[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 40.654206] audit: type=1800 audit(1547242525.441:25): pid=7732 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 40.689709] audit: type=1800 audit(1547242525.451:26): pid=7732 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 40.734471] audit: type=1800 audit(1547242525.451:27): pid=7732 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.56' (ECDSA) to the list of known hosts. syzkaller login: [ 61.943750] IPVS: ftp: loaded support on port[0] = 21 [ 61.951426] IPVS: ftp: loaded support on port[0] = 21 [ 61.957779] IPVS: ftp: loaded support on port[0] = 21 [ 61.961076] IPVS: ftp: loaded support on port[0] = 21 [ 61.971586] IPVS: ftp: loaded support on port[0] = 21 [ 61.971864] IPVS: ftp: loaded support on port[0] = 21 executing program executing program executing program executing program [ 62.216924] kauditd_printk_skb: 3 callbacks suppressed [ 62.216936] audit: type=1326 audit(1547242547.011:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7896 comm="syz-executor667" exe="/root/syz-executor667976370" sig=31 arch=c000003e syscall=202 compat=0 ip=0x447c09 code=0x0 executing program executing program executing program executing program [ 62.250468] audit: type=1326 audit(1547242547.041:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7898 comm="syz-executor667" exe="/root/syz-executor667976370" sig=31 arch=c000003e syscall=202 compat=0 ip=0x447c09 code=0x0 [ 62.286994] audit: type=1326 audit(1547242547.041:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7896 comm="syz-executor667" exe="/root/syz-executor667976370" sig=31 arch=c000003e syscall=3 compat=0 ip=0x4069e1 code=0x0 executing program executing program executing program [ 62.313991] audit: type=1326 audit(1547242547.071:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7902 comm="syz-executor667" exe="/root/syz-executor667976370" sig=31 arch=c000003e syscall=202 compat=0 ip=0x447c09 code=0x0 [ 62.341459] audit: type=1326 audit(1547242547.071:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7904 comm="syz-executor667" exe="/root/syz-executor667976370" sig=31 arch=c000003e syscall=202 compat=0 ip=0x447c09 code=0x0 executing program executing program executing program executing program [ 62.366720] audit: type=1326 audit(1547242547.081:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7900 comm="syz-executor667" exe="/root/syz-executor667976370" sig=31 arch=c000003e syscall=202 compat=0 ip=0x447c09 code=0x0 [ 62.399709] audit: type=1326 audit(1547242547.081:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7898 comm="syz-executor667" exe="/root/syz-executor667976370" sig=31 arch=c000003e syscall=3 compat=0 ip=0x4069e1 code=0x0 [ 62.422986] audit: type=1326 audit(1547242547.101:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7907 comm="syz-executor667" exe="/root/syz-executor667976370" sig=31 arch=c000003e syscall=202 compat=0 ip=0x447c09 code=0x0 executing program executing program executing program executing program executing program executing program [ 62.450989] audit: type=1326 audit(1547242547.101:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7906 comm="syz-executor667" exe="/root/syz-executor667976370" sig=31 arch=c000003e syscall=202 compat=0 ip=0x447c09 code=0x0 [ 62.480931] audit: type=1326 audit(1547242547.101:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7910 comm="syz-executor667" exe="/root/syz-executor667976370" sig=31 arch=c000003e syscall=202 compat=0 ip=0x447c09 code=0x0 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 67.228952] kauditd_printk_skb: 1028 callbacks suppressed [ 67.228968] audit: type=1326 audit(1547242552.021:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8938 