Warning: Permanently added '10.128.10.2' (ECDSA) to the list of known hosts. 2019/06/04 04:37:32 fuzzer started [ 59.378708] audit: type=1400 audit(1559623052.814:36): avc: denied { map } for pid=8049 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/06/04 04:37:35 dialing manager at 10.128.0.105:38735 2019/06/04 04:37:35 syscalls: 2460 2019/06/04 04:37:35 code coverage: enabled 2019/06/04 04:37:35 comparison tracing: enabled 2019/06/04 04:37:35 extra coverage: extra coverage is not supported by the kernel 2019/06/04 04:37:35 setuid sandbox: enabled 2019/06/04 04:37:35 namespace sandbox: enabled 2019/06/04 04:37:35 Android sandbox: /sys/fs/selinux/policy does not exist 2019/06/04 04:37:35 fault injection: enabled 2019/06/04 04:37:35 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/06/04 04:37:35 net packet injection: enabled 2019/06/04 04:37:35 net device setup: enabled 04:37:38 executing program 0: r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda) r1 = socket(0x1e, 0x805, 0x0) socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) r3 = gettid() dup3(r2, r0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x401104000000016) [ 65.131939] audit: type=1400 audit(1559623058.564:37): avc: denied { map } for pid=8067 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=49 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 65.251815] IPVS: ftp: loaded support on port[0] = 21 [ 65.261908] NET: Registered protocol family 30 [ 65.266787] Failed to register TIPC socket type 04:37:38 executing program 1: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) [ 65.480098] IPVS: ftp: loaded support on port[0] = 21 [ 65.489565] NET: Registered protocol family 30 [ 65.494159] Failed to register TIPC socket type 04:37:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000200), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000340)=[@text16={0x10, &(0x7f00000002c0)="0f2d8e000066b87169001a0f23d80f21f86635800000c00f23f80fc75d600f20c06635200000000f22c00f3266b80a0000000f23d80f21f86635000000100f23f866f3660f22e30f570af3abddd3", 0x4e}], 0x1, 0x3, 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x2237, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x4202, 0x0) ioctl$TIOCLINUX4(r2, 0x541c, &(0x7f0000000100)) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) [ 65.799238] IPVS: ftp: loaded support on port[0] = 21 [ 65.818943] NET: Registered protocol family 30 [ 65.823567] Failed to register TIPC socket type 04:37:39 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000000c0)={0x80}) [ 66.329435] IPVS: ftp: loaded support on port[0] = 21 [ 66.359029] NET: Registered protocol family 30 [ 66.363663] Failed to register TIPC socket type 04:37:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) add_key(&(0x7f0000000140)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl(r0, 0x80001000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'.yz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) [ 66.933580] IPVS: ftp: loaded support on port[0] = 21 [ 66.971588] NET: Registered protocol family 30 [ 67.006882] Failed to register TIPC socket type 04:37:40 executing program 5: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x1, @local}}, 0x1e) [ 67.611902] IPVS: ftp: loaded support on port[0] = 21 [ 67.640263] NET: Registered protocol family 30 [ 67.644894] Failed to register TIPC socket type [ 68.562114] chnl_net:caif_netlink_parms(): no params data found [ 68.997816] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.090785] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.138355] device bridge_slave_0 entered promiscuous mode [ 69.207678] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.214173] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.290843] device bridge_slave_1 entered promiscuous mode [ 69.658881] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 70.044959] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 70.518419] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 70.677547] team0: Port device team_slave_0 added [ 70.917638] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 71.036620] team0: Port device team_slave_1 added [ 71.315752] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 71.570200] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 72.164699] device hsr_slave_0 entered promiscuous mode [ 72.469973] device hsr_slave_1 entered promiscuous mode [ 72.705230] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 72.903740] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 73.159897] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 73.747396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.920869] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 74.118311] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 