[info] Using makefile-style concurrent boot in runlevel 2. [ 26.043442] audit: type=1800 audit(1544463234.859:21): pid=5837 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2419 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.59' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 39.315820] Started in network mode [ 39.319920] Own node identity 00000000000000000000000000000001, cluster identity 4711 [ 39.329318] New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 39.336434] ================================================================== [ 39.343848] BUG: KASAN: use-after-free in kfree_skb+0xb7/0x580 [ 39.349808] Read of size 4 at addr ffff8881b387eae4 by task syz-executor306/5992 [ 39.357325] [ 39.358948] CPU: 1 PID: 5992 Comm: syz-executor306 Not tainted 4.20.0-rc6+ #370 [ 39.366373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 39.375708] Call Trace: [ 39.378292] dump_stack+0x244/0x39d [ 39.381905] ? dump_stack_print_info.cold.1+0x20/0x20 [ 39.387074] ? printk+0xa7/0xcf [ 39.390342] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 39.395176] print_address_description.cold.7+0x9/0x1ff [ 39.400551] kasan_report.cold.8+0x242/0x309 [ 39.404959] ? kfree_skb+0xb7/0x580 [ 39.408575] check_memory_region+0x13e/0x1b0 [ 39.412974] kasan_check_read+0x11/0x20 [ 39.417070] kfree_skb+0xb7/0x580 [ 39.420513] ? __kfree_skb+0x20/0x20 [ 39.424384] ? skb_tstamp_tx+0x50/0x50 [ 39.428283] tipc_udp_send_msg+0x5a6/0x670 [ 39.432523] ? tipc_udp_xmit.isra.14+0xef0/0xef0 [ 39.437284] ? bearer_get+0x2f8/0x4e0 [ 39.441077] ? __tipc_nl_add_media+0xca0/0xca0 [ 39.445652] ? kasan_check_read+0x11/0x20 [ 39.449790] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 39.455104] ? rcu_softirq_qs+0x20/0x20 [ 39.459084] ? tipc_disc_remove_dest+0x120/0x120 [ 39.463828] ? tipc_enable_bearer+0x90d/0xf10 [ 39.468326] ? rcu_read_lock_sched_held+0x14f/0x180 [ 39.473335] tipc_bearer_xmit_skb+0x171/0x350 [ 39.477823] tipc_enable_bearer+0xc5e/0xf10 [ 39.482138] ? mutex_trylock+0x2b0/0x2b0 [ 39.486187] ? tipc_bearer_xmit_skb+0x350/0x350 [ 39.490868] ? nla_memcmp+0x90/0x90 [ 39.494494] ? lock_release+0xa00/0xa00 [ 39.498459] ? perf_trace_sched_process_exec+0x860/0x860 [ 39.503901] ? mark_held_locks+0x130/0x130 [ 39.508132] ? check_preemption_disabled+0x48/0x280 [ 39.513165] __tipc_nl_bearer_enable+0x37c/0x4a0 [ 39.517924] ? __tipc_nl_bearer_enable+0x37c/0x4a0 [ 39.522850] ? tipc_nl_bearer_disable+0x30/0x30 [ 39.527515] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 39.533133] ? __nla_parse+0x12c/0x3e0 [ 39.537024] tipc_nl_bearer_enable+0x22/0x30 [ 39.541476] genl_family_rcv_msg+0x8a7/0x11a0 [ 39.545979] ? genl_unregister_family+0x8a0/0x8a0 [ 39.550813] ? lock_downgrade+0x900/0x900 [ 39.554951] ? check_preemption_disabled+0x48/0x280 [ 39.559968] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 39.564894] ? kasan_check_read+0x11/0x20 [ 39.569093] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 39.574379] ? rcu_softirq_qs+0x20/0x20 [ 39.578510] genl_rcv_msg+0xc6/0x168 [ 39.582225] netlink_rcv_skb+0x172/0x440 [ 39.586292] ? genl_family_rcv_msg+0x11a0/0x11a0 [ 39.591049] ? netlink_ack+0xb80/0xb80 [ 39.594929] ? down_read+0x8d/0x120 [ 39.598551] genl_rcv+0x28/0x40 [ 39.601831] netlink_unicast+0x5a5/0x760 [ 39.605881] ? netlink_attachskb+0x9a0/0x9a0 [ 39.610294] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 39.615830] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 39.620901] netlink_sendmsg+0xa18/0xfc0 [ 39.625059] ? netlink_unicast+0x760/0x760 [ 39.629283] ? aa_sock_msg_perm.isra.14+0xba/0x160 [ 39.634202] ? apparmor_socket_sendmsg+0x29/0x30 [ 39.639050] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 39.644588] ? security_socket_sendmsg+0x94/0xc0 [ 39.649345] ? netlink_unicast+0x760/0x760 [ 39.653582] sock_sendmsg+0xd5/0x120 [ 39.657291] ___sys_sendmsg+0x7fd/0x930 [ 39.661271] ? copy_msghdr_from_user+0x580/0x580 [ 39.666025] ? blkcg_maybe_throttle_current+0xa38/0x1080 [ 39.671485] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 39.677023] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 39.682553] ? __fget_light+0x2e9/0x430 [ 39.686576] ? fget_raw+0x20/0x20 [ 39.690036] ? task_work_run+0x1af/0x2a0 [ 39.694095] ? _raw_spin_unlock_irq+0x27/0x80 [ 39.698576] ? _raw_spin_unlock_irq+0x27/0x80 [ 