disabling lock debugging due to kernel taint [ 47.349930] ================================================================== [ 47.357320] BUG: KASAN: double-free or invalid-free in skb_free_head+0x99/0xc0 [ 47.364658] [ 47.366274] CPU: 1 PID: 6317 Comm: syz-executor038 Tainted: G B 4.20.0-rc6+ #150 [ 47.375086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 47.384422] Call Trace: [ 47.386984] [ 47.389126] dump_stack+0x244/0x39d [ 47.392738] ? dump_stack_print_info.cold.1+0x20/0x20 [ 47.397910] ? printk+0xa7/0xcf [ 47.401170] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 47.405910] ? debug_check_no_obj_freed+0x305/0x58d [ 47.410911] print_address_description.cold.7+0x9/0x1ff [ 47.416271] ? skb_free_head+0x99/0xc0 [ 47.420143] kasan_report_invalid_free+0x64/0xa0 [ 47.424907] ? skb_free_head+0x99/0xc0 [ 47.428777] __kasan_slab_free+0x13a/0x150 [ 47.433018] ? skb_free_head+0x99/0xc0 [ 47.436905] kasan_slab_free+0xe/0x10 [ 47.440686] kfree+0xcf/0x230 [ 47.443775] skb_free_head+0x99/0xc0 [ 47.447483] skb_release_data+0x70c/0x9a0 [ 47.451625] ? __copy_skb_header+0x350/0x6b0 [ 47.456019] ? skb_tx_error+0x410/0x410 [ 47.459978] ? tipc_udp_xmit.isra.14+0x425/0xef0 [ 47.464718] ? kasan_end_report+0x32/0x4f [ 47.468849] ? kasan_report.cold.8+0x76/0x309 [ 47.473330] skb_release_all+0x4a/0x60 [ 47.477199] kfree_skb+0x1bb/0x580 [ 47.480721] ? tipc_udp_send_msg+0x5a6/0x670 [ 47.485109] ? __kfree_skb+0x20/0x20 [ 47.488808] ? skb_tstamp_tx+0x50/0x50 [ 47.492683] tipc_udp_send_msg+0x5a6/0x670 [ 47.496903] ? tipc_udp_xmit.isra.14+0xef0/0xef0 [ 47.501643] ? bearer_get+0x2f8/0x4e0 [ 47.505425] ? __tipc_nl_add_media+0xca0/0xca0 [ 47.509990] ? skb_clone+0x21a/0x500 [ 47.513707] ? _raw_spin_unlock_bh+0x30/0x40 [ 47.518102] ? trace_hardirqs_off_caller+0x310/0x310 [ 47.523187] ? do_raw_spin_trylock+0x270/0x270 [ 47.527754] tipc_bearer_xmit_skb+0x171/0x350 [ 47.532240] tipc_disc_timeout+0xb2b/0xfc0 [ 47.536456] ? migrate_swap_stop+0x8a0/0x8a0 [ 47.540850] ? tipc_disc_msg_xmit.isra.19+0x180/0x180 [ 47.546024] ? lock_acquire+0x1ed/0x520 [ 47.549992] ? call_timer_fn+0x1db/0x920 [ 47.554055] ? lock_downgrade+0x900/0x900 [ 47.558184] ? kasan_check_read+0x11/0x20 [ 47.562317] ? lock_release+0xa00/0xa00 [ 47.566275] ? tcp_retransmit_timer+0x33f0/0x33f0 [ 47.571105] call_timer_fn+0x272/0x920 [ 47.574975] ? tipc_disc_msg_xmit.isra.19+0x180/0x180 [ 47.580162] ? process_timeout+0x40/0x40 [ 47.584206] ? trace_hardirqs_off+0xb8/0x310 [ 47.588618] ? kasan_check_read+0x11/0x20 [ 47.592750] ? do_raw_spin_unlock+0xa7/0x330 [ 47.597148] ? trace_hardirqs_on+0x310/0x310 [ 47.601539] ? __run_timers+0x7da/0xc70 [ 47.605496] ? lock_downgrade+0x900/0x900 [ 47.609631] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 47.614717] ? trace_hardirqs_on+0xbd/0x310 [ 47.619038] ? kasan_check_read+0x11/0x20 [ 47.623170] ? __run_timers+0x7da/0xc70 [ 47.627136] ? trace_hardirqs_off_caller+0x310/0x310 [ 47.632225] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 47.637757] ? tipc_disc_msg_xmit.isra.19+0x180/0x180 [ 47.642928] __run_timers+0x7e5/0xc70 [ 47.646710] ? timer_fixup_init+0x70/0x70 [ 47.650842] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 47.655843] ? timerqueue_add+0x207/0x2b0 [ 47.659974] ? enqueue_hrtimer+0x1a5/0x560 [ 47.664196] ? hrtimer_update_softirq_timer+0xa0/0xa0 [ 47.669368] ? rwlock_bug.part.2+0x90/0x90 [ 47.673587] ? hrtimer_forward+0x1e5/0x2a0 [ 47.677812] ? pvclock_read_flags+0x160/0x160 [ 47.682290] ? lock_downgrade+0x900/0x900 [ 47.686421] ? trace_hardirqs_on+0xbd/0x310 [ 47.690727] ? kvm_sched_clock_read+0x9/0x20 [ 47.695115] ? irq_exit+0x17f/0x1c0 [ 47.698728] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 47.704255] ? check_preemption_disabled+0x48/0x280 [ 47.709256] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 47.714774] run_timer_softirq+0x52/0xb0 [ 47.718841] ? __this_cpu_preempt_check+0x1c/0x20 [ 47.723683] __do_softirq+0x308/0xb7e [ 47.727469] ? ktime_get_raw_ts64+0x4d0/0x4d0 [ 47.731946] ? lock_downgrade+0x900/0x900 [ 47.736076] ? __irqentry_text_end+0x1f9658/0x1f9658 [ 47.741163] ? pvclock_read_flags+0x160/0x160 [ 47.745645] ? lapic_next_event+0x5a/0x90 [ 47.749778] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 47.755299] ? clockevents_program_event+0x140/0x370 [ 47.760385] ? kvm_clock_read+0x18/0x30 [ 47.764341] ? kvm_sched_clock_read+0x9/0x20 [ 47.768734] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 47.774271] ? check_preemption_disabled+0x48/0x280 [ 47.779273] irq_exit+0x17f/0x1c0 [ 47.782708] smp_apic_timer_interrupt+0x1cb/0x760 [ 47.787534] ? smp_reschedule_interrupt+0x109/0x650 [ 47.792535] ? smp_call_function_single_interrupt+0x650/0x650 [ 47.798402] ? interrupt_entry+0xb5/0xc0 [ 47.802448] ? trace_hardirqs_off_caller+0xbb/0x310 [ 47.807447] ? trace_hardirqs_off_caller+0xbb/0x310 [ 47.812446] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 47.817270] ? trace_hardirqs_on_caller+0x310/0x310 [ 47.822282] ? trace_hardirqs_on_caller+0x310/0x310 [ 47.827285] ? task_prio+0x50/0x50 [ 47.830808] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 47.836326] ? check_preemption_disabled+0x48/0x280 [ 47.841325] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 47.846148] apic_timer_interrupt+0xf/0x20 [ 47.850361] [ 47.852581] RIP: 0010:_raw_spin_unlock_irqrestore+0xaf/0xd0 [ 47.858277] Code: f0 00 52 89 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 28 48 83 3d 18 ef 76 01 00 74 15 48 89 df 57 9d <0f> 1f 44 00 00 eb ad e8 1c 6b 25 f9 eb bb 0f 0b 0f 0b e8 9a d7 e7 [ 47.877162] RSP: 0018:ffff8881c9c5ede8 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 47.884866] RAX: dffffc0000000000 RBX: 0000000000000286 RCX: ffffffff8185acea [ 47.892115] RDX: 1ffffffff12a401e RSI: ffffffff8185ad04 RDI: 0000000000000286 [ 47.899367] RBP: ffff8881c9c5edf8 R08: ffff8881a6ff4400 R09: fffffbfff12c7248 [ 47.906618] R10: fffffbfff12c7248 R11: ffffffff89639243 R12: ffffffff89639240 [ 47.913871] R13: 0000000000000000 R14: ffff8881bf77bc24 R15: ffff8881bf77bc24 [ 47.921135] ? trace_hardirqs_on+0x9a/0x310 [ 47.925440] ? trace_hardirqs_on+0xb4/0x310 [ 47.929754] kasan_end_report+0x32/0x4f [ 47.933710] kasan_report.cold.8+0x76/0x309 [ 47.938016] ? kfree_skb+0xb7/0x580 [ 47.941625] check_memory_region+0x13e/0x1b0 [ 47.946020] kasan_check_read+0x11/0x20 [ 47.950156] kfree_skb+0xb7/0x580 [ 47.953879] ? __kfree_skb+0x20/0x20 [ 47.957576] ? skb_tstamp_tx+0x50/0x50 [ 47.961468] tipc_udp_send_msg+0x5a6/0x670 [ 47.965698] ? tipc_udp_xmit.isra.14+0xef0/0xef0 [ 47.970439] ? bearer_get+0x2f8/0x4e0 [ 47.974240] ? __tipc_nl_add_media+0xca0/0xca0 [ 47.978819] ? kasan_check_read+0x11/0x20 [ 47.982977] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 47.988258] ? rcu_softirq_qs+0x20/0x20 [ 47.992215] ? tipc_disc_remove_dest+0x120/0x120 [ 47.996988] ? tipc_enable_bearer+0x90d/0xf10 [ 48.001471] ? rcu_read_lock_sched_held+0x14f/0x180 [ 48.006470] tipc_bearer_xmit_skb+0x171/0x350 [ 48.010950] tipc_enable_bearer+0xc5e/0xf10 [ 48.015256] ? mutex_trylock+0x2b0/0x2b0 [ 48.019301] ? tipc_bearer_xmit_skb+0x350/0x350 [ 48.023952] ? nla_memcmp+0x90/0x90 [ 48.027563] ? lock_release+0xa00/0xa00 [ 48.031523] ? perf_trace_sched_process_exec+0x860/0x860 [ 48.036951] ? mark_held_locks+0x130/0x130 [ 48.041172] ? check_preemption_disabled+0x48/0x280 [ 48.046179] __tipc_nl_bearer_enable+0x37c/0x4a0 [ 48.050918] ? __tipc_nl_bearer_enable+0x37c/0x4a0 [ 48.055830] ? tipc_nl_bearer_disable+0x30/0x30 [ 48.060494] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 48.066021] ? __nla_parse+0x12c/0x3e0 [ 48.069893] tipc_nl_bearer_enable+0x22/0x30 [ 48.074318] genl_family_rcv_msg+0x8a7/0x11a0 [ 48.078813] ? genl_unregister_family+0x8a0/0x8a0 [ 48.083634] ? lock_downgrade+0x900/0x900 [ 48.087766] ? check_preemption_disabled+0x48/0x280 [ 48.092766] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 48.097675] ? kasan_check_read+0x11/0x20 [ 48.101806] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 48.107064] ? rcu_softirq_qs+0x20/0x20 [ 48.111031] genl_rcv_msg+0xc6/0x168 [ 48.114727] netlink_rcv_skb+0x172/0x440 [ 48.118773] ? genl_family_rcv_msg+0x11a0/0x11a0 [ 48.123510] ? netlink_ack+0xb80/0xb80 [ 48.127379] ? down_read+0x8d/0x120 [ 48.131003] genl_rcv+0x28/0x40 [ 48.134265] netlink_unicast+0x5a5/0x760 [ 48.138312] ? netlink_attachskb+0x9a0/0x9a0 [ 48.142708] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 48.148226] netlink_sendmsg+0xa18/0xfc0 [ 48.152279] ? netlink_unicast+0x760/0x760 [ 48.156530] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 48.162053] ? security_socket_sendmsg+0x94/0xc0 [ 48.166793] ? netlink_unicast+0x760/0x760 [ 48.171018] sock_sendmsg+0xd5/0x120 [ 48.174717] ___sys_sendmsg+0x7fd/0x930 [ 48.178675] ? copy_msghdr_from_user+0x580/0x580 [ 48.183414] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 48.188936] ? rcu_pm_notify+0xc0/0xc0 [ 48.192808] ? blkcg_maybe_throttle_current+0xa38/0x1080 [ 48.198248] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 48.203766] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 48.209289] ? __fget_light+0x2e9/0x430 [ 48.213248] ? fget_raw+0x20/0x20 [ 48.216686] ? task_work_run+0x1af/0x2a0 [ 48.220734] ? _raw_spin_unlock_irq+0x27/0x80 [ 