Warning: Permanently added '10.128.0.74' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 49.583695] kauditd_printk_skb: 5 callbacks suppressed [ 49.583712] audit: type=1400 audit(1555504550.816:36): avc: denied { map } for pid=7968 comm="syz-executor372" path="/root/syz-executor372578477" dev="sda1" ino=16483 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 49.632031] page:ffffea00027dc200 count:0 mapcount:-128 mapping:0000000000000000 index:0x0 [ 49.640606] flags: 0x1fffc0000000000() [ 49.644514] raw: 01fffc0000000000 ffffea000242ac08 ffff88812fffc878 0000000000000000 [ 49.652444] raw: 0000000000000000 0000000000000003 00000000ffffff7f 0000000000000000 [ 49.660358] page dumped because: VM_BUG_ON_PAGE(page_ref_count(page) == 0) [ 49.667625] ------------[ cut here ]------------ [ 49.672363] kernel BUG at include/linux/mm.h:519! [ 49.677239] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 49.682622] CPU: 0 PID: 7968 Comm: syz-executor372 Not tainted 4.19.35 #3 [ 49.689549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 49.698900] RIP: 0010:skb_release_data+0x5ab/0x7c0 [ 49.703809] Code: f6 fe ff e9 b6 fb ff ff e8 b2 83 09 fc 4c 8d 63 ff e9 c8 fc ff ff e8 a4 83 09 fc 48 c7 c6 00 b2 dc 87 4c 89 e7 e8 b5 86 31 fc <0f> 0b e8 8e 83 09 fc 4d 8d 66 0e 48 b8 00 00 00 00 00 fc ff df 4c [ 49.722694] RSP: 0018:ffff888086a078a8 EFLAGS: 00010293 [ 49.728043] RAX: ffff888096e30180 RBX: ffffea00027dc234 RCX: 0000000000000000 [ 49.735297] RDX: 0000000000000000 RSI: ffffffff81934797 RDI: ffffea00027dc238 [ 49.742559] RBP: ffff888086a07910 R08: 000000000000003e R09: ffffed1015d03ee3 [ 49.750001] R10: ffffed1015d03ee2 R11: ffff8880ae81f717 R12: ffffea00027dc200 [ 49.757251] R13: ffff888098483e30 R14: 0000000000000000 R15: dffffc0000000000 [ 49.764502] FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 49.772717] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.778576] CR2: 0000000020014000 CR3: 000000000866d000 CR4: 00000000001406f0 [ 49.785828] Call Trace: [ 49.788401] skb_release_all+0x4d/0x60 [ 49.792270] __kfree_skb+0x16/0x30 [ 49.795805] tcp_write_queue_purge+0x253/0x7d0 [ 49.800388] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 49.805938] tcp_v4_destroy_sock+0xe7/0x7e0 [ 49.810254] inet_csk_destroy_sock+0x1a7/0x450 [ 49.814817] tcp_close+0xa5e/0x10c0 [ 49.818425] ? _raw_spin_unlock+0x50/0x50 [ 49.822558] tls_sk_proto_close+0x6b1/0xaa0 [ 49.826859] ? tcp_check_oom+0x560/0x560 [ 49.830904] ? tls_write_space+0x310/0x310 [ 49.835136] ? __local_bh_enable_ip+0x15a/0x270 [ 49.839787] ? lockdep_hardirqs_on+0x415/0x5d0 [ 49.844351] ? ip_mc_drop_socket+0x20c/0x270 [ 49.848741] ? trace_hardirqs_on+0x67/0x230 [ 49.853046] inet_release+0x105/0x1f0 [ 49.856829] __sock_release+0x1fe/0x2b0 [ 49.860790] sock_release+0x18/0x20 [ 49.864411] smc_release+0x2c7/0x810 [ 49.868119] __sock_release+0xd3/0x2b0 [ 49.871987] ? __sock_release+0x2b0/0x2b0 [ 49.876114] sock_close+0x1b/0x30 [ 49.879565] __fput+0x2df/0x8b0 [ 49.882827] ____fput+0x16/0x20 [ 49.886086] task_work_run+0x14a/0x1c0 [ 49.889958] do_exit+0x933/0x2fa0 [ 49.893394] ? mm_update_next_owner+0x660/0x660 [ 49.898058] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 49.903576] ? ksys_write+0x166/0x1f0 [ 49.907362] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 49.912100] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 49.916845] do_group_exit+0x135/0x370 [ 49.920711] __x64_sys_exit_group+0x44/0x50 [ 49.925012] do_syscall_64+0x103/0x610 [ 49.928879] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 49.934049] RIP: 0033:0x43eeb8 [ 49.937247] Code: Bad RIP value. [ 49.940592] RSP: 002b:00007fff3a24cd28 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 49.948282] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000043eeb8 [ 49.955535] RDX: 0000000000000000 RSI: 000000000000003c RDI: 0000000000000000 [ 49.962791] RBP: 00000000004be6c8 R08: 00000000000000e7 R09: ffffffffffffffd0 [ 49.970045] R10: 0000000000000028 R11: 0000000000000246 R12: 0000000000000001 [ 49.977309] R13: 00000000006d0180 R14: 0000000000000000 R15: 0000000000000000 [ 49.984561] Modules linked in: [ 49.987780] ---[ end trace 8461bee085f31399 ]--- [ 49.992578] RIP: 0010:skb_release_data+0x5ab/0x7c0 [ 49.997491] Code: f6 fe ff e9 b6 fb ff ff e8 b2 83 09 fc 4c 8d 63 ff e9 c8 fc ff ff e8 a4 83 09 fc 48 c7 c6 00 b2 dc 87 4c 89 e7 e8 b5 86 31 fc <0f> 0b e8 8e 83 09 fc 4d 8d 66 0e 48 b8 00 00 00 00 00 fc ff df 4c [ 50.016442] RSP: 0018:ffff888086a078a8 EFLAGS: 00010293 [ 50.021835] RAX: ffff888096e30180 RBX: ffffea00027dc234 RCX: 0000000000000000 [ 50.029087] RDX: 0000000000000000 RSI: ffffffff81934797 RDI: ffffea00027dc238 [ 50.036367] RBP: ffff888086a07910 R08: 000000000000003e R09: ffffed1015d03ee3 [ 50.043651] R10: ffffed1015d03ee2 R11: ffff8880ae81f717 R12: ffffea00027dc200 [ 50.050935] R13: ffff888098483e30 R14: 0000000000000000 R15: dffffc0000000000 [ 50.058204] FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 50.066433] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.072332] CR2: 000000000043ee8e CR3: 000000000866d000 CR4: 00000000001406f0 [ 50.079614] Kernel panic - not syncing: Fatal exception in interrupt [ 50.086799] Kernel Offset: disabled [ 50.090425] Rebooting in 86400 seconds..