program: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) syz_open_dev$dvb_frontend(&(0x7f0000000540), 0x0, 0x200200) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1f, 0x17, &(0x7f0000000080)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x6c}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x7800, 0x20, 0x8, 0x5, {{0x33, 0x4, 0x3, 0x24, 0xcc, 0x64, 0x0, 0x8, 0x4, 0x0, @loopback, @loopback, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x44, 0x44, 0x1, 0x5, [{@empty, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe5a}, {@rand_addr=0x64010101, 0x7}, {@dev={0xac, 0x14, 0x14, 0x34}, 0xa1}, {@multicast2, 0x4a}, {@broadcast, 0x3ff}, {@empty, 0x2}, {@remote, 0x8}]}, @timestamp_addr={0x44, 0xc, 0xba, 0x1, 0x1, [{@multicast1, 0x78d1}]}, @lsrr={0x83, 0x1f, 0x87, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @rand_addr=0x64010102, @loopback, @rand_addr=0x64010101, @private=0xa010101]}, @cipso={0x86, 0x31, 0x2, [{0x0, 0x9, "bff548ea72b54a"}, {0x1, 0x11, "7c406cc6a8e2b54af53e82adbecab0"}, {0x6, 0x11, "3c8cf2cef34aba1a4becb91b68905d"}]}, @timestamp_addr={0x44, 0x14, 0xb5, 0x1, 0x6, [{@private=0xa010101, 0x7}, {@multicast2, 0x8}]}]}}}}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x58, r3, 0x400, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}]}, 0x58}}, 0x90) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) (async) syz_open_dev$dvb_frontend(&(0x7f0000000540), 0x0, 0x200200) (async) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1f, 0x17, &(0x7f0000000080)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x6c}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x7800, 0x20, 0x8, 0x5, {{0x33, 0x4, 0x3, 0x24, 0xcc, 0x64, 0x0, 0x8, 0x4, 0x0, @loopback, @loopback, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x44, 0x44, 0x1, 0x5, [{@empty, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe5a}, {@rand_addr=0x64010101, 0x7}, {@dev={0xac, 0x14, 0x14, 0x34}, 0xa1}, {@multicast2, 0x4a}, {@broadcast, 0x3ff}, {@empty, 0x2}, {@remote, 0x8}]}, @timestamp_addr={0x44, 0xc, 0xba, 0x1, 0x1, [{@multicast1, 0x78d1}]}, @lsrr={0x83, 0x1f, 0x87, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @rand_addr=0x64010102, @loopback, @rand_addr=0x64010101, @private=0xa010101]}, @cipso={0x86, 0x31, 0x2, [{0x0, 0x9, "bff548ea72b54a"}, {0x1, 0x11, "7c406cc6a8e2b54af53e82adbecab0"}, {0x6, 0x11, "3c8cf2cef34aba1a4becb91b68905d"}]}, @timestamp_addr={0x44, 0x14, 0xb5, 0x1, 0x6, [{@private=0xa010101, 0x7}, {@multicast2, 0x8}]}]}}}}}) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x58, r3, 0x400, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}]}, 0x58}}, 0x90) (async) [ 86.822890][ T5327] netlink: 36 bytes leftover after parsing attributes in process `syz.0.0'. [ 86.833788][ T5327] netlink: 16 bytes leftover after parsing attributes in process `syz.0.0'. [ 86.841127][ T5327] netlink: 36 bytes leftover after parsing attributes in process `syz.0.0'. [ 86.874525][ T5327] ================================================================== [ 86.877733][ T5327] BUG: KASAN: slab-use-after-free in dvb_frontend_release+0x40a/0x4d0 [ 86.881712][ T5327] Read of size 4 at addr ffff888033d93e3c by task syz.0.0/5327 [ 86.884709][ T5327] [ 86.885763][ T5327] CPU: 0 UID: 0 PID: 5327 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 