comm="syz-executor667" exe="/root/syz-executor667976370" sig=31 arch=c000003e syscall=202 compat=0 ip=0x447c09 code=0x0 executing program executing program [ 67.268654] audit: type=1326 audit(1547242552.051:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8932 comm="syz-executor667" exe="/root/syz-executor667976370" sig=31 arch=c000003e syscall=3 compat=0 ip=0x4069e1 code=0x0 [ 67.295532] audit: type=1326 audit(1547242552.051:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8941 comm="syz-executor667" exe="/root/syz-executor667976370" sig=31 arch=c000003e syscall=202 compat=0 ip=0x447c09 code=0x0 executing program executing program executing program executing program executing program [ 67.319920] audit: type=1326 audit(1547242552.051:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8934 comm="syz-executor667" exe="/root/syz-executor667976370" sig=31 arch=c000003e syscall=3 compat=0 ip=0x4069e1 code=0x0 [ 67.356068] audit: type=1326 audit(1547242552.051:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8931 comm="syz-executor667" exe="/root/syz-executor667976370" sig=31 arch=c000003e syscall=3 compat=0 ip=0x4069e1 code=0x0 executing program executing program executing program executing program executing program [ 67.378924] audit: type=1326 audit(1547242552.061:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8943 comm="syz-executor667" exe="/root/syz-executor667976370" sig=31 arch=c000003e syscall=202 compat=0 ip=0x447c09 code=0x0 [ 67.403031] audit: type=1326 audit(1547242552.061:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8945 comm="syz-executor667" exe="/root/syz-executor667976370" sig=31 arch=c000003e syscall=202 compat=0 ip=0x447c09 code=0x0 [ 67.434658] audit: type=1326 audit(1547242552.061:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8937 comm="syz-executor667" exe="/root/syz-executor667976370" sig=31 arch=c000003e syscall=202 compat=0 ip=0x447c09 code=0x0 [ 67.457298] audit: type=1326 audit(1547242552.061:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8938 comm="syz-executor667" exe="/root/syz-executor667976370" sig=31 arch=c000003e syscall=3 compat=0 ip=0x4069e1 code=0x0 executing program executing program executing program executing program executing program executing program [ 67.484170] audit: type=1326 audit(1547242552.091:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8947 comm="syz-executor667" exe="/root/syz-executor667976370" sig=31 arch=c000003e syscall=202 compat=0 ip=0x447c09 code=0x0 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 72.236155] kauditd_printk_skb: 1033 callbacks suppressed [ 72.236183] audit: type=1326 audit(1547242557.031:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9984 comm="syz-executor667" exe="/root/syz-executor667976370" sig=31 arch=c000003e syscall=202 compat=0 ip=0x447c09 code=0x0 executing program executing program executing program executing program [ 72.275943] audit: type=1326 audit(1547242557.061:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9976 comm="syz-executor667" exe="/root/syz-executor667976370" sig=31 arch=c000003e syscall=3 compat=0 ip=0x4069e1 code=0x0 [ 72.304907] audit: type=1326 audit(1547242557.061:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9978 comm="syz-executor667" exe="/root/syz-executor667976370" sig=31 arch=c000003e syscall=3 compat=0 ip=0x4069e1 code=0x0 executing program executing program executing program [ 72.327870] audit: type=1326 audit(1547242557.061:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9988 comm="syz-executor667" exe="/root/syz-executor667976370" sig=31 arch=c000003e syscall=202 compat=0 ip=0x447c09 code=0x0 [ 72.357201] audit: type=1326 