74.124573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.143383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.307645] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 74.313789] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.587649] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 74.594744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.617662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.706351] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.712898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.866624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.986245] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 74.994042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.037686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.126309] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.132726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.327076] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 75.417397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.549715] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 75.647113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.797667] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 75.804597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.857154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.047663] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 76.054669] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.077408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.107164] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.327952] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 76.335009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.352600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.628510] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 76.635444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.666683] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.956709] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 76.962808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.333813] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 77.729323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.080817] audit: type=1400 audit(1559623071.514:38): avc: denied { associate } for pid=8068 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 04:37:55 executing program 0: r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda) r1 = socket(0x1e, 0x805, 0x0) socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) r3 = gettid() dup3(r2, r0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x401104000000016) 04:37:56 executing program 0: r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda) r1 = socket(0x1e, 0x805, 0x0) socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) r3 = gettid() dup3(r2, r0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x401104000000016) 04:37:56 executing program 0: r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda) r1 = socket(0x1e, 0x805, 0x0) socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) r3 = gettid() dup3(r2, r0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x401104000000016) 04:37:56 executing program 0: r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda) r1 = socket(0x1e, 0x805, 0x0) socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) r3 = gettid() dup3(r2, r0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x401104000000016) 04:37:56 executing program 0: r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda) r1 = socket(0x1e, 0x805, 0x0) socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) r3 = gettid() dup3(r2, r0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x401104000000016) 04:37:56 executing program 0: r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda) r1 = socket(0x1e, 0x805, 0x0) socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) r3 = gettid() dup3(r2, r0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x401104000000016) [ 83.501190] IPVS: ftp: loaded support on port[0] = 21 [ 83.511174] NET: Registered protocol family 30 [ 83.515812] Failed to register TIPC socket type [ 83.516118] cache_from_obj: Wrong slab cache. TIPC but object is from kmalloc-2048 [ 83.528557] WARNING: CPU: 1 PID: 8747 at mm/slab.h:380 kmem_cache_free.cold+0x1c/0x23 [ 83.536547] Kernel panic - not syncing: panic_on_warn set ... [ 83.536547] [ 83.543928] CPU: 1 PID: 8747 Comm: syz-executor.4 Not tainted 4.19.47 #19 [ 83.550857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 83.560216] Call Trace: [ 83.562807] [ 83.564973] dump_stack+0x172/0x1f0 [ 83.568622] panic+0x263/0x507 [ 83.571840] ? __warn_printk+0xf3/0xf3 [ 83.575746] ? kmem_cache_free.cold+0x1c/0x23 [ 83.580249] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 83.585799] ? __warn.cold+0x5/0x4a [ 