39.703058] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 39.707628] ? trace_hardirqs_on+0xbd/0x310 [ 39.711939] ? kasan_check_read+0x11/0x20 [ 39.716088] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 39.721633] ? sockfd_lookup_light+0xc5/0x160 [ 39.726121] __sys_sendmsg+0x11d/0x280 [ 39.730002] ? __ia32_sys_shutdown+0x80/0x80 [ 39.734405] ? do_syscall_64+0x6be/0x820 [ 39.738560] ? trace_hardirqs_on+0x310/0x310 [ 39.742974] ? do_syscall_64+0x9a/0x820 [ 39.747019] ? do_syscall_64+0x9a/0x820 [ 39.751003] ? trace_hardirqs_off_caller+0x310/0x310 [ 39.756099] __x64_sys_sendmsg+0x78/0xb0 [ 39.760150] do_syscall_64+0x1b9/0x820 [ 39.764037] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 39.769555] ? syscall_return_slowpath+0x5e0/0x5e0 [ 39.774479] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 39.779312] ? trace_hardirqs_on_caller+0x310/0x310 [ 39.784319] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 39.789411] ? prepare_exit_to_usermode+0x291/0x3b0 [ 39.794512] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 39.799359] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 39.804539] RIP: 0033:0x4446f9 [ 39.807732] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 1b d8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 39.826624] RSP: 002b:00007ffe705f7a98 EFLAGS: 00000213 ORIG_RAX: 000000000000002e [ 39.834326] RAX: ffffffffffffffda RBX: 00000000004002e0 RCX: 00000000004446f9 [ 39.841598] RDX: 0000000000000000 RSI: 0000000020000700 RDI: 0000000000000003 [ 39.848868] RBP: 00000000006cf018 R08: 0000000000000000 R09: 00000000004002e0 [ 39.856209] R10: 0000000000000000 R11: 0000000000000213 R12: 00000000004023a0 [ 39.863495] R13: 0000000000402430 R14: 0000000000000000 R15: 0000000000000000 [ 39.870764] [ 39.872387] Allocated by task 5992: [ 39.876049] save_stack+0x43/0xd0 [ 39.879495] kasan_kmalloc+0xc7/0xe0 [ 39.883197] kasan_slab_alloc+0x12/0x20 [ 39.887161] kmem_cache_alloc_node+0x144/0x730 [ 39.891739] __alloc_skb+0x119/0x770 [ 39.895446] __pskb_copy_fclone+0x16b/0xeb0 [ 39.899764] tipc_udp_send_msg+0x44e/0x670 [ 39.903986] tipc_bearer_xmit_skb+0x171/0x350 [ 39.908465] tipc_enable_bearer+0xc5e/0xf10 [ 39.912777] __tipc_nl_bearer_enable+0x37c/0x4a0 [ 39.917524] tipc_nl_bearer_enable+0x22/0x30 [ 39.921919] genl_family_rcv_msg+0x8a7/0x11a0 [ 39.926395] genl_rcv_msg+0xc6/0x168 [ 39.930094] netlink_rcv_skb+0x172/0x440 [ 39.934137] genl_rcv+0x28/0x40 [ 39.937416] netlink_unicast+0x5a5/0x760 [ 39.941556] netlink_sendmsg+0xa18/0xfc0 [ 39.945629] sock_sendmsg+0xd5/0x120 [ 39.949333] ___sys_sendmsg+0x7fd/0x930 [ 39.953296] __sys_sendmsg+0x11d/0x280 [ 39.957170] __x64_sys_sendmsg+0x78/0xb0 [ 39.961236] do_syscall_64+0x1b9/0x820 [ 39.965120] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 39.970289] [ 39.971902] Freed by task 5992: [ 39.975170] save_stack+0x43/0xd0 [ 39.978609] __kasan_slab_free+0x102/0x150 [ 39.982826] kasan_slab_free+0xe/0x10 [ 39.986609] kmem_cache_free+0x83/0x290 [ 39.990569] kfree_skbmem+0x154/0x230 [ 39.994519] kfree_skb+0x1c3/0x580 [ 39.998065] tipc_udp_xmit.isra.14+0x420/0xef0 [ 40.002640] tipc_udp_send_msg+0x398/0x670 [ 40.006951] tipc_bearer_xmit_skb+0x171/0x350 [ 40.011437] tipc_enable_bearer+0xc5e/0xf10 [ 40.015807] __tipc_nl_bearer_enable+0x37c/0x4a0 [ 40.020564] tipc_nl_bearer_enable+0x22/0x30 [ 40.024967] genl_family_rcv_msg+0x8a7/0x11a0 [ 40.029615] genl_rcv_msg+0xc6/0x168 [ 40.033376] netlink_rcv_skb+0x172/0x440 [ 40.037434] genl_rcv+0x28/0x40 [ 40.040702] netlink_unicast+0x5a5/0x760 [ 40.044919] netlink_sendmsg+0xa18/0xfc0 [ 40.048975] sock_sendmsg+0xd5/0x120 [ 40.052678] ___sys_sendmsg+0x7fd/0x930 [ 40.056636] __sys_sendmsg+0x11d/0x280 [ 40.060513] __x64_sys_sendmsg+0x78/0xb0 [ 40.064562] do_syscall_64+0x1b9/0x820 [ 40.068442] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 40.073676] [ 40.075297] The buggy address belongs to the object at ffff8881b387ea00 [ 40.075297] which belongs to the cache skbuff_head_cache of size 232 [ 40.088467] The buggy address is located 228 bytes inside of [ 40.088467] 232-byte region [ffff8881b387ea00, ffff8881b387eae8) [ 40.100329] The buggy address belongs to the page: [ 40.105331] page:ffffea0006ce1f80 count:1 mapcount:0 mapping:ffff8881d9be8780 index:0x0 [ 40.113649] flags: 0x2fffc0000000200(slab) [ 40.117876] raw: 02fffc0000000200 