audit(1547242557.061:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9980 comm="syz-executor667" exe="/root/syz-executor667976370" sig=31 arch=c000003e syscall=3 compat=0 ip=0x4069e1 code=0x0 [ 72.382879] ================================================================== [ 72.390305] BUG: KASAN: use-after-free in __lock_acquire+0x3556/0x4a30 [ 72.396988] Read of size 8 at addr ffff88808c5c8a80 by task syz-executor667/9991 [ 72.404509] [ 72.406143] CPU: 0 PID: 9991 Comm: syz-executor667 Not tainted 5.0.0-rc1+ #20 [ 72.413416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 72.422761] Call Trace: [ 72.425377] dump_stack+0x1db/0x2d0 [ 72.429043] ? dump_stack_print_info.cold+0x20/0x20 [ 72.434088] ? mark_held_locks+0x100/0x100 [ 72.438337] ? __lock_acquire+0x3556/0x4a30 [ 72.442659] print_address_description.cold+0x7c/0x20d [ 72.447932] ? __lock_acquire+0x3556/0x4a30 [ 72.452250] ? __lock_acquire+0x3556/0x4a30 [ 72.456571] kasan_report.cold+0x1b/0x40 [ 72.460629] ? __lock_acquire+0x3556/0x4a30 [ 72.464952] __asan_report_load8_noabort+0x14/0x20 [ 72.469879] __lock_acquire+0x3556/0x4a30 [ 72.474025] ? lock_acquire+0x1db/0x570 [ 72.477997] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 72.483095] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 72.488195] ? lockdep_hardirqs_on+0x415/0x5d0 [ 72.492780] ? mark_held_locks+0x100/0x100 [ 72.497018] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 72.502122] ? __free_object+0x16c/0x350 [ 72.506192] ? debug_object_free+0x2ab/0x5f0 [ 72.510623] ? __list_del_entry_valid.cold+0x4f/0x4f [ 72.515723] ? do_raw_spin_trylock+0x270/0x270 [ 72.520311] ? debug_object_free+0x2b3/0x5f0 [ 72.524717] ? debug_object_destroy+0x250/0x250 [ 72.529398] lock_acquire+0x1db/0x570 [ 72.533191] ? seccomp_notify_release+0x54/0x270 [ 72.537961] ? ___might_sleep+0x1e7/0x310 [ 72.542104] ? lock_release+0xc40/0xc40 [ 72.546076] ? seccomp_notify_release+0x54/0x270 [ 72.550825] ? seccomp_notify_release+0x54/0x270 [ 72.555577] __mutex_lock+0x12f/0x1670 [ 72.559471] ? seccomp_notify_release+0x54/0x270 [ 72.564240] ? seccomp_notify_release+0x54/0x270 [ 72.568992] ? __lock_acquire+0x572/0x4a30 [ 72.573228] ? mutex_trylock+0x2d0/0x2d0 [ 72.577293] ? mark_held_locks+0x100/0x100 [ 72.581522] ? find_held_lock+0x35/0x120 [ 72.585580] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 72.591114] ? locks_remove_posix+0x488/0x860 [ 72.595638] ? mark_held_locks+0x100/0x100 [ 72.599900] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 72.605435] ? fsnotify+0x4f5/0xed0 [ 72.609060] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 72.614593] ? locks_remove_file+0x3d5/0x5c0 [ 72.618995] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 72.624527] ? ima_file_free+0x128/0x630 [ 72.628598] ? fcntl_setlk+0xfe0/0xfe0 [ 72.632499] mutex_lock_nested+0x16/0x20 [ 72.636569] ? mutex_lock_nested+0x16/0x20 [ 72.640801] seccomp_notify_release+0x54/0x270 [ 72.645384] __fput+0x3c5/0xb10 [ 72.648674] ? get_nth_filter.part.0+0x1d0/0x1d0 [ 72.653441] ? get_max_files+0x20/0x20 [ 72.657321] ? task_work_run+0x1bb/0x2b0 [ 72.661378] ? trace_hardirqs_off_caller+0x300/0x300 [ 72.666478] ? do_raw_spin_trylock+0x270/0x270 [ 72.671074] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 72.676629] ____fput+0x16/0x20 [ 72.679917] task_work_run+0x1f4/0x2b0 [ 72.683820] ? task_work_cancel+0x2c0/0x2c0 [ 72.688147] ? __close_fd+0x25f/0x3d0 [ 72.691956] ? do_syscall_64+0x8c/0x800 [ 72.695933] exit_to_usermode_loop+0x32a/0x3b0 [ 72.700513] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 72.705879] ? syscall_trace_enter+0x12a0/0x12a0 [ 72.710649] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 72.715539] do_syscall_64+0x696/0x800 [ 