48.225208] ? _raw_spin_unlock_irq+0x27/0x80 [ 48.229721] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 48.234288] ? trace_hardirqs_on+0xbd/0x310 [ 48.238593] ? kasan_check_read+0x11/0x20 [ 48.242724] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 48.248249] ? sockfd_lookup_light+0xc5/0x160 [ 48.252732] __sys_sendmsg+0x11d/0x280 [ 48.256603] ? __ia32_sys_shutdown+0x80/0x80 [ 48.260997] ? do_syscall_64+0x6be/0x820 [ 48.265045] ? trace_hardirqs_on+0x310/0x310 [ 48.269439] ? do_syscall_64+0x9a/0x820 [ 48.273397] ? do_syscall_64+0x9a/0x820 [ 48.277357] ? trace_hardirqs_off_caller+0x310/0x310 [ 48.282447] __x64_sys_sendmsg+0x78/0xb0 [ 48.286494] do_syscall_64+0x1b9/0x820 [ 48.290362] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 48.295705] ? syscall_return_slowpath+0x5e0/0x5e0 [ 48.300615] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 48.305438] ? trace_hardirqs_on_caller+0x310/0x310 [ 48.310437] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 48.315453] ? prepare_exit_to_usermode+0x291/0x3b0 [ 48.320454] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 48.325282] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 48.330454] RIP: 0033:0x4446f9 [ 48.333645] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 1b d8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 48.352543] RSP: 002b:00007ffdcaf71ef8 EFLAGS: 00000213 ORIG_RAX: 000000000000002e [ 48.360254] RAX: ffffffffffffffda RBX: 00000000004002e0 RCX: 00000000004446f9 [ 48.367507] RDX: 0000000000000000 RSI: 0000000020000700 RDI: 0000000000000003 [ 48.374757] RBP: 00000000006cf018 R08: 0000000000000000 R09: 00000000004002e0 [ 48.382011] R10: 0000000000000000 R11: 0000000000000213 R12: 00000000004023a0 [ 48.389260] R13: 0000000000402430 R14: 0000000000000000 R15: 0000000000000000 [ 48.396515] [ 48.398126] Allocated by task 6317: [ 48.401739] save_stack+0x43/0xd0 [ 48.405173] kasan_kmalloc+0xc7/0xe0 [ 48.408872] __kmalloc_node_track_caller+0x50/0x70 [ 48.413786] __kmalloc_reserve.isra.40+0x41/0xe0 [ 48.418524] __alloc_skb+0x155/0x770 [ 48.422221] __pskb_copy_fclone+0x16b/0xeb0 [ 48.426533] tipc_udp_send_msg+0x44e/0x670 [ 48.430748] tipc_bearer_xmit_skb+0x171/0x350 [ 48.435222] tipc_disc_timeout+0xb2b/0xfc0 [ 48.439446] call_timer_fn+0x272/0x920 [ 48.443315] __run_timers+0x7e5/0xc70 [ 48.447097] run_timer_softirq+0x52/0xb0 [ 48.451165] __do_softirq+0x308/0xb7e [ 48.454943] [ 48.456562] Freed by task 6317: [ 48.459824] save_stack+0x43/0xd0 [ 48.463260] __kasan_slab_free+0x102/0x150 [ 48.467474] kasan_slab_free+0xe/0x10 [ 48.471260] kfree+0xcf/0x230 [ 48.474345] skb_free_head+0x99/0xc0 [ 48.478038] skb_release_data+0x70c/0x9a0 [ 48.482193] skb_release_all+0x4a/0x60 [ 48.486060] kfree_skb+0x1bb/0x580 [ 48.489582] tipc_udp_xmit.isra.14+0x420/0xef0 [ 48.494144] tipc_udp_send_msg+0x398/0x670 [ 48.498381] tipc_bearer_xmit_skb+0x171/0x350 [ 48.502855] tipc_disc_timeout+0xb2b/0xfc0 [ 48.507069] call_timer_fn+0x272/0x920 [ 48.510940] __run_timers+0x7e5/0xc70 [ 48.514718] run_timer_softirq+0x52/0xb0 [ 48.518761] __do_softirq+0x308/0xb7e [ 48.522554] [ 48.524262] The buggy address belongs to the object at ffff8881c2b4d200 [ 48.524262] which belongs to the cache kmalloc-1k of size 1024 [ 48.536914] The buggy address is located 0 bytes inside of [ 48.536914] 1024-byte region [ffff8881c2b4d200, ffff8881c2b4d600) [ 48.548693] The buggy address belongs to the page: [ 48.553615] page:ffffea00070ad300 count:1 mapcount:0 mapping:ffff8881da800ac0 index:0x0 compound_mapcount: 0 [ 48.563560] flags: 0x2fffc0000010200(slab|head) [ 48.568212] raw: 02fffc0000010200 ffffea0007082408 ffff8881da801848 ffff8881da800ac0 [ 48.576078] raw: 0000000000000000 ffff8881c2b4c000 0000000100000007 0000000000000000 [ 48.583935] page dumped because: kasan: bad access detected [ 48.589619] [ 48.591244] Memory state around the buggy address: [ 48.596152] ffff8881c2b4d100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 48.603492] ffff8881c2b4d180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 48.610832] >ffff8881c2b4d200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 48.618171] ^ [ 48.621520] ffff8881c2b4d280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 48.628901] ffff8881c2b4d300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 48.636240] ================================================================== [ 48.643577] Kernel panic - not syncing: panic_on_warn set ... [ 48.649444] CPU: 1 PID: 6317 Comm: syz-executor038 Tainted: G B 4.20.0-rc6+ #150 [ 48.658256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 48.667587] Call Trace: [ 48.670150] [ 48.672290] dump_stack+0x244/0x39d [ 48.675917] ? dump_stack_print_info.cold.1+0x20/0x20 [ 48.681092] ? skb_free_head+0x30/0xc0 [ 48.684964] panic+0x2ad/0x55c [ 48.688138] ? add_taint.cold.5+0x16/0x16 [ 48.692269] ? print_shadow_for_address+0xb6/0x116 [ 48.697184] ? trace_hardirqs_off+0xaf/0x310 [ 48.701572] ? skb_free_head+0x99/0xc0 [ 48.705458] kasan_end_report+0x47/0x4f [ 48.709418] kasan_report_invalid_free+0x81/0xa0 [ 48.714155] ? skb_free_head+0x99/0xc0 [ 48.718029] __kasan_slab_free+0x13a/0x150 [ 48.722254] ? skb_free_head+0x99/0xc0 [ 48.726127] kasan_slab_free+0xe/0x10 [ 48.729914] kfree+0xcf/0x230 [ 48.733005] skb_free_head+0x99/0xc0 [ 48.736703] skb_release_data+0x70c/0x9a0 [ 48.740840] ? __copy_skb_header+0x350/0x6b0 [ 48.745242] ? skb_tx_error+0x410/0x410 [ 48.749205] ? tipc_udp_xmit.isra.14+0x425/0xef0 [ 48.753960] ? kasan_end_report+0x32/0x4f [ 48.758089] ? kasan_report.cold.8+0x76/0x309 [ 48.762567] skb_release_all+0x4a/0x60 [ 48.766443] kfree_skb+0x1bb/0x580 [ 48.769969] ? tipc_udp_send_msg+0x5a6/0x670 [ 48.774362] ? __kfree_skb+0x20/0x20 [ 48.778065] ? skb_tstamp_tx+0x50/0x50 [ 48.781940] tipc_udp_send_msg+0x5a6/0x670 [ 48.786161] ? tipc_udp_xmit.isra.14+0xef0/0xef0 [ 48.790900] ? bearer_get+0x2f8/0x4e0 [ 48.794684] ? __tipc_nl_add_media+0xca0/0xca0 [ 48.799255] ? skb_clone+0x21a/0x500 [ 48.802953] ? _raw_spin_unlock_bh+0x30/0x40 [ 48.807346] ? trace_hardirqs_off_caller+0x310/0x310 [ 48.812432] ? do_raw_spin_trylock+0x270/0x270 [ 48.817010] tipc_bearer_xmit_skb+0x171/0x350 [ 48.821659] tipc_disc_timeout+0xb2b/0xfc0 [ 48.825878] ? migrate_swap_stop+0x8a0/0x8a0 [ 48.830273] ? tipc_disc_msg_xmit.isra.19+0x180/0x180 [ 48.835447] ? lock_acquire+0x1ed/0x520 [ 48.839407] ? call_timer_fn+0x1db/0x920 [ 48.843449] ? lock_downgrade+0x900/0x900 [ 48.847580] ? kasan_check_read+0x11/0x20 [ 48.851712] ? lock_release+0xa00/0xa00 [ 48.855670] ? tcp_retransmit_timer+0x33f0/0x33f0 [ 48.860499] call_timer_fn+0x272/0x920 [ 48.864373] ? tipc_disc_msg_xmit.isra.19+0x180/0x180 [ 48.869595] ? process_timeout+0x40/0x40 [ 48.873639] ? trace_hardirqs_off+0xb8/0x310 [ 48.878031] ? kasan_check_read+0x11/0x20 [ 48.882163] ? do_raw_spin_unlock+0xa7/0x330 [ 48.886568] ? trace_hardirqs_on+0x310/0x310 [ 48.890958] ? __run_timers+0x7da/0xc70 [ 48.894919] ? lock_downgrade+0x900/0x900 [ 48.899051] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 48.904138] ? trace_hardirqs_on+0xbd/0x310 [ 48.908456] ? kasan_check_read+0x11/0x20 [ 48.912590] ? __run_timers+0x7da/0xc70 [ 48.916545] ? trace_hardirqs_off_caller+0x310/0x310 [ 48.921632] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 48.927158] ? tipc_disc_msg_xmit.isra.19+0x180/0x180 [ 48.932327] __run_timers+0x7e5/0xc70 [ 48.936113] ? timer_fixup_init+0x70/0x70 [ 48.940259] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 48.945259] ? timerqueue_add+0x207/0x2b0 [ 48.949395] ? enqueue_hrtimer+0x1a5/0x560 [ 48.953611] ? hrtimer_update_softirq_timer+0xa0/0xa0 [ 48.958781] ? rwlock_bug.part.2+0x90/0x90 [ 48.963005] ? hrtimer_forward+0x1e5/0x2a0 [ 48.967240] ? pvclock_read_flags+0x160/0x160 [ 48.971720] ? lock_downgrade+0x900/0x900 [ 48.975850] ? trace_hardirqs_on+0xbd/0x310 [ 48.980168] ? kvm_sched_clock_read+0x9/0x20 [ 48.984556] ? irq_exit+0x17f/0x1c0 [ 48.988166] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 48.993703] ? check_preemption_disabled+0x48/0x280 [ 48.998703] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 49.004224] run_timer_softirq+0x52/0xb0 [ 49.008290] ? __this_cpu_preempt_check+0x1c/0x20 [ 49.013114] __do_softirq+0x308/0xb7e [ 49.016896] ? ktime_get_raw_ts64+0x4d0/0x4d0 [ 49.021372] ? lock_downgrade+0x900/0x900 [ 49.025506] ? __irqentry_text_end+0x1f9658/0x1f9658 [ 49.030594] ? pvclock_read_flags+0x160/0x160 [ 49.035089] ? lapic_next_event+0x5a/0x90 [ 49.039220] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 49.044761] ? clockevents_program_event+0x140/0x370 [ 49.049864] ? kvm_clock_read+0x18/0x30 [ 49.053849] ? kvm_sched_clock_read+0x9/0x20 [ 49.058246] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 49.063811] ? check_preemption_disabled+0x48/0x280 [ 49.068813] irq_exit+0x17f/0x1c0 [ 49.072253] smp_apic_timer_interrupt+0x1cb/0x760 [ 49.077077] ? smp_reschedule_interrupt+0x109/0x650 [ 49.082080] ? smp_call_function_single_interrupt+0x650/0x650 [ 49.087948] ? interrupt_entry+0xb5/0xc0 [ 49.091996] ? trace_hardirqs_off_caller+0xbb/0x310 [ 49.097037] ? trace_hardirqs_off_caller+0xbb/0x310 [ 49.102048] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 49.106884] ? trace_hardirqs_on_caller+0x310/0x310 [ 