ffffea000744d908 ffff8881d9bda048 ffff8881d9be8780 [ 40.125873] raw: 0000000000000000 ffff8881b387e000 000000010000000c 0000000000000000 [ 40.133869] page dumped because: kasan: bad access detected [ 40.139565] [ 40.141175] Memory state around the buggy address: [ 40.146219] ffff8881b387e980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 40.153693] ffff8881b387ea00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 40.161149] >ffff8881b387ea80: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 40.168494] ^ [ 40.174983] ffff8881b387eb00: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00 [ 40.182445] ffff8881b387eb80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 40.189917] ================================================================== [ 40.197263] Disabling lock debugging due to kernel taint [ 40.202850] ================================================================== [ 40.210231] BUG: KASAN: double-free or invalid-free in skb_free_head+0x99/0xc0 [ 40.217572] [ 40.219189] CPU: 1 PID: 5992 Comm: syz-executor306 Tainted: G B 4.20.0-rc6+ #370 [ 40.228086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 40.237440] Call Trace: [ 40.240009] [ 40.242146] dump_stack+0x244/0x39d [ 40.245757] ? dump_stack_print_info.cold.1+0x20/0x20 [ 40.250929] ? printk+0xa7/0xcf [ 40.254190] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 40.258935] ? debug_check_no_obj_freed+0x305/0x58d [ 40.264056] print_address_description.cold.7+0x9/0x1ff [ 40.269412] ? skb_free_head+0x99/0xc0 [ 40.273383] kasan_report_invalid_free+0x64/0xa0 [ 40.278134] ? skb_free_head+0x99/0xc0 [ 40.282007] __kasan_slab_free+0x13a/0x150 [ 40.286726] ? skb_free_head+0x99/0xc0 [ 40.290699] kasan_slab_free+0xe/0x10 [ 40.294590] kfree+0xcf/0x230 [ 40.297691] skb_free_head+0x99/0xc0 [ 40.301392] skb_release_data+0x70c/0x9a0 [ 40.305530] ? __copy_skb_header+0x350/0x6b0 [ 40.310272] ? skb_tx_error+0x410/0x410 [ 40.314237] ? tipc_udp_xmit.isra.14+0x425/0xef0 [ 40.318977] ? kasan_end_report+0x32/0x4f [ 40.323225] ? kasan_report.cold.8+0x76/0x309 [ 40.327723] skb_release_all+0x4a/0x60 [ 40.331597] kfree_skb+0x1bb/0x580 [ 40.335121] ? tipc_udp_send_msg+0x5a6/0x670 [ 40.339517] ? __kfree_skb+0x20/0x20 [ 40.343223] ? skb_tstamp_tx+0x50/0x50 [ 40.347104] tipc_udp_send_msg+0x5a6/0x670 [ 40.351445] ? tipc_udp_xmit.isra.14+0xef0/0xef0 [ 40.356200] ? bearer_get+0x2f8/0x4e0 [ 40.359994] ? __tipc_nl_add_media+0xca0/0xca0 [ 40.364659] ? skb_clone+0x21a/0x500 [ 40.368672] ? _raw_spin_unlock_bh+0x30/0x40 [ 40.373077] ? trace_hardirqs_off_caller+0x310/0x310 [ 40.378166] ? do_raw_spin_trylock+0x270/0x270 [ 40.382743] tipc_bearer_xmit_skb+0x171/0x350 [ 40.387229] tipc_disc_timeout+0xb2b/0xfc0 [ 40.391463] ? tipc_disc_msg_xmit.isra.19+0x180/0x180 [ 40.396644] ? lock_acquire+0x1ed/0x520 [ 40.400603] ? call_timer_fn+0x1db/0x920 [ 40.404646] ? lock_downgrade+0x900/0x900 [ 40.408781] ? kasan_check_read+0x11/0x20 [ 40.412912] ? lock_release+0xa00/0xa00 [ 40.416866] ? __lock_is_held+0xb5/0x140 [ 40.420911] call_timer_fn+0x272/0x920 [ 40.424904] ? tipc_disc_msg_xmit.isra.19+0x180/0x180 [ 40.430088] ? process_timeout+0x40/0x40 [ 40.434145] ? trace_hardirqs_off+0xb8/0x310 [ 40.438675] ? kasan_check_read+0x11/0x20 [ 40.442823] ? do_raw_spin_unlock+0xa7/0x330 [ 40.447225] ? trace_hardirqs_on+0x310/0x310 [ 40.451637] ? __run_timers+0x7da/0xc70 [ 40.455614] ? lock_downgrade+0x900/0x900 [ 40.459756] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 40.464855] ? trace_hardirqs_on+0xbd/0x310 [ 40.469231] ? kasan_check_read+0x11/0x20 [ 40.473380] ? __run_timers+0x7da/0xc70 [ 40.477349] ? trace_hardirqs_off_caller+0x310/0x310 [ 40.482572] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 40.488226] ? tipc_disc_msg_xmit.isra.19+0x180/0x180 [ 40.493526] __run_timers+0x7e5/0xc70 [ 40.497413] ? timer_fixup_init+0x70/0x70 [ 40.501643] ? kasan_check_read+0x11/0x20 [ 40.505776] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 40.511065] ? rcu_softirq_qs+0x20/0x20 [ 40.515039] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 40.520569] ? check_preemption_disabled+0x48/0x280 [ 40.525577] ? rcu_irq_exit+0x1a2/0x390 [ 40.529656] ? ret_from_intr+0xb/0x1e [ 40.533475] ? retint_kernel+0x2d/0x2d [ 40.537353] ? trace_hardirqs_on_caller+0xc0/0x310 [ 40.542271] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 