72.719423] ? syscall_return_slowpath+0x5f0/0x5f0 [ 72.724375] ? prepare_exit_to_usermode+0x232/0x3b0 [ 72.729411] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 72.734256] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 72.739438] RIP: 0033:0x4069e1 [ 72.742630] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 d4 18 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 72.761564] RSP: 002b:00007ffe443110b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 72.769282] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00000000004069e1 [ 72.776550] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000003 [ 72.783809] RBP: 0000000000000002 R08: 0000000000000001 R09: 00000000bb1414ac [ 72.791070] R10: 00007ffe443110d0 R11: 0000000000000293 R12: 00000000006e39fc [ 72.798336] R13: 00000000006e39f0 R14: 00000000000003e8 R15: 000000000000002d [ 72.805599] [ 72.807219] Allocated by task 10001: [ 72.810928] save_stack+0x45/0xd0 [ 72.814381] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 72.819306] kasan_kmalloc+0x9/0x10 [ 72.822928] kmem_cache_alloc_trace+0x151/0x760 [ 72.827605] do_seccomp+0x941/0x2cc0 [ 72.831328] __x64_sys_seccomp+0x73/0xb0 [ 72.835386] do_syscall_64+0x1a3/0x800 [ 72.839274] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 72.844451] [ 72.846070] Freed by task 10001: [ 72.849430] save_stack+0x45/0xd0 [ 72.852878] __kasan_slab_free+0x102/0x150 [ 72.857109] kasan_slab_free+0xe/0x10 [ 72.860915] kfree+0xcf/0x230 [ 72.864013] do_seccomp+0xda3/0x2cc0 [ 72.867725] __x64_sys_seccomp+0x73/0xb0 [ 72.871780] do_syscall_64+0x1a3/0x800 [ 72.875666] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 72.880858] [ 72.882479] The buggy address belongs to the object at ffff88808c5c8a00 [ 72.882479] which belongs to the cache kmalloc-192 of size 192 [ 72.895126] The buggy address is located 128 bytes inside of [ 72.895126] 192-byte region [ffff88808c5c8a00, ffff88808c5c8ac0) [ 72.906997] The buggy address belongs to the page: [ 72.911919] page:ffffea0002317200 count:1 mapcount:0 mapping:ffff88812c3f0040 index:0x0 [ 72.920108] flags: 0x1fffc0000000200(slab) [ 72.924348] raw: 01fffc0000000200 ffffea0002276e08 ffff88812c3f1148 ffff88812c3f0040 [ 72.932226] raw: 0000000000000000 ffff88808c5c8000 0000000100000010 0000000000000000 [ 72.940114] page dumped because: kasan: bad access detected [ 72.945838] [ 72.947455] Memory state around the buggy address: [ 72.952375] ffff88808c5c8980: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 72.959740] ffff88808c5c8a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 72.967108] >ffff88808c5c8a80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 72.974461] ^ [ 72.977865] ffff88808c5c8b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 72.985219] ffff88808c5c8b80: 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 72.992565] ================================================================== [ 72.999910] Disabling lock debugging due to kernel taint [ 73.005350] Kernel panic - not syncing: panic_on_warn set ... [ 73.011233] CPU: 0 PID: 9991 Comm: syz-executor667 Tainted: G B 5.0.0-rc1+ #20 [ 73.019885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 73.029229] Call Trace: [ 73.031815] dump_stack+0x1db/0x2d0 [ 73.035444] ? dump_stack_print_info.cold+0x20/0x20 [ 73.040466] panic+0x2cb/0x65c [ 73.043675] ? add_taint.cold+0x16/0x16 [ 73.047647] ? kasan_check_read+0x11/0x20 [ 73.051799] ? trace_hardirqs_on_caller+0x310/0x310 [ 73.056812] ? do_raw_spin_trylock+0x270/0x270 [ 73.061398] ? add_taint.cold+0x5/0x16 [ 73.065285] ? trace_hardirqs_off+0xaf/0x310 [ 73.069694] ? __lock_acquire+0x3556/0x4a30 [ 73.074013] end_report+0x47/0x4f [ 73.077464] ? __lock_acquire+0x3556/0x4a30 [ 