86.885793][ T5327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.885799][ T5327] Call Trace: [ 86.885814][ T5327] [ 86.885818][ T5327] dump_stack_lvl+0xe8/0x150 [ 86.885830][ T5327] print_address_description+0x55/0x1e0 [ 86.885838][ T5327] ? dvb_frontend_release+0x40a/0x4d0 [ 86.885846][ T5327] print_report+0x58/0x70 [ 86.885852][ T5327] kasan_report+0x117/0x150 [ 86.885871][ T5327] ? dvb_frontend_release+0x40a/0x4d0 [ 86.885882][ T5327] dvb_frontend_release+0x40a/0x4d0 [ 86.885893][ T5327] ? __pfx_dvb_frontend_release+0x10/0x10 [ 86.885904][ T5327] __fput+0x44f/0xa60 [ 86.885917][ T5327] task_work_run+0x1d9/0x270 [ 86.885931][ T5327] ? __pfx_task_work_run+0x10/0x10 [ 86.885944][ T5327] ? do_raw_spin_unlock+0x4d/0x210 [ 86.885961][ T5327] do_exit+0x70f/0x22c0 [ 86.885976][ T5327] ? __pfx_do_exit+0x10/0x10 [ 86.885989][ T5327] ? do_raw_spin_lock+0x12b/0x2f0 [ 86.886002][ T5327] do_group_exit+0x21b/0x2d0 [ 86.886014][ T5327] ? _raw_spin_unlock_irq+0x23/0x50 [ 86.886074][ T5327] get_signal+0x1284/0x1330 [ 86.886089][ T5327] arch_do_signal_or_restart+0xbc/0x840 [ 86.886102][ T5327] ? __pfx___schedule+0x10/0x10 [ 86.886111][ T5327] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 86.886128][ T5327] exit_to_user_mode_loop+0xa9/0x680 [ 86.886138][ T5327] ? rcu_is_watching+0x7f/0xb0 [ 86.886150][ T5327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.886161][ T5327] do_syscall_64+0x353/0x580 [ 86.886171][ T5327] ? clear_bhb_loop+0x40/0x90 [ 86.886183][ T5327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.886193][ T5327] RIP: 0033:0x7f56dc59ce59 [ 86.886202][ T5327] Code: Unable to access opcode bytes at 0x7f56dc59ce2f. [ 86.886207][ T5327] RSP: 002b:00007f56dd4c2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 86.886219][ T5327] RAX: fffffffffffffff7 RBX: 00007f56dc815fa0 RCX: 00007f56dc59ce59 [ 86.886227][ T5327] RDX: 0000000000000094 RSI: 0000200000002c40 RDI: 0000000000000005 [ 86.886234][ T5327] RBP: 00007f56dc632d6f R08: 0000000000000000 R09: 0000000000000000 [ 86.886240][ T5327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.886246][ T5327] R13: 00007f56dc816038 R14: 00007f56dc815fa0 R15: 00007ffeb4707e78 [ 86.886256][ T5327] [ 86.886260][ T5327] [ 86.977276][ T5327] Allocated by task 1: [ 86.979003][ T5327] kasan_save_track+0x3e/0x80 [ 86.980911][ T5327] __kasan_kmalloc+0x93/0xb0 [ 86.982849][ T5327] __kmalloc_cache_noprof+0x31c/0x660 [ 86.985040][ T5327] dvb_register_device+0x2fd/0x21e0 [ 86.987153][ T5327] dvb_register_frontend+0x61b/0x920 [ 86.989317][ T5327] vidtv_bridge_probe+0x9aa/0xf80 [ 86.991415][ T5327] platform_probe+0xf9/0x190 [ 86.993292][ T5327] really_probe+0x267/0xaf0 [ 86.995155][ T5327] __driver_probe_device+0x1ef/0x380 [ 86.997314][ T5327] driver_probe_device+0x4f/0x240 [ 86.999361][ T5327] __driver_attach+0x34c/0x640 [ 87.001331][ T5327] bus_for_each_dev+0x23b/0x2c0 [ 87.003304][ T5327] bus_add_driver+0x345/0x670 [ 87.005266][ T5327] driver_register+0x23a/0x320 [ 87.007236][ T5327] vidtv_bridge_init+0x28/0x50 [ 87.009231][ T5327] do_one_initcall+0x250/0x870 [ 87.011207][ T5327] do_initcall_level+0x104/0x190 [ 87.013241][ T5327] do_initcalls+0x59/0xa0 [ 87.015117][ T5327] kernel_init_freeable+0x2a6/0x3e0 [ 87.017238][ T5327] kernel_init+0x1d/0x1d0 [ 87.019018][ T5327] ret_from_fork+0x514/0xb70 [ 87.020914][ T5327] ret_from_fork_asm+0x1a/0x30 [ 87.022940][ T5327] [ 87.024053][ T5327] Freed by task 5327: [ 87.025925][ T5327] kasan_save_track+0x3e/0x80 [ 87.028093][ T5327] kasan_save_free_info+0x46/0x50 [ 87.030328][ T5327] __kasan_slab_free+0x5c/0x80 [ 87.032350][ T5327] kfree+0x1c5/0x640 [ 87.034003][ T5327] dvb_generic_release+0x11d/0x1b0 [ 87.036188][ T5327] dvb_frontend_release+0x132/0x4d0 [ 87.038373][ T5327] __fput+0x44f/0xa60 [ 87.039969][ T5327] task_work_run+0x1d9/0x270 [ 87.041915][ T5327] do_exit+0x70f/0x22c0 [ 87.043634][ T5327] do_group_exit+0x21b/0x2d0 [ 87.045542][ T5327] get_signal+0x1284/0x1330 [ 87.047405][ T5327] arch_do_signal_or_restart+0xbc/0x840 [ 87.049692][ T5327] exit_to_user_mode_loop+0xa9/0x680 [ 87.051828][ T5327] do_syscall_64+0x353/0x580 [ 87.053769][ T5327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.056289][ T5327] [ 87.057365][ T5327] The buggy address belongs to the object at ffff888033d93e00 [ 87.057365][ T5327] which belongs to the cache kmalloc-256 of size 256 [ 87.063150][ T5327] The buggy address is located 60 bytes inside of [ 87.063150][ T5327] freed 256-byte region [ffff888033d93e00, ffff888033d93f00) [ 87.068876][ T5327] [ 87.069883][ T5327] The buggy address belongs to the physical page: [ 87.072541][ T5327] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x33d93 [ 87.076123][ T5327] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 87.079072][ T5327] page_type: f5(slab) [ 87.080707][ T5327] raw: 04fff00000000000 ffff88801ac41b40 dead000000000122 0000000000000000 [ 87.084196][ T5327] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 87.087728][ T5327] page dumped because: kasan: bad access detected [ 87.090367][ T5327] page_owner tracks the page as allocated [ 87.092836][ T5327] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 23795763995, free_ts 23778697022 [ 87.100881][ T5327] post_alloc_hook+0x22d/0x280 [ 87.102937][ T5327] get_page_from_freelist+0x2593/0x2610 [ 87.105261][ T5327] __alloc_frozen_pages_noprof+0x18d/0x380 [ 87.107671][ T5327] allocate_slab+0x77/0x660 [ 87.109581][ T5327] refill_objects+0x339/0x3d0 [ 87.111579][ T5327] __pcs_replace_empty_main+0x321/0x720 [ 87.113809][ T5327] __kmalloc_cache_noprof+0x392/0x660 [ 87.116024][ T5327] bus_add_driver+0x162/0x670 [ 87.117976][ T5327] driver_register+0x23a/0x320 [ 87.119957][ T5327] do_one_initcall+0x250/0x870 [ 87.121941][ T5327] do_initcall_level+0x104/0x190 [ 87.124013][ T5327] do_initcalls+0x59/0xa0 [ 87.125859][ T5327] kernel_init_freeable+0x2a6/0x3e0 [ 87.128009][ T5327] kernel_init+0x1d/0x1d0 [ 87.129807][ T5327] ret_from_fork+0x514/0xb70 [ 87.131751][ T5327] ret_from_fork_asm+0x1a/0x30 [ 87.133737][ T5327] page last free pid 52 tgid 52 stack trace: [ 87.136195][ T5327] __free_frozen_pages+0xc1c/0xd30 [ 87.138247][ T5327] vfree+0x1d1/0x2f0 [ 87.139866][ T5327] delayed_vfree_work+0x55/0x80 [ 87.141883][ T5327] process_scheduled_works+0xb5d/0x1860 [ 87.144121][ T5327] worker_thread+0xa53/0xfc0 [ 87.146052][ T5327] kthread+0x389/0x470 [ 87.147708][ T5327] ret_from_fork+0x514/0xb70 [ 87.149647][ T5327] ret_from_fork_asm+0x1a/0x30 [ 87.151669][ T5327] [ 87.152663][ T5327] Memory state around the buggy address: [ 87.154965][ T5327] ffff888033d93d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 