40.547129] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 40.552590] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 40.558122] ? check_preemption_disabled+0x48/0x280 [ 40.563230] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 40.568002] ? retint_kernel+0x2d/0x2d [ 40.571885] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 40.577413] ? check_preemption_disabled+0x48/0x280 [ 40.582430] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 40.587983] run_timer_softirq+0x52/0xb0 [ 40.592036] ? __this_cpu_preempt_check+0x1c/0x20 [ 40.596968] __do_softirq+0x308/0xb7e [ 40.600777] ? ktime_get_raw_ts64+0x4d0/0x4d0 [ 40.605276] ? lock_downgrade+0x900/0x900 [ 40.609429] ? __irqentry_text_end+0x1f9658/0x1f9658 [ 40.614534] ? pvclock_read_flags+0x160/0x160 [ 40.619021] ? lapic_next_event+0x5a/0x90 [ 40.623161] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 40.628761] ? clockevents_program_event+0x140/0x370 [ 40.633883] ? kvm_clock_read+0x18/0x30 [ 40.637852] ? kvm_sched_clock_read+0x9/0x20 [ 40.642251] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 40.647783] ? check_preemption_disabled+0x48/0x280 [ 40.652876] irq_exit+0x17f/0x1c0 [ 40.656436] smp_apic_timer_interrupt+0x1cb/0x760 [ 40.661290] ? smp_reschedule_interrupt+0x109/0x650 [ 40.666314] ? smp_call_function_single_interrupt+0x650/0x650 [ 40.672302] ? interrupt_entry+0xb5/0xc0 [ 40.676452] ? trace_hardirqs_off_caller+0xbb/0x310 [ 40.681478] ? trace_hardirqs_off_caller+0xbb/0x310 [ 40.686553] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 40.691473] ? trace_hardirqs_on_caller+0x310/0x310 [ 40.696603] ? trace_hardirqs_on_caller+0x310/0x310 [ 40.701608] ? task_prio+0x50/0x50 [ 40.705250] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 40.710782] ? check_preemption_disabled+0x48/0x280 [ 40.715794] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 40.720631] apic_timer_interrupt+0xf/0x20 [ 40.724959] [ 40.727191] RIP: 0010:_raw_spin_unlock_irqrestore+0xaf/0xd0 [ 40.732898] Code: f0 00 52 89 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 28 48 83 3d 18 ef 76 01 00 74 15 48 89 df 57 9d <0f> 1f 44 00 00 eb ad e8 1c 6b 25 f9 eb bb 0f 0b 0f 0b e8 9a d7 e7 [ 40.751894] RSP: 0018:ffff8881b2ae6de8 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 40.759595] RAX: dffffc0000000000 RBX: 0000000000000286 RCX: ffffffff8185acea [ 40.766966] RDX: 1ffffffff12a401e RSI: ffffffff8185ad04 RDI: 0000000000000286 [ 40.774233] RBP: ffff8881b2ae6df8 R08: ffff8881b3888240 R09: fffffbfff12c7248 [ 40.781543] R10: fffffbfff12c7248 R11: ffffffff89639243 R12: ffffffff89639240 [ 40.789095] R13: 0000000000000000 R14: ffff8881b387eae4 R15: ffff8881b387eae4 [ 40.797258] ? trace_hardirqs_on+0x9a/0x310 [ 40.801575] ? trace_hardirqs_on+0xb4/0x310 [ 40.805961] kasan_end_report+0x32/0x4f [ 40.809941] kasan_report.cold.8+0x76/0x309 [ 40.814251] ? kfree_skb+0xb7/0x580 [ 40.817883] check_memory_region+0x13e/0x1b0 [ 40.822298] kasan_check_read+0x11/0x20 [ 40.826264] kfree_skb+0xb7/0x580 [ 40.829716] ? __kfree_skb+0x20/0x20 [ 40.833422] ? skb_tstamp_tx+0x50/0x50 [ 40.837313] tipc_udp_send_msg+0x5a6/0x670 [ 40.841649] ? tipc_udp_xmit.isra.14+0xef0/0xef0 [ 40.846465] ? bearer_get+0x2f8/0x4e0 [ 40.850273] ? __tipc_nl_add_media+0xca0/0xca0 [ 40.854866] ? kasan_check_read+0x11/0x20 [ 40.859176] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 40.864572] ? rcu_softirq_qs+0x20/0x20 [ 40.868540] ? tipc_disc_remove_dest+0x120/0x120 [ 40.873282] ? tipc_enable_bearer+0x90d/0xf10 [ 40.877768] ? rcu_read_lock_sched_held+0x14f/0x180 [ 40.882785] tipc_bearer_xmit_skb+0x171/0x350 [ 40.887277] tipc_enable_bearer+0xc5e/0xf10 [ 40.891593] ? mutex_trylock+0x2b0/0x2b0 [ 40.895652] ? tipc_bearer_xmit_skb+0x350/0x350 [ 40.900327] ? nla_memcmp+0x90/0x90 [ 40.904116] ? lock_release+0xa00/0xa00 [ 40.908452] ? perf_trace_sched_process_exec+0x860/0x860 [ 40.913897] ? mark_held_locks+0x130/0x130 [ 40.918119] ? check_preemption_disabled+0x48/0x280 [ 40.923139] __tipc_nl_bearer_enable+0x37c/0x4a0 [ 40.927903] ? __tipc_nl_bearer_enable+0x37c/0x4a0 [ 40.932824] ? tipc_nl_bearer_disable+0x30/0x30 [ 40.937489] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 40.943022] ? __nla_parse+0x12c/0x3e0 [ 40.946903] tipc_nl_bearer_enable+0x22/0x30 [ 40.951405] genl_family_rcv_msg+0x8a7/0x11a0 [ 40.955889] ? genl_unregister_family+0x8a0/0x8a0 [ 40.960825] ? lock_downgrade+0x900/0x900 [ 40.964979] ? check_preemption_disabled+0x48/0x280 [ 40.969996] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 40.975000] ? kasan_check_read+0x11/0x20 [ 40.979157] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 40.984576] ? rcu_softirq_qs+0x20/0x20 [ 40.988556] genl_rcv_msg+0xc6/0x168 [ 40.992373] netlink_rcv_skb+0x172/0x440 [ 40.996423] ? genl_family_rcv_msg+0x11a0/0x11a0 [ 41.001243] ? netlink_ack+0xb80/0xb80 [ 41.005147] ? down_read+0x8d/0x120 [ 41.008770] genl_rcv+0x28/0x40 [ 41.012036] netlink_unicast+0x5a5/0x760 [ 41.016080] ? netlink_attachskb+0x9a0/0x9a0 [ 41.020614] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 41.026317] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 41.031327] netlink_sendmsg+0xa18/0xfc0 [ 41.035569] ? netlink_unicast+0x760/0x760 [ 41.039799] ? aa_sock_msg_perm.isra.14+0xba/0x160 [ 41.044725] ? apparmor_socket_sendmsg+0x29/0x30 [ 41.049475] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 41.055005] ? security_socket_sendmsg+0x94/0xc0 [ 41.059744] ? netlink_unicast+0x760/0x760 [ 41.063964] sock_sendmsg+0xd5/0x120 [ 41.067726] ___sys_sendmsg+0x7fd/0x930 [ 41.071707] ? copy_msghdr_from_user+0x580/0x580 [ 41.076466] ? blkcg_maybe_throttle_current+0xa38/0x1080 [ 41.081911] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 41.087437] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 41.092966] ? __fget_light+0x2e9/0x430 [ 41.096942] ? fget_raw+0x20/0x20 [ 41.100393] ? task_work_run+0x1af/0x2a0 [ 41.104455] ? _raw_spin_unlock_irq+0x27/0x80 [ 41.108938] ? _raw_spin_unlock_irq+0x27/0x80 [ 41.113420] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 41.117995] ? trace_hardirqs_on+0xbd/0x310 [ 41.122302] ? kasan_check_read+0x11/0x20 [ 41.126441] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 41.131973] ? sockfd_lookup_light+0xc5/0x160 [ 41.136456] __sys_sendmsg+0x11d/0x280 [ 41.140411] ? __ia32_sys_shutdown+0x80/0x80 [ 41.144828] ? do_syscall_64+0x6be/0x820 [ 41.148880] ? trace_hardirqs_on+0x310/0x310 [ 41.153277] ? do_syscall_64+0x9a/0x820 [ 41.157335] ? do_syscall_64+0x9a/0x820 [ 41.161311] ? trace_hardirqs_off_caller+0x310/0x310 [ 41.166406] __x64_sys_sendmsg+0x78/0xb0 [ 41.170454] do_syscall_64+0x1b9/0x820 [ 41.174334] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 41.179780] ? syscall_return_slowpath+0x5e0/0x5e0 [ 41.184708] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 41.189593] ? trace_hardirqs_on_caller+0x310/0x310 [ 41.194618] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 41.199628] ? prepare_exit_to_usermode+0x291/0x3b0 [ 41.204634] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 41.209462] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 41.214635] RIP: 0033:0x4446f9 [ 41.217815] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 1b d8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 41.236921] RSP: 002b:00007ffe705f7a98 EFLAGS: 00000213 ORIG_RAX: 000000000000002e [ 41.244616] RAX: ffffffffffffffda RBX: 00000000004002e0 RCX: 00000000004446f9 [ 41.251877] RDX: 0000000000000000 RSI: 0000000020000700 RDI: 0000000000000003 [ 41.259139] RBP: 00000000006cf018 R08: 0000000000000000 R09: 00000000004002e0 [ 41.266397] R10: 0000000000000000 R11: 0000000000000213 R12: 00000000004023a0 [ 41.273655] R13: 0000000000402430 R14: 0000000000000000 R15: 0000000000000000 [ 41.280982] [ 41.282602] Allocated by task 5992: [ 41.286221] save_stack+0x43/0xd0 [ 41.289664] kasan_kmalloc+0xc7/0xe0 [ 41.293369] __kmalloc_node_track_caller+0x50/0x70 [ 41.298285] __kmalloc_reserve.isra.40+0x41/0xe0 [ 41.303029] __alloc_skb+0x155/0x770 [ 41.306723] __pskb_copy_fclone+0x16b/0xeb0 [ 41.311044] tipc_udp_send_msg+0x44e/0x670 [ 41.315272] tipc_bearer_xmit_skb+0x171/0x350 [ 41.319840] tipc_disc_timeout+0xb2b/0xfc0 [ 41.324082] call_timer_fn+0x272/0x920 [ 41.327973] __run_timers+0x7e5/0xc70 [ 41.331765] run_timer_softirq+0x52/0xb0 [ 41.336034] __do_softirq+0x308/0xb7e [ 41.339822] [ 41.341438] Freed by task 5992: [ 41.344707] save_stack+0x43/0xd0 [ 41.348229] __kasan_slab_free+0x102/0x150 [ 41.352463] kasan_slab_free+0xe/0x10 [ 41.356259] kfree+0xcf/0x230 [ 41.359351] skb_free_head+0x99/0xc0 [ 41.363051] skb_release_data+0x70c/0x9a0 [ 