IPVS: ftp: loaded support on port[0] = 21 BUG: unable to handle kernel NULL pointer dereference at 00000000000000d0 PGD 8000000142c22067 P4D 8000000142c22067 PUD 142c26067 PMD 0 Oops: 0000 [#1] SMP PTI CPU: 1 PID: 18677 Comm: syz-executor6 Not tainted 4.19.0-rc1+ #36 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:slab_equal_or_root mm/slab.h:228 [inline] RIP: 0010:cache_from_obj mm/slab.h:374 [inline] RIP: 0010:kmem_cache_free+0x2ce/0x2b60 mm/slub.c:2988 Code: e1 4c 31 e9 48 f7 d0 48 21 c8 0f 84 45 06 00 00 4d 39 ec 0f 84 47 01 00 00 49 8d 9c 24 d0 00 00 00 4d 85 f6 0f 85 a8 06 00 00 <4c> 8b 2b 48 89 df e8 77 6d 03 00 48 8b 00 48 0b 45 b0 74 16 4c 89 RSP: 0018:ffff8800a691f470 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 00000000000000d0 RCX: 0000000000000000 RDX: ffffffff8a11e000 RSI: 0000000000000001 RDI: ffffea0007080018 RBP: ffff8800a691f5d0 R08: 0000000000000000 R09: 0000000000000000 R10: 000077ff80000000 R11: ffffffff81356530 R12: 0000000000000000 R13: ffff8801d8a84780 R14: 0000000000000000 R15: 0000000000000000 FS: 00007fcc98437700(0000) GS:ffff88021fd00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000000000d0 CR3: 0000000142f08000 CR4: 00000000001406e0 DR0: 0000000020000000 DR1: 0000000020000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 Call Trace: vm_area_free+0x5f/0x70 kernel/fork.c:334 remove_vma mm/mmap.c:185 [inline] exit_mmap+0x815/0x940 mm/mmap.c:3104 __mmput+0x154/0x5f0 kernel/fork.c:1003 mmput+0xa7/0xe0 kernel/fork.c:1024 exit_mm+0x6dd/0x790 kernel/exit.c:546 do_exit+0xbf7/0x3890 kernel/exit.c:856 do_group_exit+0x1a0/0x350 kernel/exit.c:972 get_signal+0x1425/0x1ef0 kernel/signal.c:2513 do_signal+0x11d/0x2060 arch/x86/kernel/signal.c:816 exit_to_usermode_loop arch/x86/entry/common.c:162 [inline] prepare_exit_to_usermode+0x273/0x410 arch/x86/entry/common.c:197 syscall_return_slowpath+0xdb/0x700 arch/x86/entry/common.c:268 do_syscall_64+0x1ab/0x220 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x63/0xe7 RIP: 0033:0x457089 Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007fcc98436cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: 0000000000000001 RBX: 00000000009300a8 RCX: 0000000000457089 RDX: 0000000000000001 RSI: 0000000000000001 RDI: 00000000009300ac RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000009300ac R13: 0000000000a3fb9f R14: 00007fcc984379c0 R15: 0000000000000000 Modules linked in: Dumping ftrace buffer: (ftrace buffer empty) CR2: 00000000000000d0 ---[ end trace cc9c51e2fe61a195 ]--- RIP: 0010:slab_equal_or_root mm/slab.h:228 [inline] RIP: 0010:cache_from_obj mm/slab.h:374 [inline] RIP: 0010:kmem_cache_free+0x2ce/0x2b60 mm/slub.c:2988 Code: e1 4c 31 e9 48 f7 d0 48 21 c8 0f 84 45 06 00 00 4d 39 ec 0f 84 47 01 00 00 49 8d 9c 24 d0 00 00 00 4d 85 f6 0f 85 a8 06 00 00 <4c> 8b 2b 48 89 df e8 77 6d 03 00 48 8b 00 48 0b 45 b0 74 16 4c 89 RSP: 0018:ffff8800a691f470 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 00000000000000d0 RCX: 0000000000000000 RDX: ffffffff8a11e000 RSI: 0000000000000001 RDI: ffffea0007080018 RBP: ffff8800a691f5d0 R08: 0000000000000000 R09: 0000000000000000 R10: 000077ff80000000 R11: ffffffff81356530 R12: 0000000000000000 R13: ffff8801d8a84780 R14: 0000000000000000 R15: 0000000000000000 FS: 00007fcc98437700(0000) GS:ffff88021fd00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000000000d0 CR3: 0000000142f08000 CR4: 00000000001406e0 DR0: 0000000020000000 DR1: 0000000020000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600