[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 64.653313][ T26] audit: type=1800 audit(1576224415.408:25): pid=8937 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 64.684110][ T26] audit: type=1800 audit(1576224415.408:26): pid=8937 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 64.728897][ T26] audit: type=1800 audit(1576224415.408:27): pid=8937 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.19' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 75.895474][ T9090] IPVS: ftp: loaded support on port[0] = 21 [ 75.929612][ T9090] netlink: 2 bytes leftover after parsing attributes in process `syz-executor212'. [ 75.963934][ C0] ================================================================== [ 75.972150][ C0] BUG: KASAN: use-after-free in __alloc_skb+0x37b/0x5e0 [ 75.979087][ C0] Write of size 32 at addr ffff88819f20b9c0 by task swapper/0/0 [ 75.986829][ C0] [ 75.989160][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.5.0-rc1-syzkaller #0 [ 75.997036][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 76.008697][ C0] Call Trace: [ 76.012004][ C0] [ 76.014853][ C0] dump_stack+0x197/0x210 [ 76.019225][ C0] ? __alloc_skb+0x37b/0x5e0 [ 76.023908][ C0] print_address_description.constprop.0.cold+0xd4/0x30b [ 76.031055][ C0] ? __alloc_skb+0x37b/0x5e0 [ 76.035633][ C0] ? __alloc_skb+0x37b/0x5e0 [ 76.040302][ C0] __kasan_report.cold+0x1b/0x41 [ 76.045238][ C0] ? __alloc_skb+0x37b/0x5e0 [ 76.049828][ C0] kasan_report+0x12/0x20 [ 76.054344][ C0] check_memory_region+0x134/0x1a0 [ 76.059466][ C0] memset+0x24/0x40 [ 76.063282][ C0] __alloc_skb+0x37b/0x5e0 [ 76.067698][ C0] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 76.073245][ C0] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 76.079843][ C0] alloc_skb_with_frags+0x93/0x590 [ 76.085221][ C0] sock_alloc_send_pskb+0x7ad/0x920 [ 76.090415][ C0] ? sock_wmalloc+0x120/0x120 [ 76.095090][ C0] ? __kasan_check_read+0x11/0x20 [ 76.101022][ C0] ? mark_lock+0xc2/0x1220 [ 76.105446][ C0] ? __kasan_check_read+0x11/0x20 [ 76.110478][ C0] sock_alloc_send_skb+0x32/0x40 [ 76.115588][ C0] mld_newpack+0x1d7/0x7f0 [ 76.120009][ C0] ? __kasan_check_read+0x11/0x20 [ 76.125038][ C0] ? ip6_mc_hdr.isra.0.constprop.0+0x5a0/0x5a0 [ 76.131198][ C0] ? __kasan_check_read+0x11/0x20 [ 76.136224][ C0] ? __lock_acquire+0x16f2/0x4a00 [ 76.141257][ C0] ? __kasan_check_read+0x11/0x20 [ 76.146370][ C0] add_grhead.isra.0+0x299/0x370 [ 76.151755][ C0] add_grec+0x7db/0x10b0 [ 76.155987][ C0] ? do_raw_spin_lock+0x12a/0x2e0 [ 76.161021][ C0] ? mld_sendpack+0xed0/0xed0 [ 76.165696][ C0] mld_ifc_timer_expire+0x3d3/0x950 [ 76.170880][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 76.176888][ C0] call_timer_fn+0x1ac/0x780 [ 76.181468][ C0] ? mld_dad_timer_expire+0x230/0x230 [ 76.186839][ C0] ? msleep_interruptible+0x150/0x150 [ 76.192190][ C0] ? run_timer_softirq+0x6b1/0x1790 [ 76.197369][ C0] ? trace_hardirqs_on+0x67/0x240 [ 76.202395][ C0] ? mld_dad_timer_expire+0x230/0x230 [ 76.207832][ C0] ? mld_dad_timer_expire+0x230/0x230 [ 76.213217][ C0] run_timer_softirq+0x6c3/0x1790 [ 76.218443][ C0] ? add_timer+0x930/0x930 [ 76.222846][ C0] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 76.229063][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 76.234707][ C0] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 76.240678][ C0] ? trace_hardirqs_on+0x67/0x240 [ 76.245841][ C0] __do_softirq+0x262/0x98c [ 76.250468][ C0] ? sched_clock_cpu+0x1b/0x1b0 [ 76.255337][ C0] irq_exit+0x19b/0x1e0 [ 76.259500][ C0] smp_apic_timer_interrupt+0x1a3/0x610 [ 76.265032][ C0] apic_timer_interrupt+0xf/0x20 [ 76.269953][ C0] [ 76.272882][ C0] RIP: 0010:native_safe_halt+0xe/0x10 [ 76.278252][ C0] Code: 98 6b ea f9 eb 8a cc cc cc cc cc cc e9 07 00 00 00 0f 00 2d 44 1c 60 00 f4 c3 66 90 e9 07 00 00 00 0f 00 2d 34 1c 60 00 fb f4 cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 e8 4e 5d 9a f9 e8 79 [ 76.297858][ C0] RSP: 0018:ffffffff89807ce8 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 76.306260][ C0] RAX: 1ffffffff13266ae RBX: ffffffff8987a1c0 RCX: 0000000000000000 [ 76.314230][ C0] RDX: dffffc0000000000 RSI: 0000000000000006 RDI: ffffffff8987aa54 [ 76.322187][ C0] RBP: ffffffff89807d18 R08: ffffffff8987a1c0 R09: 0000000000000000 [ 76.330582][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 76.338653][ C0] R13: ffffffff8a799980 R14: 0000000000000000 R15: 0000000000000000 [ 76.346742][ C0] ? default_idle+0x4e/0x360 [ 76.351326][ C0] arch_cpu_idle+0xa/0x10 [ 76.355635][ C0] default_idle_call+0x84/0xb0 [ 76.360417][ C0] do_idle+0x3c8/0x6e0 [ 76.364543][ C0] ? arch_cpu_idle_exit+0x80/0x80 [ 76.369636][ C0] ? trace_hardirqs_on+0x67/0x240 [ 76.374670][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 76.381147][ C0] ? debug_smp_processor_id+0x33/0x18a [ 76.386598][ C0] cpu_startup_entry+0x1b/0x20 [ 76.391345][ C0] rest_init+0x23b/0x371 [ 76.395578][ C0] arch_call_rest_init+0xe/0x1b [ 76.400415][ C0] start_kernel+0x904/0x943 [ 76.404899][ C0] ? mem_encrypt_init+0xb/0xb [ 76.409638][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 76.416065][ C0] ? x86_family+0x41/0x50 [ 76.420501][ C0] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 76.426754][ C0] x86_64_start_reservations+0x29/0x2b [ 76.432194][ C0] x86_64_start_kernel+0x77/0x7b [ 76.437132][ C0] secondary_startup_64+0xa4/0xb0 [ 76.442155][ C0] [ 76.444467][ C0] The buggy address belongs to the page: [ 76.450098][ C0] page:ffffea00067c82c0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 [ 76.459200][ C0] raw: 057ffe0000000000 ffffea00067c82c8 ffffea00067c82c8 0000000000000000 [ 76.467796][ C0] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 76.476373][ C0] page dumped because: kasan: bad access detected [ 76.482799][ C0] [ 76.485111][ C0] Memory state around the buggy address: [ 76.490723][ C0] ffff88819f20b880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 76.498783][ C0] ffff88819f20b900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 76.506837][ C0] >ffff88819f20b980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 76.514920][ C0] ^ [ 76.521167][ C0] ffff88819f20ba00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 76.529229][ C0] ffff88819f20ba80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 76.537297][ C0] ================================================================== [ 76.545577][ C0] Disabling lock debugging due to kernel taint [ 76.552016][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 76.558604][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.5.0-rc1-syzkaller #0 [ 76.567959][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 76.578007][ C0] Call Trace: [ 76.581293][ C0] [ 76.584147][ C0] dump_stack+0x197/0x210 [ 76.588462][ C0] panic+0x2e3/0x75c [ 76.592457][ C0] ? add_taint.cold+0x16/0x16 [ 76.597145][ C0] ? trace_hardirqs_on+0x5e/0x240 [ 76.602162][ C0] ? trace_hardirqs_on+0x5e/0x240 [ 76.607347][ C0] ? __alloc_skb+0x37b/0x5e0 [ 76.612064][ C0] end_report+0x47/0x4f [ 76.616411][ C0] ? __alloc_skb+0x37b/0x5e0 [ 76.621035][ C0] __kasan_report.cold+0xe/0x41 [ 76.625881][ C0] ? __alloc_skb+0x37b/0x5e0 [ 76.630478][ C0] kasan_report+0x12/0x20 [ 76.634804][ C0] check_memory_region+0x134/0x1a0 [ 76.639930][ C0] memset+0x24/0x40 [ 76.643739][ C0] __alloc_skb+0x37b/0x5e0 [ 