73.081780] kasan_report.cold+0xe/0x40 [ 73.085756] ? __lock_acquire+0x3556/0x4a30 [ 73.090076] __asan_report_load8_noabort+0x14/0x20 [ 73.095007] __lock_acquire+0x3556/0x4a30 [ 73.099162] ? lock_acquire+0x1db/0x570 [ 73.103154] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 73.108254] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 73.113373] ? lockdep_hardirqs_on+0x415/0x5d0 [ 73.117959] ? mark_held_locks+0x100/0x100 [ 73.122196] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 73.127302] ? __free_object+0x16c/0x350 [ 73.131365] ? debug_object_free+0x2ab/0x5f0 [ 73.135785] ? __list_del_entry_valid.cold+0x4f/0x4f [ 73.140885] ? do_raw_spin_trylock+0x270/0x270 [ 73.145473] ? debug_object_free+0x2b3/0x5f0 [ 73.149886] ? debug_object_destroy+0x250/0x250 [ 73.154552] lock_acquire+0x1db/0x570 [ 73.158350] ? seccomp_notify_release+0x54/0x270 [ 73.163102] ? ___might_sleep+0x1e7/0x310 [ 73.167249] ? lock_release+0xc40/0xc40 [ 73.171224] ? seccomp_notify_release+0x54/0x270 [ 73.175995] ? seccomp_notify_release+0x54/0x270 [ 73.180748] __mutex_lock+0x12f/0x1670 [ 73.184648] ? seccomp_notify_release+0x54/0x270 [ 73.189399] ? seccomp_notify_release+0x54/0x270 [ 73.194174] ? __lock_acquire+0x572/0x4a30 [ 73.198411] ? mutex_trylock+0x2d0/0x2d0 [ 73.202486] ? mark_held_locks+0x100/0x100 [ 73.206737] ? find_held_lock+0x35/0x120 [ 73.210800] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 73.216338] ? locks_remove_posix+0x488/0x860 [ 73.220828] ? mark_held_locks+0x100/0x100 [ 73.225062] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 73.230608] ? fsnotify+0x4f5/0xed0 [ 73.234233] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 73.239770] ? locks_remove_file+0x3d5/0x5c0 [ 73.244180] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 73.249727] ? ima_file_free+0x128/0x630 [ 73.253802] ? fcntl_setlk+0xfe0/0xfe0 [ 73.257688] mutex_lock_nested+0x16/0x20 [ 73.261740] ? mutex_lock_nested+0x16/0x20 [ 73.265969] seccomp_notify_release+0x54/0x270 [ 73.270551] __fput+0x3c5/0xb10 [ 73.273831] ? get_nth_filter.part.0+0x1d0/0x1d0 [ 73.278582] ? get_max_files+0x20/0x20 [ 73.282463] ? task_work_run+0x1bb/0x2b0 [ 73.286539] ? trace_hardirqs_off_caller+0x300/0x300 [ 73.291636] ? do_raw_spin_trylock+0x270/0x270 [ 73.296218] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 73.301768] ____fput+0x16/0x20 [ 73.305059] task_work_run+0x1f4/0x2b0 [ 73.308961] ? task_work_cancel+0x2c0/0x2c0 [ 73.313295] ? __close_fd+0x25f/0x3d0 [ 73.317092] ? do_syscall_64+0x8c/0x800 [ 73.321067] exit_to_usermode_loop+0x32a/0x3b0 [ 73.325652] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 73.331016] ? syscall_trace_enter+0x12a0/0x12a0 [ 73.335772] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 73.340527] do_syscall_64+0x696/0x800 [ 73.344418] ? syscall_return_slowpath+0x5f0/0x5f0 [ 73.349348] ? prepare_exit_to_usermode+0x232/0x3b0 [ 73.354363] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 73.359208] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 73.364392] RIP: 0033:0x4069e1 [ 73.367585] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 d4 18 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 73.386509] RSP: 002b:00007ffe443110b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 73.394222] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00000000004069e1 [ 73.401483] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000003 [ 73.408831] RBP: 0000000000000002 R08: 0000000000000001 R09: 00000000bb1414ac [ 73.416114] R10: 00007ffe443110d0 R11: 0000000000000293 R12: 00000000006e39fc [ 73.423386] R13: 00000000006e39f0 R14: 00000000000003e8 R15: 000000000000002d [ 73.431727] Kernel Offset: disabled [ 73.435348] Rebooting in 86400 seconds..