49.111882] ? trace_hardirqs_on_caller+0x310/0x310 [ 49.116879] ? task_prio+0x50/0x50 [ 49.120404] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 49.125923] ? check_preemption_disabled+0x48/0x280 [ 49.130927] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 49.135754] apic_timer_interrupt+0xf/0x20 [ 49.139964] [ 49.142186] RIP: 0010:_raw_spin_unlock_irqrestore+0xaf/0xd0 [ 49.147880] Code: f0 00 52 89 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 28 48 83 3d 18 ef 76 01 00 74 15 48 89 df 57 9d <0f> 1f 44 00 00 eb ad e8 1c 6b 25 f9 eb bb 0f 0b 0f 0b e8 9a d7 e7 [ 49.166766] RSP: 0018:ffff8881c9c5ede8 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 49.174457] RAX: dffffc0000000000 RBX: 0000000000000286 RCX: ffffffff8185acea [ 49.181707] RDX: 1ffffffff12a401e RSI: ffffffff8185ad04 RDI: 0000000000000286 [ 49.188959] RBP: ffff8881c9c5edf8 R08: ffff8881a6ff4400 R09: fffffbfff12c7248 [ 49.196209] R10: fffffbfff12c7248 R11: ffffffff89639243 R12: ffffffff89639240 [ 49.203469] R13: 0000000000000000 R14: ffff8881bf77bc24 R15: ffff8881bf77bc24 [ 49.210726] ? trace_hardirqs_on+0x9a/0x310 [ 49.215031] ? trace_hardirqs_on+0xb4/0x310 [ 49.219336] kasan_end_report+0x32/0x4f [ 49.223294] kasan_report.cold.8+0x76/0x309 [ 49.227601] ? kfree_skb+0xb7/0x580 [ 49.231212] check_memory_region+0x13e/0x1b0 [ 49.235612] kasan_check_read+0x11/0x20 [ 49.239606] kfree_skb+0xb7/0x580 [ 49.243066] ? __kfree_skb+0x20/0x20 [ 49.246759] ? skb_tstamp_tx+0x50/0x50 [ 49.250636] tipc_udp_send_msg+0x5a6/0x670 [ 49.254858] ? tipc_udp_xmit.isra.14+0xef0/0xef0 [ 49.259595] ? bearer_get+0x2f8/0x4e0 [ 49.263394] ? __tipc_nl_add_media+0xca0/0xca0 [ 49.267970] ? kasan_check_read+0x11/0x20 [ 49.272109] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 49.277369] ? rcu_softirq_qs+0x20/0x20 [ 49.281327] ? tipc_disc_remove_dest+0x120/0x120 [ 49.286066] ? tipc_enable_bearer+0x90d/0xf10 [ 49.290543] ? rcu_read_lock_sched_held+0x14f/0x180 [ 49.295544] tipc_bearer_xmit_skb+0x171/0x350 [ 49.300024] tipc_enable_bearer+0xc5e/0xf10 [ 49.304332] ? mutex_trylock+0x2b0/0x2b0 [ 49.308382] ? tipc_bearer_xmit_skb+0x350/0x350 [ 49.313041] ? nla_memcmp+0x90/0x90 [ 49.316652] ? lock_release+0xa00/0xa00 [ 49.320616] ? perf_trace_sched_process_exec+0x860/0x860 [ 49.326050] ? mark_held_locks+0x130/0x130 [ 49.330268] ? check_preemption_disabled+0x48/0x280 [ 49.335276] __tipc_nl_bearer_enable+0x37c/0x4a0 [ 49.340017] ? __tipc_nl_bearer_enable+0x37c/0x4a0 [ 49.344945] ? tipc_nl_bearer_disable+0x30/0x30 [ 49.349611] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 49.355130] ? __nla_parse+0x12c/0x3e0 [ 49.359010] tipc_nl_bearer_enable+0x22/0x30 [ 49.363404] genl_family_rcv_msg+0x8a7/0x11a0 [ 49.367883] ? genl_unregister_family+0x8a0/0x8a0 [ 49.372722] ? lock_downgrade+0x900/0x900 [ 49.376853] ? check_preemption_disabled+0x48/0x280 [ 49.381851] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 49.386762] ? kasan_check_read+0x11/0x20 [ 49.390893] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 49.396153] ? rcu_softirq_qs+0x20/0x20 [ 