76.648171][ C0] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 76.653711][ C0] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 76.660346][ C0] alloc_skb_with_frags+0x93/0x590 [ 76.665902][ C0] sock_alloc_send_pskb+0x7ad/0x920 [ 76.671100][ C0] ? sock_wmalloc+0x120/0x120 [ 76.675869][ C0] ? __kasan_check_read+0x11/0x20 [ 76.680902][ C0] ? mark_lock+0xc2/0x1220 [ 76.685906][ C0] ? __kasan_check_read+0x11/0x20 [ 76.691580][ C0] sock_alloc_send_skb+0x32/0x40 [ 76.696788][ C0] mld_newpack+0x1d7/0x7f0 [ 76.702912][ C0] ? __kasan_check_read+0x11/0x20 [ 76.708197][ C0] ? ip6_mc_hdr.isra.0.constprop.0+0x5a0/0x5a0 [ 76.714669][ C0] ? __kasan_check_read+0x11/0x20 [ 76.719957][ C0] ? __lock_acquire+0x16f2/0x4a00 [ 76.724990][ C0] ? __kasan_check_read+0x11/0x20 [ 76.730405][ C0] add_grhead.isra.0+0x299/0x370 [ 76.736019][ C0] add_grec+0x7db/0x10b0 [ 76.740513][ C0] ? do_raw_spin_lock+0x12a/0x2e0 [ 76.745594][ C0] ? mld_sendpack+0xed0/0xed0 [ 76.750284][ C0] mld_ifc_timer_expire+0x3d3/0x950 [ 76.755477][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 76.761018][ C0] call_timer_fn+0x1ac/0x780 [ 76.765717][ C0] ? mld_dad_timer_expire+0x230/0x230 [ 76.771512][ C0] ? msleep_interruptible+0x150/0x150 [ 76.777062][ C0] ? run_timer_softirq+0x6b1/0x1790 [ 76.782607][ C0] ? trace_hardirqs_on+0x67/0x240 [ 76.787627][ C0] ? mld_dad_timer_expire+0x230/0x230 [ 76.794283][ C0] ? mld_dad_timer_expire+0x230/0x230 [ 76.800122][ C0] run_timer_softirq+0x6c3/0x1790 [ 76.805350][ C0] ? add_timer+0x930/0x930 [ 76.809755][ C0] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 76.816096][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 76.821631][ C0] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 76.827745][ C0] ? trace_hardirqs_on+0x67/0x240 [ 76.832760][ C0] __do_softirq+0x262/0x98c [ 76.837250][ C0] ? sched_clock_cpu+0x1b/0x1b0 [ 76.842112][ C0] irq_exit+0x19b/0x1e0 [ 76.846258][ C0] smp_apic_timer_interrupt+0x1a3/0x610 [ 76.851783][ C0] apic_timer_interrupt+0xf/0x20 [ 76.856691][ C0] [ 76.862938][ C0] RIP: 0010:native_safe_halt+0xe/0x10 [ 76.868444][ C0] Code: 98 6b ea f9 eb 8a cc cc cc cc cc cc e9 07 00 00 00 0f 00 2d 44 1c 60 00 f4 c3 66 90 e9 07 00 00 00 0f 00 2d 34 1c 60 00 fb f4 cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 e8 4e 5d 9a f9 e8 79 [ 76.888231][ C0] RSP: 0018:ffffffff89807ce8 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 76.896634][ C0] RAX: 1ffffffff13266ae RBX: ffffffff8987a1c0 RCX: 0000000000000000 [ 76.904590][ C0] RDX: dffffc0000000000 RSI: 0000000000000006 RDI: ffffffff8987aa54 [ 76.912540][ C0] RBP: ffffffff89807d18 R08: ffffffff8987a1c0 R09: 0000000000000000 [ 76.920489][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 76.928539][ C0] R13: ffffffff8a799980 R14: 0000000000000000 R15: 0000000000000000 [ 76.936828][ C0] ? default_idle+0x4e/0x360 [ 76.941411][ C0] arch_cpu_idle+0xa/0x10 [ 76.945718][ C0] default_idle_call+0x84/0xb0 [ 76.950548][ C0] do_idle+0x3c8/0x6e0 [ 76.954628][ C0] ? arch_cpu_idle_exit+0x80/0x80 [ 76.959719][ C0] ? trace_hardirqs_on+0x67/0x240 [ 76.964721][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 76.971025][ C0] ? debug_smp_processor_id+0x33/0x18a [ 76.976475][ C0] cpu_startup_entry+0x1b/0x20 [ 76.981217][ C0] rest_init+0x23b/0x371 [ 76.987440][ C0] arch_call_rest_init+0xe/0x1b [ 76.992294][ C0] start_kernel+0x904/0x943 [ 76.996776][ C0] ? mem_encrypt_init+0xb/0xb [ 77.001430][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 77.007648][ C0] ? x86_family+0x41/0x50 [ 77.011964][ C0] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 77.018207][ C0] x86_64_start_reservations+0x29/0x2b [ 77.024086][ C0] x86_64_start_kernel+0x77/0x7b [ 77.029009][ C0] secondary_startup_64+0xa4/0xb0 [ 77.034170][ C0] ------------[ cut here ]------------ [ 77.039729][ C0] WARNING: CPU: 0 PID: 0 at kernel/locking/mutex.c:1419 mutex_trylock+0x279/0x2f0 [ 77.049008][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 77.056496][ C0] ------------[ cut here ]------------ [ 77.062119][ C0] WARNING: CPU: 0 PID: 0 at kernel/locking/mutex.c:1419 mutex_trylock+0x279/0x2f0 [ 77.071286][ C0] Modules linked in: [ 77.075168][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.5.0-rc1-syzkaller #0 [ 77.084609][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 77.094671][ C0] RIP: 0010:mutex_trylock+0x279/0x2f0 [ 77.100032][ C0] Code: c9 41 b8 01 00 00 00 31 c9 ba 01 00 00 00 31 f6 e8 3c 74 93 f9 58 48 8d 65 d8 b8 01 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 <0f> 0b e9 0c fe ff ff 48 c7 c7 20 c5 63 8b 48 89 4d d0 e8 b0 2d eb [ 77.119616][ C0] RSP: 0018:ffffc90000006fe8 EFLAGS: 00010006 [ 77.125677][ C0] RAX: 0000000000000505 RBX: 1ffff92000000e05 RCX: 0000000000000004 [ 77.133639][ C0] RDX: 0000000000000100 RSI: ffffffff816c1c25 RDI: ffffffff899c3c60 [ 77.141683][ C0] RBP: ffffc90000007018 R08: 0000000000000002 R09: fffffbfff1333ae5 [ 77.149632][ C0] R10: fffffbfff1333ae4 R11: ffffffff8999d723 R12: ffffffff8b63c520 [ 77.157595][ C0] R13: 0000000000000000 R14: ffffffff87c79800 R15: ffffffff899c3c60 [ 77.165546][ C0] FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 77.174458][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.181126][ C0] CR2: 00000000006d9f70 CR3: 00000000a067a000 CR4: 00000000001406f0 [ 77.189172][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 77.197135][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 77.205181][ C0] Call Trace: [ 77.208452][ C0] [ 77.211286][ C0] ? mutex_trylock+0x1e0/0x2f0 [ 77.216057][ C0] __crash_kexec+0x91/0x200 [ 77.220544][ C0] ? kexec_crash_loaded+0x20/0x20 [ 77.225718][ C0] ? trace_hardirqs_off+0x62/0x240 [ 77.230808][ C0] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 77.236592][ C0] ? __printk_safe_flush+0x31e/0x3a0 [ 77.241868][ C0] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 77.247578][ C0] ? find_next_bit+0x107/0x130 [ 77.252345][ C0] ? cpumask_next+0x41/0x50 [ 77.257000][ C0] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 77.262719][ C0] ? printk_safe_flush+0xf2/0x140 [ 77.267729][ C0] ? mutex_trylock+0x1e0/0x2f0 [ 77.272470][ C0] panic+0x308/0x75c [ 77.276341][ C0] ? add_taint.cold+0x16/0x16 [ 77.280994][ C0] ? printk+0xba/0xed [ 77.284951][ C0] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 77.290383][ C0] ? __warn.cold+0x14/0x3e [ 77.294782][ C0] ? __warn+0xd9/0x1cf [ 77.298836][ C0] ? mutex_trylock+0x279/0x2f0 [ 77.303572][ C0] __warn.cold+0x2f/0x3e [ 77.307789][ C0] ? report_bug.cold+0x63/0xb2 [ 77.312523][ C0] ? mutex_trylock+0x279/0x2f0 [ 77.317269][ C0] report_bug+0x289/0x300 [ 77.321581][ C0] do_error_trap+0x11b/0x200 [ 77.326147][ C0] do_invalid_op+0x37/0x50 [ 77.330537][ C0] ? mutex_trylock+0x279/0x2f0 [ 77.335282][ C0] invalid_op+0x23/0x30 [ 77.339415][ C0] RIP: 0010:mutex_trylock+0x279/0x2f0 [ 77.344759][ C0] Code: c9 41 b8 01 00 00 00 31 c9 ba 01 00 00 00 31 f6 e8 3c 74 93 f9 58 48 8d 65 d8 b8 01 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 <0f> 0b e9 0c fe ff ff 48 c7 c7 20 c5 63 8b 48 89 4d d0 e8 b0 2d eb [ 77.365399][ C0] RSP: 0018:ffffc90000007428 EFLAGS: 00010006 [ 77.371449][ C0] RAX: 0000000000000504 RBX: 1ffff92000000e8d RCX: 0000000000000004 [ 77.379400][ C0] RDX: 0000000000000100 RSI: ffffffff816c1c25 RDI: ffffffff899c3c60 [ 77.387458][ C0] RBP: ffffc90000007458 R08: 0000000000000001 R09: fffffbfff1333ae5 [ 77.395794][ C0] R10: fffffbfff1333ae4 R11: ffffffff8999d723 R12: ffffffff8b63c520 [ 77.403758][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffffffff899c3c60 [ 77.411724][ C0] ? __crash_kexec+0x85/0x200 [ 77.416386][ C0] ? __kasan_check_write+0x14/0x20 [ 77.421551][ C0] __crash_kexec+0x91/0x200 [ 77.426055][ C0] ? kexec_crash_loaded+0x20/0x20 [ 77.431184][ C0] ? trace_hardirqs_off+0x62/0x240 [ 77.436288][ C0] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 77.442088][ C0] ? __printk_safe_flush+0x31e/0x3a0 [ 77.447381][ C0] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 77.453111][ C0] ? find_next_bit+0x107/0x130 [ 77.457864][ C0] ? cpumask_next+0x41/0x50 [ 77.462384][ C0] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 77.468232][ C0] ? printk_safe_flush+0xf2/0x140 [ 77.473543][ C0] panic+0x308/0x75c [ 77.477515][ C0] ? add_taint.cold+0x16/0x16 [ 77.482664][ C0] ? trace_hardirqs_on+0x5e/0x240 [ 77.487699][ C0] ? trace_hardirqs_on+0x5e/0x240 [ 77.492711][ C0] ? __alloc_skb+0x37b/0x5e0 [ 77.497284][ C0] end_report+0x47/0x4f [ 77.501427][ C0] ? __alloc_skb+0x37b/0x5e0 [ 77.506011][ C0] __kasan_report.cold+0xe/0x41 [ 77.510838][ C0] ? __alloc_skb+0x37b/0x5e0 [ 77.515403][ C0] kasan_report+0x12/0x20 [ 77.519707][ C0] check_memory_region+0x134/0x1a0 [ 77.524789][ C0] memset+0x24/0x40 [ 77.528571][ C0] __alloc_skb+0x37b/0x5e0 [ 77.532960][ C0] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 77.538497][ C0] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 77.545097][ C0] alloc_skb_with_frags+0x93/0x590 [ 77.550252][ C0] sock_alloc_send_pskb+0x7ad/0x920 [ 77.555445][ C0] ? sock_wmalloc+0x120/0x120 [ 77.560111][ C0] ? __kasan_check_read+0x11/0x20 [ 77.565201][ C0] ? mark_lock+0xc2/0x1220 [ 77.569596][ C0] ? __kasan_check_read+0x11/0x20 [ 77.574598][ C0] sock_alloc_send_skb+0x32/0x40 [ 77.579514][ C0] mld_newpack+0x1d7/0x7f0 [ 77.583908][ C0] ? __kasan_check_read+0x11/0x20 [ 77.588908][ C0] ? ip6_mc_hdr.isra.0.constprop.0+0x5a0/0x5a0 [ 77.595053][ C0] ? __kasan_check_read+0x11/0x20 [ 77.600156][ C0] ? __lock_acquire+0x16f2/0x4a00 [ 77.605160][ C0] ? __kasan_check_read+0x11/0x20 [ 77.610161][ C0] add_grhead.isra.0+0x299/0x370 [ 77.615089][ C0] add_grec+0x7db/0x10b0 [ 77.619308][ C0] ? do_raw_spin_lock+0x12a/0x2e0 [ 77.624306][ C0] ? mld_sendpack+0xed0/0xed0 [ 77.628980][ C0] mld_ifc_timer_expire+0x3d3/0x950 [ 77.634205][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 77.639757][ C0] call_timer_fn+0x1ac/0x780 [ 77.644337][ C0] ? mld_dad_timer_expire+0x230/0x230 [ 77.649737][ C0] ? msleep_interruptible+0x150/0x150 [ 77.655151][ C0] ? run_timer_softirq+0x6b1/0x1790 [ 77.660369][ C0] ? trace_hardirqs_on+0x67/0x240 [ 77.665378][ C0] ? mld_dad_timer_expire+0x230/0x230 [ 77.670739][ C0] ? mld_dad_timer_expire+0x230/0x230 [ 77.676178][ C0] run_timer_softirq+0x6c3/0x1790 [ 77.681184][ C0] ? add_timer+0x930/0x930 [ 77.685577][ C0] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 77.691716][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 77.697258][ C0] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 77.703384][ C0] ? trace_hardirqs_on+0x67/0x240 [ 77.708416][ C0] __do_softirq+0x262/0x98c [ 77.712921][ C0] ? sched_clock_cpu+0x1b/0x1b0 [ 77.717755][ C0] irq_exit+0x19b/0x1e0 [ 77.723538][ C0] smp_apic_timer_interrupt+0x1a3/0x610 [ 77.729061][ C0] apic_timer_interrupt+0xf/0x20 [ 77.734096][ C0] [ 77.737015][ C0] RIP: 0010:native_safe_halt+0xe/0x10 [ 77.742363][ C0] Code: 98 6b ea f9 eb 8a cc cc cc cc cc cc e9 07 00 00 00 0f 00 2d 44 1c 60 00 f4 c3 66 90 e9 07 00 00 00 0f 00 2d 34 1c 60 00 