[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 24.112800] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c[ 24.238662] random: sshd: uninitialized urandom read (32 bytes read) . [ 24.548610] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 108.572396] urandom_read: 1 callbacks suppressed [ 108.572402] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.37' (ECDSA) to the list of known hosts. [ 114.099628] random: sshd: uninitialized urandom read (32 bytes read) 2018/08/28 01:45:38 parsed 1 programs [ 115.760478] random: cc1: uninitialized urandom read (8 bytes read) 2018/08/28 01:45:40 executed programs: 0 [ 116.980221] IPVS: ftp: loaded support on port[0] = 21 [ 117.194747] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.201340] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.208778] device bridge_slave_0 entered promiscuous mode [ 117.226463] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.232989] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.239964] device bridge_slave_1 entered promiscuous mode [ 117.255571] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 117.271404] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 117.315595] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 117.334740] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 117.399966] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 117.407277] team0: Port device team_slave_0 added [ 117.422691] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 117.429794] team0: Port device team_slave_1 added [ 117.445382] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 117.462683] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 117.479618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 117.497930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 117.621375] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.627826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.634592] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.640987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.080029] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 118.086288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.131617] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 118.161001] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 118.181901] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 118.188070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 118.195666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 118.238934] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.543128] hrtimer: interrupt took 27554 ns [ 118.804291] ================================================================== [ 118.811762] BUG: KASAN: use-after-free in ccid_hc_tx_delete+0xe0/0x100 [ 118.818539] Read of size 8 at addr ffff8801aaaf7700 by task syz-executor0/4491 [ 118.825880] [ 118.827577] CPU: 1 PID: 4491 Comm: syz-executor0 Not tainted 4.19.0-rc1+ #115 [ 118.834865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 118.844379] Call Trace: [ 118.846947] [ 118.849093] dump_stack+0x1c9/0x2b4 [ 118.852707] ? dump_stack_print_info.cold.2+0x52/0x52 [ 118.857894] ? printk+0xa7/0xcf [ 118.861196] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 118.865939] ? ccid_hc_tx_delete+0xe0/0x100 [ 118.870254] print_address_description+0x6c/0x20b [ 118.875171] ? ccid_hc_tx_delete+0xe0/0x100 [ 118.879489] kasan_report.cold.7+0x242/0x30d [ 118.883889] __asan_report_load8_noabort+0x14/0x20 [ 118.888809] ccid_hc_tx_delete+0xe0/0x100 [ 118.892945] ? dccp_init_sock+0x4a0/0x4a0 [ 118.897083] dccp_sk_destruct+0x3c/0x80 [ 118.901045] __sk_destruct+0x107/0xa60 [ 118.905031] ? sock_warn_obsolete_bsdism+0xb0/0xb0 [ 118.909960] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 118.915062] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 118.920149] ? lockdep_hardirqs_on+0x19e/0x5c0 [ 118.924768] ? trace_hardirqs_on+0xbd/0x2c0 [ 118.929095] ? kasan_check_read+0x11/0x20 [ 118.933230] ? debug_object_deactivate+0x2eb/0x450 [ 118.938145] ? lock_acquire+0x1e4/0x4f0 [ 118.942177] ? rcu_process_callbacks+0x1065/0x27c0 [ 118.947103] ? lock_release+0x9f0/0x9f0 [ 118.951064] ? debug_stats_show+0x100/0x100 [ 118.955374] ? file_free_rcu+0x6f/0x90 [ 118.959248] ? kmem_cache_free+0x246/0x280 [ 118.963471] ? sock_warn_obsolete_bsdism+0xb0/0xb0 [ 118.968392] rcu_process_callbacks+0xf78/0x27c0 [ 118.973088] ? call_rcu_sched+0x20/0x20 [ 118.977064] ? find_held_lock+0x36/0x1c0 [ 118.981127] ? mark_held_locks+0xc9/0x160 [ 118.985364] ? _raw_spin_unlock_irq+0x27/0x70 [ 118.989851] ? _raw_spin_unlock_irq+0x27/0x70 [ 118.994333] ? lockdep_hardirqs_on+0x19e/0x5c0 [ 118.998898] ? trace_hardirqs_on+0xbd/0x2c0 [ 119.003206] ? kasan_check_read+0x11/0x20 [ 119.007340] ? __run_timers+0x9c8/0xc60 [ 119.011304] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 119.016396] ? kasan_check_write+0x14/0x20 [ 119.020614] ? do_raw_spin_lock+0xc1/0x200 [ 119.024847] ? _raw_spin_unlock_irq+0x27/0x70 [ 119.029473] ? __run_timers+0x9f6/0xc60 [ 119.033500] ? __bpf_trace_timer_expire_entry+0x30/0x30 [ 119.038857] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 119.043859] ? graph_lock+0x170/0x170 [ 119.047644] ? print_usage_bug+0xc0/0xc0 [ 119.051684] ? lock_release+0x9f0/0x9f0 [ 119.055643] ? hrtimer_update_softirq_timer+0xa0/0xa0 [ 119.060843] ? find_held_lock+0x36/0x1c0 [ 119.064888] ? graph_lock+0x170/0x170 [ 119.068691] ? mark_held_locks+0xc9/0x160 [ 119.072825] ? lock_downgrade+0x8f0/0x8f0 [ 119.077079] ? __do_softirq+0x278/0xa74 [ 119.081041] ? __lock_is_held+0xb5/0x140 [ 119.085092] __do_softirq+0x2eb/0xa74 [ 119.088885] ? __irqentry_text_end+0x1f9f00/0x1f9f00 [ 119.093979] ? trace_hardirqs_off+0xb8/0x2b0 [ 119.098374] ? kasan_check_read+0x11/0x20 [ 119.102503] ? graph_lock+0x170/0x170 [ 119.106288] ? native_apic_msr_write+0x5b/0x80 [ 119.110918] ? lapic_next_event+0x5a/0x90 [ 119.115123] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 119.120689] ? clockevents_program_event+0x140/0x370 [ 119.125797] ? trace_hardirqs_off+0xb8/0x2b0 [ 119.130193] ? trace_hardirqs_on+0x2c0/0x2c0 [ 119.134594] irq_exit+0x1d6/0x210 [ 119.138033] smp_apic_timer_interrupt+0x18e/0x6a0 [ 119.142860] ? smp_call_function_single_interrupt+0x5d0/0x5d0 [ 119.148735] ? interrupt_entry+0xb5/0xf0 [ 119.152844] ? trace_hardirqs_off_caller+0xbb/0x2b0 [ 119.157909] ? trace_hardirqs_off_caller+0xbb/0x2b0 [ 119.162915] ? trace_hardirqs_off+0xb8/0x2b0 [ 119.167308] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 119.172142] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 119.177151] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 119.182176] ? task_prio+0x50/0x50 [ 119.185722] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 119.190600] apic_timer_interrupt+0xf/0x20 [ 119.194826] [ 119.197064] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x50 [ 119.202409] Code: 14 dd 28 00 00 00 4d 39 d0 72 1b 49 83 c1 01 4a 89 7c 10 e0 4a 89 74 10 e8 4a 89 54 10 f0 4a 89 4c d8 20 4c 89 08 5d c3 66 90 <55> 65 48 8b 04 25 40 ee 01 00 65 8b 15 3f 2d 85 7e 48 89 e5 81 e2 [ 119.221297] RSP: 