49.400123] genl_rcv_msg+0xc6/0x168 [ 49.403849] netlink_rcv_skb+0x172/0x440 [ 49.407912] ? genl_family_rcv_msg+0x11a0/0x11a0 [ 49.412650] ? netlink_ack+0xb80/0xb80 [ 49.416526] ? down_read+0x8d/0x120 [ 49.420170] genl_rcv+0x28/0x40 [ 49.423445] netlink_unicast+0x5a5/0x760 [ 49.427494] ? netlink_attachskb+0x9a0/0x9a0 [ 49.431904] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 49.437428] netlink_sendmsg+0xa18/0xfc0 [ 49.441476] ? netlink_unicast+0x760/0x760 [ 49.445695] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 49.451218] ? security_socket_sendmsg+0x94/0xc0 [ 49.455962] ? netlink_unicast+0x760/0x760 [ 49.460180] sock_sendmsg+0xd5/0x120 [ 49.463875] ___sys_sendmsg+0x7fd/0x930 [ 49.467863] ? copy_msghdr_from_user+0x580/0x580 [ 49.472607] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 49.478129] ? rcu_pm_notify+0xc0/0xc0 [ 49.482021] ? blkcg_maybe_throttle_current+0xa38/0x1080 [ 49.487456] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 49.492992] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 49.498550] ? __fget_light+0x2e9/0x430 [ 49.502509] ? fget_raw+0x20/0x20 [ 49.505944] ? task_work_run+0x1af/0x2a0 [ 49.509989] ? _raw_spin_unlock_irq+0x27/0x80 [ 49.514471] ? _raw_spin_unlock_irq+0x27/0x80 [ 49.518966] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 49.523530] ? trace_hardirqs_on+0xbd/0x310 [ 49.527837] ? kasan_check_read+0x11/0x20 [ 49.531987] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 49.537528] ? sockfd_lookup_light+0xc5/0x160 [ 49.542008] __sys_sendmsg+0x11d/0x280 [ 49.545878] ? __ia32_sys_shutdown+0x80/0x80 [ 49.550273] ? do_syscall_64+0x6be/0x820 [ 49.554316] ? trace_hardirqs_on+0x310/0x310 [ 49.558707] ? do_syscall_64+0x9a/0x820 [ 49.562662] ? do_syscall_64+0x9a/0x820 [ 49.566619] ? trace_hardirqs_off_caller+0x310/0x310 [ 49.571708] __x64_sys_sendmsg+0x78/0xb0 [ 49.575752] do_syscall_64+0x1b9/0x820 [ 49.579625] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 49.584973] ? syscall_return_slowpath+0x5e0/0x5e0 [ 49.589884] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 49.594709] ? trace_hardirqs_on_caller+0x310/0x310 [ 49.599710] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 49.604708] ? prepare_exit_to_usermode+0x291/0x3b0 [ 49.609706] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 49.614533] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 49.619702] RIP: 0033:0x4446f9 [ 49.622880] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 1b d8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 49.641778] RSP: 002b:00007ffdcaf71ef8 EFLAGS: 00000213 ORIG_RAX: 000000000000002e [ 49.649468] RAX: ffffffffffffffda RBX: 00000000004002e0 RCX: 00000000004446f9 [ 49.656718] RDX: 0000000000000000 RSI: 0000000020000700 RDI: 0000000000000003 [ 49.663983] RBP: 00000000006cf018 R08: 0000000000000000 R09: 00000000004002e0 [ 49.671245] R10: 0000000000000000 R11: 0000000000000213 R12: 00000000004023a0 [ 49.678525] R13: 0000000000402430 R14: 0000000000000000 R15: 0000000000000000 [ 49.686805] Kernel Offset: disabled [ 49.690430] Rebooting in 86400 seconds..