41.367178] skb_release_all+0x4a/0x60 [ 41.371045] kfree_skb+0x1bb/0x580 [ 41.374571] tipc_udp_xmit.isra.14+0x420/0xef0 [ 41.379133] tipc_udp_send_msg+0x398/0x670 [ 41.383347] tipc_bearer_xmit_skb+0x171/0x350 [ 41.387821] tipc_disc_timeout+0xb2b/0xfc0 [ 41.392044] call_timer_fn+0x272/0x920 [ 41.395911] __run_timers+0x7e5/0xc70 [ 41.399690] run_timer_softirq+0x52/0xb0 [ 41.403730] __do_softirq+0x308/0xb7e [ 41.407504] [ 41.409117] The buggy address belongs to the object at ffff8881c393e480 [ 41.409117] which belongs to the cache kmalloc-1k of size 1024 [ 41.421756] The buggy address is located 0 bytes inside of [ 41.421756] 1024-byte region [ffff8881c393e480, ffff8881c393e880) [ 41.433520] The buggy address belongs to the page: [ 41.438429] page:ffffea00070e4f80 count:1 mapcount:0 mapping:ffff8881da800ac0 index:0x0 compound_mapcount: 0 [ 41.448378] flags: 0x2fffc0000010200(slab|head) [ 41.453033] raw: 02fffc0000010200 ffffea00070f3b88 ffffea000709b388 ffff8881da800ac0 [ 41.461056] raw: 0000000000000000 ffff8881c393e000 0000000100000007 0000000000000000 [ 41.468921] page dumped because: kasan: bad access detected [ 41.474620] [ 41.476233] Memory state around the buggy address: [ 41.481147] ffff8881c393e380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 41.488564] ffff8881c393e400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 41.495921] >ffff8881c393e480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 41.503257] ^ [ 41.506604] ffff8881c393e500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 41.514020] ffff8881c393e580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 41.521372] ================================================================== [ 41.528789] Kernel panic - not syncing: panic_on_warn set ... [ 41.534840] CPU: 1 PID: 5992 Comm: syz-executor306 Tainted: G B 4.20.0-rc6+ #370 [ 41.543660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 41.552996] Call Trace: [ 41.555564] [ 41.557706] dump_stack+0x244/0x39d [ 41.561335] ? dump_stack_print_info.cold.1+0x20/0x20 [ 41.566760] ? skb_free_head+0x30/0xc0 [ 41.570651] panic+0x2ad/0x55c [ 41.573829] ? add_taint.cold.5+0x16/0x16 [ 41.577972] ? print_shadow_for_address+0xb6/0x116 [ 41.582892] ? trace_hardirqs_off+0xaf/0x310 [ 41.587307] ? skb_free_head+0x99/0xc0 [ 41.591186] kasan_end_report+0x47/0x4f [ 41.595333] kasan_report_invalid_free+0x81/0xa0 [ 41.600099] ? skb_free_head+0x99/0xc0 [ 41.603975] __kasan_slab_free+0x13a/0x150 [ 41.608315] ? skb_free_head+0x99/0xc0 [ 41.612200] kasan_slab_free+0xe/0x10 [ 41.616080] kfree+0xcf/0x230 [ 41.619198] skb_free_head+0x99/0xc0 [ 41.622906] skb_release_data+0x70c/0x9a0 [ 41.627043] ? __copy_skb_header+0x350/0x6b0 [ 41.631445] ? skb_tx_error+0x410/0x410 [ 41.635429] ? tipc_udp_xmit.isra.14+0x425/0xef0 [ 41.640193] ? kasan_end_report+0x32/0x4f [ 41.644327] ? kasan_report.cold.8+0x76/0x309 [ 41.648934] skb_release_all+0x4a/0x60 [ 41.652808] kfree_skb+0x1bb/0x580 [ 41.656338] ? tipc_udp_send_msg+0x5a6/0x670 [ 41.660736] ? __kfree_skb+0x20/0x20 [ 41.664440] ? skb_tstamp_tx+0x50/0x50 [ 41.668416] tipc_udp_send_msg+0x5a6/0x670 [ 41.672660] ? tipc_udp_xmit.isra.14+0xef0/0xef0 [ 41.677413] ? bearer_get+0x2f8/0x4e0 [ 41.681205] ? __tipc_nl_add_media+0xca0/0xca0 [ 41.685871] ? skb_clone+0x21a/0x500 [ 41.689589] ? _raw_spin_unlock_bh+0x30/0x40 [ 41.694104] ? trace_hardirqs_off_caller+0x310/0x310 [ 41.699206] ? do_raw_spin_trylock+0x270/0x270 [ 41.703783] tipc_bearer_xmit_skb+0x171/0x350 [ 41.708268] tipc_disc_timeout+0xb2b/0xfc0 [ 41.712609] ? tipc_disc_msg_xmit.isra.19+0x180/0x180 [ 41.717976] ? lock_acquire+0x1ed/0x520 [ 41.721946] ? call_timer_fn+0x1db/0x920 [ 41.725997] ? lock_downgrade+0x900/0x900 [ 41.730140] ? kasan_check_read+0x11/0x20 [ 41.734278] ? lock_release+0xa00/0xa00 [ 41.738241] ? __lock_is_held+0xb5/0x140 [ 41.742367] call_timer_fn+0x272/0x920 [ 41.746259] ? tipc_disc_msg_xmit.isra.19+0x180/0x180 [ 41.751545] ? process_timeout+0x40/0x40 [ 41.755612] ? trace_hardirqs_off+0xb8/0x310 [ 41.760010] ? kasan_check_read+0x11/0x20 [ 41.764154] ? do_raw_spin_unlock+0xa7/0x330 [ 41.768630] ? trace_hardirqs_on+0x310/0x310 [ 41.773042] ? __run_timers+0x7da/0xc70 [ 41.777020] ? lock_downgrade+0x900/0x900 [ 41.781173] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 41.786274] ? trace_hardirqs_on+0xbd/0x310 [ 