fb f4 cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 e8 4e 5d 9a f9 e8 79 [ 77.761945][ C0] RSP: 0018:ffffffff89807ce8 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 77.770594][ C0] RAX: 1ffffffff13266ae RBX: ffffffff8987a1c0 RCX: 0000000000000000 [ 77.778559][ C0] RDX: dffffc0000000000 RSI: 0000000000000006 RDI: ffffffff8987aa54 [ 77.786682][ C0] RBP: ffffffff89807d18 R08: ffffffff8987a1c0 R09: 0000000000000000 [ 77.794641][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 77.802611][ C0] R13: ffffffff8a799980 R14: 0000000000000000 R15: 0000000000000000 [ 77.810574][ C0] ? default_idle+0x4e/0x360 [ 77.815155][ C0] arch_cpu_idle+0xa/0x10 [ 77.819480][ C0] default_idle_call+0x84/0xb0 [ 77.824231][ C0] do_idle+0x3c8/0x6e0 [ 77.828300][ C0] ? arch_cpu_idle_exit+0x80/0x80 [ 77.833311][ C0] ? trace_hardirqs_on+0x67/0x240 [ 77.838325][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 77.844552][ C0] ? debug_smp_processor_id+0x33/0x18a [ 77.850002][ C0] cpu_startup_entry+0x1b/0x20 [ 77.854758][ C0] rest_init+0x23b/0x371 [ 77.859032][ C0] arch_call_rest_init+0xe/0x1b [ 77.864011][ C0] start_kernel+0x904/0x943 [ 77.868501][ C0] ? mem_encrypt_init+0xb/0xb [ 77.873162][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 77.879398][ C0] ? x86_family+0x41/0x50 [ 77.883718][ C0] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 77.890128][ C0] x86_64_start_reservations+0x29/0x2b [ 77.895564][ C0] x86_64_start_kernel+0x77/0x7b [ 77.900478][ C0] secondary_startup_64+0xa4/0xb0 [ 77.905487][ C0] irq event stamp: 159009 [ 77.909793][ C0] hardirqs last enabled at (159008): [] kmem_cache_alloc_node_trace+0x239/0x750 [ 77.920450][ C0] hardirqs last disabled at (159009): [] _raw_spin_lock_irqsave+0x6f/0xcd [ 77.930587][ C0] softirqs last enabled at (159000): [] _local_bh_enable+0x1c/0x30 [ 77.940115][ C0] softirqs last disabled at (159001): [] irq_exit+0x19b/0x1e0 [ 77.949198][ C0] ---[ end trace 22856498c647e972 ]--- [ 77.954679][ C0] ------------[ cut here ]------------ [ 77.960134][ C0] WARNING: CPU: 0 PID: 0 at kernel/locking/mutex.c:737 mutex_unlock+0x1d/0x30 [ 77.969071][ C0] Modules linked in: [ 77.972952][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B W 5.5.0-rc1-syzkaller #0 [ 77.982213][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 77.992261][ C0] RIP: 0010:mutex_unlock+0x1d/0x30 [ 77.997354][ C0] Code: 4c 89 ff e8 05 39 eb f9 e9 8c fb ff ff 55 65 8b 05 00 91 3a 78 a9 00 ff 1f 00 48 89 e5 75 0b 48 8b 75 08 e8 45 f9 ff ff 5d c3 <0f> 0b 48 8b 75 08 e8 38 f9 ff ff 5d c3 66 0f 1f 44 00 00 48 b8 00 [ 78.016932][ C0] RSP: 0018:ffffc90000007018 EFLAGS: 00010006 [ 78.022983][ C0] RAX: 0000000000000505 RBX: 1ffff92000000e05 RCX: ffffffff816c1c3d [ 78.030939][ C0] RDX: 0000000000000100 RSI: ffffffff816c1c9f RDI: ffffffff899c3c60 [ 78.039147][ C0] RBP: ffffc90000007018 R08: ffffffff8987a1c0 R09: 0000000000000000 [ 78.047117][ C0] R10: fffffbfff14f3330 R11: ffffffff8987a1c0 R12: 0000000000000001 [ 78.055069][ C0] R13: 0000000000000000 R14: ffffffff87c79800 R15: 000000000000058b [ 78.063018][ C0] FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 78.071943][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.078506][ C0] CR2: 00000000006d9f70 CR3: 00000000a067a000 CR4: 00000000001406f0 [ 78.086521][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 78.094475][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 78.102454][ C0] Call Trace: [ 78.108342][ C0] [ 78.111206][ C0] __crash_kexec+0x10b/0x200 [ 78.115781][ C0] ? kexec_crash_loaded+0x20/0x20 [ 78.120801][ C0] ? trace_hardirqs_off+0x62/0x240 [ 78.125894][ C0] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 