87.158187][ T5327] ffff888033d93d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 87.161494][ T5327] >ffff888033d93e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 87.164793][ T5327] ^ [ 87.167257][ T5327] ffff888033d93e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 87.170565][ T5327] ffff888033d93f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 87.173838][ T5327] ================================================================== [ 87.178136][ T5290] Bluetooth: hci0: command tx timeout [ 87.192034][ T5327] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 87.195088][ T5327] CPU: 0 UID: 0 PID: 5327 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 87.199158][ T5327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.203657][ T5327] Call Trace: [ 87.205110][ T5327] [ 87.206389][ T5327] vpanic+0x56c/0xa60 [ 87.208094][ T5327] ? __pfx_vpanic+0x10/0x10 [ 87.209993][ T5327] ? __pfx___schedule+0x10/0x10 [ 87.212048][ T5327] panic+0xc5/0xd0 [ 87.213643][ T5327] ? __pfx_panic+0x10/0x10 [ 87.215530][ T5327] ? preempt_schedule_common+0x82/0xd0 [ 87.217787][ T5327] ? dvb_frontend_release+0x40a/0x4d0 [ 87.220033][ T5327] check_panic_on_warn+0x89/0xb0 [ 87.222121][ T5327] ? dvb_frontend_release+0x40a/0x4d0 [ 87.224400][ T5327] end_report+0x73/0x170 [ 87.226131][ T5327] ? dvb_frontend_release+0x40a/0x4d0 [ 87.228348][ T5327] kasan_report+0x128/0x150 [ 87.230337][ T5327] ? dvb_frontend_release+0x40a/0x4d0 [ 87.232622][ T5327] dvb_frontend_release+0x40a/0x4d0 [ 87.234820][ T5327] ? __pfx_dvb_frontend_release+0x10/0x10 [ 87.237147][ T5327] __fput+0x44f/0xa60 [ 87.238868][ T5327] task_work_run+0x1d9/0x270 [ 87.240832][ T5327] ? __pfx_task_work_run+0x10/0x10 [ 87.243023][ T5327] ? do_raw_spin_unlock+0x4d/0x210 [ 87.245184][ T5327] do_exit+0x70f/0x22c0 [ 87.246843][ T5327] ? __pfx_do_exit+0x10/0x10 [ 87.248819][ T5327] ? do_raw_spin_lock+0x12b/0x2f0 [ 87.250986][ T5327] do_group_exit+0x21b/0x2d0 [ 87.252892][ T5327] ? _raw_spin_unlock_irq+0x23/0x50 [ 87.255142][ T5327] get_signal+0x1284/0x1330 [ 87.257054][ T5327] arch_do_signal_or_restart+0xbc/0x840 [ 87.259407][ T5327] ? __pfx___schedule+0x10/0x10 [ 87.261384][ T5327] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 87.263882][ T5327] exit_to_user_mode_loop+0xa9/0x680 [ 87.266006][ T5327] ? rcu_is_watching+0x7f/0xb0 [ 87.267897][ T5327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.270312][ T5327] do_syscall_64+0x353/0x580 [ 87.272162][ T5327] ? clear_bhb_loop+0x40/0x90 [ 87.274126][ T5327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.276544][ T5327] RIP: 0033:0x7f56dc59ce59 [ 87.278360][ T5327] Code: Unable to access opcode bytes at 0x7f56dc59ce2f. [ 87.281049][ T5327] RSP: 002b:00007f56dd4c2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 87.284407][ T5327] RAX: fffffffffffffff7 RBX: 00007f56dc815fa0 RCX: 00007f56dc59ce59 [ 87.287630][ T5327] RDX: 0000000000000094 RSI: 0000200000002c40 RDI: 0000000000000005 [ 87.290838][ T5327] RBP: 00007f56dc632d6f R08: 0000000000000000 R09: 0000000000000000 [ 87.294051][ T5327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.297154][ T5327] R13: 00007f56dc816038 R14: 00007f56dc815fa0 R15: 00007ffeb4707e78 [ 87.300331][ T5327] [ 87.302044][ T5327] Kernel Offset: disabled [ 87.303836][ T5327] Rebooting in 86400 seconds..