41.790589] ? kasan_check_read+0x11/0x20 [ 41.794834] ? __run_timers+0x7da/0xc70 [ 41.798885] ? trace_hardirqs_off_caller+0x310/0x310 [ 41.803988] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 41.809521] ? tipc_disc_msg_xmit.isra.19+0x180/0x180 [ 41.814708] __run_timers+0x7e5/0xc70 [ 41.818509] ? timer_fixup_init+0x70/0x70 [ 41.822725] ? kasan_check_read+0x11/0x20 [ 41.826867] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 41.832134] ? rcu_softirq_qs+0x20/0x20 [ 41.836107] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 41.841741] ? check_preemption_disabled+0x48/0x280 [ 41.846818] ? rcu_irq_exit+0x1a2/0x390 [ 41.850791] ? ret_from_intr+0xb/0x1e [ 41.854577] ? retint_kernel+0x2d/0x2d [ 41.858454] ? trace_hardirqs_on_caller+0xc0/0x310 [ 41.863376] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 41.868122] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 41.873565] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 41.879235] ? check_preemption_disabled+0x48/0x280 [ 41.884256] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 41.889653] ? retint_kernel+0x2d/0x2d [ 41.893626] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 41.899170] ? check_preemption_disabled+0x48/0x280 [ 41.904175] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 41.909702] run_timer_softirq+0x52/0xb0 [ 41.913751] ? __this_cpu_preempt_check+0x1c/0x20 [ 41.918578] __do_softirq+0x308/0xb7e [ 41.922378] ? ktime_get_raw_ts64+0x4d0/0x4d0 [ 41.926871] ? lock_downgrade+0x900/0x900 [ 41.931010] ? __irqentry_text_end+0x1f9658/0x1f9658 [ 41.936214] ? pvclock_read_flags+0x160/0x160 [ 41.940713] ? lapic_next_event+0x5a/0x90 [ 41.944963] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 41.950502] ? clockevents_program_event+0x140/0x370 [ 41.955594] ? kvm_clock_read+0x18/0x30 [ 41.959557] ? kvm_sched_clock_read+0x9/0x20 [ 41.964043] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 41.969745] ? check_preemption_disabled+0x48/0x280 [ 41.974753] irq_exit+0x17f/0x1c0 [ 41.978201] smp_apic_timer_interrupt+0x1cb/0x760 [ 41.983035] ? smp_reschedule_interrupt+0x109/0x650 [ 41.988050] ? smp_call_function_single_interrupt+0x650/0x650 [ 41.994020] ? interrupt_entry+0xb5/0xc0 [ 41.998078] ? trace_hardirqs_off_caller+0xbb/0x310 [ 42.003344] ? trace_hardirqs_off_caller+0xbb/0x310 [ 42.008471] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 42.013491] ? trace_hardirqs_on_caller+0x310/0x310 [ 42.018510] ? trace_hardirqs_on_caller+0x310/0x310 [ 42.023659] ? task_prio+0x50/0x50 [ 42.027186] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 42.032721] ? check_preemption_disabled+0x48/0x280 [ 42.037732] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 42.042571] apic_timer_interrupt+0xf/0x20 [ 42.046871] [ 42.049115] RIP: 0010:_raw_spin_unlock_irqrestore+0xaf/0xd0 [ 42.054927] Code: f0 00 52 89 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 28 48 83 3d 18 ef 76 01 00 74 15 48 89 df 57 9d <0f> 1f 44 00 00 eb ad e8 1c 6b 25 f9 eb bb 0f 0b 0f 0b e8 9a d7 e7 [ 42.073822] RSP: 0018:ffff8881b2ae6de8 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 42.081524] RAX: dffffc0000000000 RBX: 0000000000000286 RCX: ffffffff8185acea [ 42.088890] RDX: 1ffffffff12a401e RSI: ffffffff8185ad04 RDI: 0000000000000286 [ 42.096149] RBP: ffff8881b2ae6df8 R08: ffff8881b3888240 R09: fffffbfff12c7248 [ 42.103405] R10: fffffbfff12c7248 R11: ffffffff89639243 R12: ffffffff89639240 [ 42.110668] R13: 0000000000000000 R14: ffff8881b387eae4 R15: ffff8881b387eae4 [ 42.117937] ? trace_hardirqs_on+0x9a/0x310 [ 42.122333] ? trace_hardirqs_on+0xb4/0x310 [ 42.126684] kasan_end_report+0x32/0x4f [ 42.130805] kasan_report.cold.8+0x76/0x309 [ 42.135120] ? kfree_skb+0xb7/0x580 [ 42.138740] check_memory_region+0x13e/0x1b0 [ 42.143137] kasan_check_read+0x11/0x20 [ 42.147099] kfree_skb+0xb7/0x580 [ 42.150538] ? __kfree_skb+0x20/0x20 [ 42.154344] ? skb_tstamp_tx+0x50/0x50 [ 42.158243] tipc_udp_send_msg+0x5a6/0x670 [ 42.162557] ? tipc_udp_xmit.isra.14+0xef0/0xef0 [ 42.167312] ? bearer_get+0x2f8/0x4e0 [ 42.171228] ? __tipc_nl_add_media+0xca0/0xca0 [ 42.175874] ? kasan_check_read+0x11/0x20 [ 42.180022] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 42.185389] ? rcu_softirq_qs+0x20/0x20 [ 42.189364] ? tipc_disc_remove_dest+0x120/0x120 [ 42.194106] ? tipc_enable_bearer+0x90d/0xf10 [ 42.198599] ? rcu_read_lock_sched_held+0x14f/0x180 [ 42.203610] tipc_bearer_xmit_skb+0x171/0x350 [ 42.208199] tipc_enable_bearer+0xc5e/0xf10 [ 42.212707] ? mutex_trylock+0x2b0/0x2b0 [ 42.216763] ? tipc_bearer_xmit_skb+0x350/0x350 [ 42.221433] ? nla_memcmp+0x90/0x90 [ 42.225064] ? lock_release+0xa00/0xa00 [ 42.229033] ? perf_trace_sched_process_exec+0x860/0x860 [ 42.234484] ? mark_held_locks+0x130/0x130 [ 42.238715] ? check_preemption_disabled+0x48/0x280 [ 42.243802] __tipc_nl_bearer_enable+0x37c/0x4a0 [ 42.248554] ? __tipc_nl_bearer_enable+0x37c/0x4a0 [ 42.253576] ? tipc_nl_bearer_disable+0x30/0x30 [ 42.258392] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 42.263923] ? __nla_parse+0x12c/0x3e0 [ 42.267805] tipc_nl_bearer_enable+0x22/0x30 [ 42.272209] genl_family_rcv_msg+0x8a7/0x11a0 [ 42.276696] ? genl_unregister_family+0x8a0/0x8a0 [ 42.281527] ? lock_downgrade+0x900/0x900 [ 42.285919] ? check_preemption_disabled+0x48/0x280 [ 42.291046] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 42.295963] ? kasan_check_read+0x11/0x20 [ 42.300095] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 42.305353] ? rcu_softirq_qs+0x20/0x20 [ 42.309316] genl_rcv_msg+0xc6/0x168 [ 42.313093] netlink_rcv_skb+0x172/0x440 [ 42.317253] ? genl_family_rcv_msg+0x11a0/0x11a0 [ 42.322005] ? netlink_ack+0xb80/0xb80 [ 42.325990] ? down_read+0x8d/0x120 [ 42.329617] genl_rcv+0x28/0x40 [ 42.332882] netlink_unicast+0x5a5/0x760 [ 42.336936] ? netlink_attachskb+0x9a0/0x9a0 [ 42.341334] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 42.346857] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 42.351871] netlink_sendmsg+0xa18/0xfc0 [ 42.355934] ? netlink_unicast+0x760/0x760 [ 42.360245] ? aa_sock_msg_perm.isra.14+0xba/0x160 [ 42.365176] ? apparmor_socket_sendmsg+0x29/0x30 [ 42.369925] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 42.375446] ? security_socket_sendmsg+0x94/0xc0 [ 42.380186] ? netlink_unicast+0x760/0x760 [ 42.384405] sock_sendmsg+0xd5/0x120 [ 42.388220] ___sys_sendmsg+0x7fd/0x930 [ 42.392191] ? copy_msghdr_from_user+0x580/0x580 [ 42.396944] ? blkcg_maybe_throttle_current+0xa38/0x1080 [ 42.402495] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 42.408034] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 42.413561] ? __fget_light+0x2e9/0x430 [ 42.417527] ? fget_raw+0x20/0x20 [ 42.420966] ? task_work_run+0x1af/0x2a0 [ 42.425276] ? _raw_spin_unlock_irq+0x27/0x80 [ 42.429754] ? _raw_spin_unlock_irq+0x27/0x80 [ 42.434246] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 42.438824] ? trace_hardirqs_on+0xbd/0x310 [ 42.443143] ? kasan_check_read+0x11/0x20 [ 42.447287] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 42.452813] ? sockfd_lookup_light+0xc5/0x160 [ 42.457296] __sys_sendmsg+0x11d/0x280 [ 42.461375] ? __ia32_sys_shutdown+0x80/0x80 [ 42.465785] ? do_syscall_64+0x6be/0x820 [ 42.469843] ? trace_hardirqs_on+0x310/0x310 [ 42.474249] ? do_syscall_64+0x9a/0x820 [ 42.478217] ? do_syscall_64+0x9a/0x820 [ 42.482176] ? trace_hardirqs_off_caller+0x310/0x310 [ 42.487265] __x64_sys_sendmsg+0x78/0xb0 [ 42.491310] do_syscall_64+0x1b9/0x820 [ 42.495182] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 42.500526] ? syscall_return_slowpath+0x5e0/0x5e0 [ 42.505436] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 42.510328] ? trace_hardirqs_on_caller+0x310/0x310 [ 42.516120] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 42.521130] ? prepare_exit_to_usermode+0x291/0x3b0 [ 42.526135] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 42.530968] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 42.536300] RIP: 0033:0x4446f9 [ 42.539852] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 1b d8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 42.558856] RSP: 002b:00007ffe705f7a98 EFLAGS: 00000213 ORIG_RAX: 000000000000002e [ 42.566561] RAX: ffffffffffffffda RBX: 00000000004002e0 RCX: 00000000004446f9 [ 42.573820] RDX: 0000000000000000 RSI: 0000000020000700 RDI: 0000000000000003 [ 42.581086] RBP: 00000000006cf018 R08: 0000000000000000 R09: 00000000004002e0 [ 42.588354] R10: 0000000000000000 R11: 0000000000000213 R12: 00000000004023a0 [ 42.595693] R13: 0000000000402430 R14: 0000000000000000 R15: 0000000000000000 [ 42.604228] Kernel Offset: disabled [ 42.607860] Rebooting in 86400 seconds..