78.131692][ C0] ? __printk_safe_flush+0x31e/0x3a0 [ 78.137284][ C0] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 78.143001][ C0] ? find_next_bit+0x107/0x130 [ 78.147776][ C0] ? cpumask_next+0x41/0x50 [ 78.152303][ C0] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 78.158009][ C0] ? printk_safe_flush+0xf2/0x140 [ 78.163111][ C0] ? mutex_trylock+0x1e0/0x2f0 [ 78.167997][ C0] panic+0x308/0x75c [ 78.171896][ C0] ? add_taint.cold+0x16/0x16 [ 78.176616][ C0] ? printk+0xba/0xed [ 78.180951][ C0] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 78.186650][ C0] ? __warn.cold+0x14/0x3e [ 78.191150][ C0] ? __warn+0xd9/0x1cf [ 78.195332][ C0] ? mutex_trylock+0x279/0x2f0 [ 78.200082][ C0] __warn.cold+0x2f/0x3e [ 78.204336][ C0] ? report_bug.cold+0x63/0xb2 [ 78.209079][ C0] ? mutex_trylock+0x279/0x2f0 [ 78.213821][ C0] report_bug+0x289/0x300 [ 78.218126][ C0] do_error_trap+0x11b/0x200 [ 78.223122][ C0] do_invalid_op+0x37/0x50 [ 78.227510][ C0] ? mutex_trylock+0x279/0x2f0 [ 78.232250][ C0] invalid_op+0x23/0x30 [ 78.236378][ C0] RIP: 0010:mutex_trylock+0x279/0x2f0 [ 78.241729][ C0] Code: c9 41 b8 01 00 00 00 31 c9 ba 01 00 00 00 31 f6 e8 3c 74 93 f9 58 48 8d 65 d8 b8 01 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 <0f> 0b e9 0c fe ff ff 48 c7 c7 20 c5 63 8b 48 89 4d d0 e8 b0 2d eb [ 78.261516][ C0] RSP: 0018:ffffc90000007428 EFLAGS: 00010006 [ 78.267560][ C0] RAX: 0000000000000504 RBX: 1ffff92000000e8d RCX: 0000000000000004 [ 78.275529][ C0] RDX: 0000000000000100 RSI: ffffffff816c1c25 RDI: ffffffff899c3c60 [ 78.283475][ C0] RBP: ffffc90000007458 R08: 0000000000000001 R09: fffffbfff1333ae5 [ 78.293769][ C0] R10: fffffbfff1333ae4 R11: ffffffff8999d723 R12: ffffffff8b63c520 [ 78.301888][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffffffff899c3c60 [ 78.309880][ C0] ? __crash_kexec+0x85/0x200 [ 78.314575][ C0] ? __kasan_check_write+0x14/0x20 [ 78.319671][ C0] __crash_kexec+0x91/0x200 [ 78.324155][ C0] ? kexec_crash_loaded+0x20/0x20 [ 78.329159][ C0] ? trace_hardirqs_off+0x62/0x240 [ 78.334249][ C0] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 78.340036][ C0] ? __printk_safe_flush+0x31e/0x3a0 [ 78.346882][ C0] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 78.352773][ C0] ? find_next_bit+0x107/0x130 [ 78.357621][ C0] ? cpumask_next+0x41/0x50 [ 78.362124][ C0] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 78.368289][ C0] ? printk_safe_flush+0xf2/0x140 [ 78.373469][ C0] panic+0x308/0x75c [ 78.377342][ C0] ? add_taint.cold+0x16/0x16 [ 78.382103][ C0] ? trace_hardirqs_on+0x5e/0x240 [ 78.387112][ C0] ? trace_hardirqs_on+0x5e/0x240 [ 78.392115][ C0] ? __alloc_skb+0x37b/0x5e0 [ 78.396784][ C0] end_report+0x47/0x4f [ 78.401022][ C0] ? __alloc_skb+0x37b/0x5e0 [ 78.405586][ C0] __kasan_report.cold+0xe/0x41 [ 78.410686][ C0] ? __alloc_skb+0x37b/0x5e0 [ 78.415516][ C0] kasan_report+0x12/0x20 [ 78.419822][ C0] check_memory_region+0x134/0x1a0 [ 78.424925][ C0] memset+0x24/0x40 [ 78.428709][ C0] __alloc_skb+0x37b/0x5e0 [ 78.433100][ C0] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 78.438649][ C0] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 78.445254][ C0] alloc_skb_with_frags+0x93/0x590 [ 78.450377][ C0] sock_alloc_send_pskb+0x7ad/0x920 [ 78.455568][ C0] ? sock_wmalloc+0x120/0x120 [ 78.460231][ C0] ? __kasan_check_read+0x11/0x20 [ 78.465252][ C0] ? mark_lock+0xc2/0x1220 [ 78.469665][ C0] ? __kasan_check_read+0x11/0x20 [ 78.474667][ C0] sock_alloc_send_skb+0x32/0x40 [ 78.479584][ C0] mld_newpack+0x1d7/0x7f0 [ 78.483985][ C0] ? __kasan_check_read+0x11/0x20 [ 78.489006][ C0] ? ip6_mc_hdr.isra.0.constprop.0+0x5a0/0x5a0 [ 78.495154][ C0] ? __kasan_check_read+0x11/0x20 [ 78.500390][ C0] ? __lock_acquire+0x16f2/0x4a00 [ 78.505401][ C0] ? __kasan_check_read+0x11/0x20 [ 78.510414][ C0] add_grhead.isra.0+0x299/0x370 [ 78.515348][ C0] add_grec+0x7db/0x10b0 [ 78.519710][ C0] ? do_raw_spin_lock+0x12a/0x2e0 [ 78.524737][ C0] ? mld_sendpack+0xed0/0xed0 [ 78.529417][ C0] mld_ifc_timer_expire+0x3d3/0x950 [ 78.534611][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 78.540577][ C0] call_timer_fn+0x1ac/0x780 [ 78.545154][ C0] ? mld_dad_timer_expire+0x230/0x230 [ 78.550522][ C0] ? msleep_interruptible+0x150/0x150 [ 78.555876][ C0] ? run_timer_softirq+0x6b1/0x1790 [ 78.561058][ C0] ? trace_hardirqs_on+0x67/0x240 [ 78.566249][ C0] ? mld_dad_timer_expire+0x230/0x230 [ 78.571750][ C0] ? mld_dad_timer_expire+0x230/0x230 [ 78.577204][ C0] run_timer_softirq+0x6c3/0x1790 [ 78.582221][ C0] ? add_timer+0x930/0x930 [ 78.587737][ C0] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 78.593883][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 78.599499][ C0] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 78.605470][ C0] ? trace_hardirqs_on+0x67/0x240 [ 78.610487][ C0] __do_softirq+0x262/0x98c [ 78.614984][ C0] ? sched_clock_cpu+0x1b/0x1b0 [ 78.619815][ C0] irq_exit+0x19b/0x1e0 [ 78.623950][ C0] smp_apic_timer_interrupt+0x1a3/0x610 [ 78.629495][ C0] apic_timer_interrupt+0xf/0x20 [ 78.634405][ C0] [ 78.638057][ C0] RIP: 0010:native_safe_halt+0xe/0x10 [ 78.643403][ C0] Code: 98 6b ea f9 eb 8a cc cc cc cc cc cc e9 07 00 00 00 0f 00 2d 44 1c 60 00 f4 c3 66 90 e9 07 00 00 00 0f 00 2d 34 1c 60 00 fb f4 cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 e8 4e 5d 9a f9 e8 79 [ 78.662986][ C0] RSP: 0018:ffffffff89807ce8 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 78.671376][ C0] RAX: 1ffffffff13266ae RBX: ffffffff8987a1c0 RCX: 0000000000000000 [ 78.679325][ C0] RDX: dffffc0000000000 RSI: 0000000000000006 RDI: ffffffff8987aa54 [ 78.687272][ C0] RBP: ffffffff89807d18 R08: ffffffff8987a1c0 R09: 0000000000000000 [ 78.695225][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 78.703277][ C0] R13: ffffffff8a799980 R14: 0000000000000000 R15: 0000000000000000 [ 78.712670][ C0] ? default_idle+0x4e/0x360 [ 78.717270][ C0] arch_cpu_idle+0xa/0x10 [ 78.721675][ C0] default_idle_call+0x84/0xb0 [ 78.728331][ C0] do_idle+0x3c8/0x6e0 [ 78.732397][ C0] ? arch_cpu_idle_exit+0x80/0x80 [ 78.737421][ C0] ? trace_hardirqs_on+0x67/0x240 [ 78.742430][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 78.748667][ C0] ? debug_smp_processor_id+0x33/0x18a [ 78.754252][ C0] cpu_startup_entry+0x1b/0x20 [ 78.759007][ C0] rest_init+0x23b/0x371 [ 78.763690][ C0] arch_call_rest_init+0xe/0x1b [ 78.768563][ C0] start_kernel+0x904/0x943 [ 78.773057][ C0] ? mem_encrypt_init+0xb/0xb [ 78.777723][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 78.784059][ C0] ? x86_family+0x41/0x50 [ 78.788372][ C0] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 78.794598][ C0] x86_64_start_reservations+0x29/0x2b [ 78.800035][ C0] x86_64_start_kernel+0x77/0x7b [ 78.804952][ C0] secondary_startup_64+0xa4/0xb0 [ 78.809963][ C0] irq event stamp: 159009 [ 78.814273][ C0] hardirqs last enabled at (159008): [] kmem_cache_alloc_node_trace+0x239/0x750 [ 78.824926][ C0] hardirqs last disabled at (159009): [] _raw_spin_lock_irqsave+0x6f/0xcd [ 78.834986][ C0] softirqs last enabled at (159000): [] _local_bh_enable+0x1c/0x30 [ 78.844940][ C0] softirqs last disabled at (159001): [] irq_exit+0x19b/0x1e0 [ 78.853928][ C0] ---[ end trace 22856498c647e973 ]--- [ 78.860930][ C0] Kernel Offset: disabled [ 78.865258][ C0] Rebooting in 86400 seconds..