83.589434] ? __warn+0xe8/0x1d0 [ 83.592805] ? kmem_cache_free.cold+0x1c/0x23 [ 83.597308] __warn.cold+0x20/0x4a [ 83.600859] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 83.606400] ? kmem_cache_free.cold+0x1c/0x23 [ 83.610903] report_bug+0x263/0x2b0 [ 83.614546] do_error_trap+0x204/0x360 [ 83.618441] ? math_error+0x340/0x340 [ 83.622253] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 83.627813] ? wake_up_klogd+0x99/0xd0 [ 83.631716] ? error_entry+0x76/0xd0 [ 83.635444] ? trace_hardirqs_off_caller+0x65/0x220 [ 83.640498] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 83.645367] do_invalid_op+0x1b/0x20 [ 83.649099] invalid_op+0x14/0x20 [ 83.652561] RIP: 0010:kmem_cache_free.cold+0x1c/0x23 [ 83.657674] Code: e8 95 ab 47 05 44 8b 6d c4 e9 74 a5 ff ff 48 8b 48 58 48 c7 c6 c0 44 54 87 48 c7 c7 78 66 38 88 49 8b 54 24 58 e8 44 3d b4 ff <0f> 0b e9 89 df ff ff 49 8b 4f 58 48 c7 c6 c0 44 54 87 48 c7 c7 78 [ 83.676589] RSP: 0018:ffff8880ae907cf8 EFLAGS: 00010286 [ 83.681964] RAX: 0000000000000046 RBX: ffff8880a510a0c0 RCX: 0000000000000000 [ 83.689241] RDX: 0000000000000000 RSI: ffffffff81559f66 RDI: ffffed1015d20f91 [ 83.696526] RBP: ffff8880ae907d18 R08: 0000000000000046 R09: ffffed1015d24fe9 [ 83.703807] R10: ffffed1015d24fe8 R11: ffff8880ae927f47 R12: ffff888095ea1000 [ 83.711178] R13: 0000000000000000 R14: ffff888095ea1000 R15: ffff8880a510a3d0 [ 83.718483] ? vprintk_func+0x86/0x189 [ 83.722393] ? kmem_cache_free.cold+0x1c/0x23 [ 83.726899] __sk_destruct+0x4b4/0x6d0 [ 83.730795] ? tipc_wait_for_connect.isra.0+0x4c0/0x4c0 [ 83.736172] sk_destruct+0x7b/0x90 [ 83.739726] __sk_free+0xce/0x300 [ 83.743198] sk_free+0x42/0x50 [ 83.746407] tipc_sk_callback+0x48/0x60 [ 83.750396] rcu_process_callbacks+0xba0/0x1a30 [ 83.755081] ? __rcu_read_unlock+0x170/0x170 [ 83.759504] ? __lock_is_held+0xb6/0x140 [ 83.763678] __do_softirq+0x25c/0x921 [ 83.767492] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 83.773039] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 83.778602] irq_exit+0x180/0x1d0 [ 83.782069] smp_apic_timer_interrupt+0x13b/0x550 [ 83.786918] apic_timer_interrupt+0xf/0x20 [ 83.791149] [ 83.793394] RIP: 0010:flush_tlb_mm_range+0x2dd/0x370 [ 83.798507] Code: 88 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 0f 85 84 00 00 00 48 83 3d a4 13 41 07 00 74 40 fb 66 0f 1f 44 00 00 31 fe ff ff e8 f2 43 cf ff e9 8c fe ff ff 48 c7 c7 74 77 3b 89 [ 83.817427] RSP: 0018:ffff888090e4f800 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 83.825184] RAX: 1ffffffff10e46cb RBX: 1ffff110121c9f02 RCX: 1ffff110115a7dd6 [ 83.832492] RDX: dffffc0000000000 RSI: ffff88808ad3ee90 RDI: ffff88808ad3ee3c [ 83.839779] RBP: ffff888090e4f8b8 R08: ffff88808ad3e5c0 R09: ffff88808ad3eeb0 [ 83.847059] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888090e4f890 [ 83.854341] R13: 00007ffffffff000 R14: 0000000000000001 R15: ffff8880a109d640 [ 83.861658] ? native_flush_tlb_others+0x420/0x420 [ 83.866612] ? kasan_check_write+0x14/0x20 [ 83.870864] ? do_raw_spin_lock+0xc8/0x240 [ 83.875124] move_page_tables+0x118f/0x1ae0 [ 83.879482] shift_arg_pages+0x1c8/0x490 [ 83.883563] ? do_open_execat+0x660/0x660 [ 83.887729] ? change_protection+0x24a0/0x24a0 [ 83.892335] ? lock_acquire+0x16f/0x3f0 [ 83.896323] ? setup_arg_pages+0x2aa/0x7f0 [ 83.900581] setup_arg_pages+0x668/0x7f0 [ 83.904655] ? shift_arg_pages+0x490/0x490 [ 83.908900] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 83.914445] ? get_random_u64+0x143/0x1d0 [ 83.918610] load_elf_binary+0xc34/0x51f0 [ 83.922772] ? lock_downgrade+0x810/0x810 [ 83.926937] ? search_binary_handler+0x130/0x570 [ 83.931714] ? notesize.isra.0+0x80/0x80 [ 83.935790] ? lock_downgrade+0x810/0x810 [ 83.939955] ? kasan_check_write+0x14/0x20 [ 83.944206] search_binary_handler+0x179/0x570 [ 83.948801] __do_execve_file.isra.0+0x1227/0x2150 [ 83.953746] ? prepare_bprm_creds+0x120/0x120 [ 83.958252] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 83.963798] ? getname_flags+0x277/0x5b0 [ 83.967869] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 83.973244] __x64_sys_execve+0x8f/0xc0 [ 83.977230] do_syscall_64+0xfd/0x620 [ 83.981044] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 83.986241] RIP: 0033:0x47c58b [ 83.989449] Code: Bad RIP value. [ 83.992810] RSP: 002b:000000c4202b5568 EFLAGS: 00000202 ORIG_RAX: 000000000000003b [ 84.000530] RAX: ffffffffffffffda RBX: 0000000000000022 RCX: 000000000047c58b [ 84.007809] RDX: 000000c42000c3b8 RSI: 000000c420214930 RDI: 000000c420096b60 [ 84.015095] RBP: 000000c4202b5670 R08: 0000000000000000 R09: 0000000000000000 [ 84.022370] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000472766 [ 84.029642] R13: 0000000000000064 R14: 0000000000000063 R15: 00000000000000aa [ 84.038231] Kernel Offset: disabled [ 84.041920] Rebooting in 86400 seconds..