0018:ffff8801d90cf190 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 119.229009] RAX: 0000000000000000 RBX: ffff8801a8a836f0 RCX: ffffffff820f4dfc [ 119.236269] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 119.243527] RBP: ffff8801d90cf3a0 R08: ffff8801acb18300 R09: ffffed0035150754 [ 119.250919] R10: ffffed0035150754 R11: ffff8801a8a83aa3 R12: 0000000000000000 [ 119.258173] R13: 00000000000000a0 R14: ffff8801ccfbe780 R15: 0000000000000000 [ 119.265438] ? ext4_mark_iloc_dirty+0x18bc/0x2f90 [ 119.270286] ? ext4_mark_iloc_dirty+0x18ca/0x2f90 [ 119.275119] ? lock_downgrade+0x8f0/0x8f0 [ 119.279261] ? ext4_chunk_trans_blocks+0x30/0x30 [ 119.284003] ? wait_for_completion+0x8d0/0x8d0 [ 119.288568] ? jbd2_write_access_granted.part.9+0x274/0x430 [ 119.294318] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 119.299844] ? ext4_superblock_csum_set+0x2af/0x380 [ 119.304844] ? ext4_group_desc_csum+0xdf0/0xdf0 [ 119.309498] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 119.315022] ? jbd2_journal_dirty_metadata+0x2f3/0xc60 [ 119.320304] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 119.326276] ext4_orphan_del+0x8d3/0xee0 [ 119.330324] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 119.335853] ? ext4_unlink+0x1100/0x1100 [ 119.339905] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 119.344907] ? ext4_xattr_ensure_credits+0x86/0x350 [ 119.349927] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 119.355457] ? ext4_xattr_delete_inode+0x27d/0xeb0 [ 119.360386] ? ext4_expand_extra_isize_ea+0x1c10/0x1c10 [ 119.365743] ? __sb_start_write+0x17f/0x300 [ 119.370055] ext4_evict_inode+0xa0e/0x19b0 [ 119.374283] ? ext4_da_write_begin+0x11f0/0x11f0 [ 119.379039] ? lock_downgrade+0x8f0/0x8f0 [ 119.383216] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 119.388792] ? __inode_wait_for_writeback+0x2cf/0x380 [ 119.393992] ? kasan_check_read+0x11/0x20 [ 119.398130] ? do_raw_spin_unlock+0xa7/0x2f0 [ 119.402538] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 119.407118] ? kasan_check_write+0x14/0x20 [ 119.411348] ? do_raw_spin_lock+0xc1/0x200 [ 119.415577] ? ext4_da_write_begin+0x11f0/0x11f0 [ 119.420332] evict+0x4ae/0x990 [ 119.423523] ? destroy_inode+0x200/0x200 [ 119.427586] ? lock_downgrade+0x8f0/0x8f0 [ 119.431742] ? kasan_check_read+0x11/0x20 [ 119.435894] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 119.440460] iput+0x5fa/0xa00 [ 119.443552] ? inode_add_lru+0x2a0/0x2a0 [ 119.447602] ? fsnotify_destroy_marks+0x2e7/0x5c0 [ 119.452434] ? kasan_check_read+0x11/0x20 [ 119.456566] ? do_raw_spin_unlock+0xa7/0x2f0 [ 119.461077] ? fsnotify_clear_marks_by_group+0x640/0x640 [ 119.466522] dentry_unlink_inode+0x461/0x5e0 [ 119.470923] ? d_delete+0xab/0x220 [ 119.474446] ? d_lru_add+0x120/0x120 [ 119.478137] ? lock_release+0x9f0/0x9f0 [ 119.482100] ? kasan_check_write+0x14/0x20 [ 119.486315] ? do_raw_spin_lock+0xc1/0x200 [ 119.490531] d_delete+0x1d7/0x220 [ 119.493971] vfs_rmdir+0x38b/0x470 [ 119.497513] do_rmdir+0x537/0x630 [ 119.500965] ? __ia32_sys_mkdir+0x80/0x80 [ 119.505096] ? do_fast_syscall_32+0x150/0xfb2 [ 119.509574] ? do_fast_syscall_32+0x150/0xfb2 [ 119.514095] ? lockdep_hardirqs_on+0x421/0x5c0 [ 119.518709] ? trace_hardirqs_on+0xbd/0x2c0 [ 119.523077] ? exit_to_usermode_loop+0x1f4/0x380 [ 119.527824] ? entry_SYSENTER_compat+0x70/0x7f [ 119.532396] __ia32_sys_rmdir+0x35/0x40 [ 119.536355] do_fast_syscall_32+0x34d/0xfb2 [ 119.540679] ? do_int80_syscall_32+0x890/0x890 [ 119.545253] ? entry_SYSENTER_compat+0x68/0x7f [ 119.549822] ? trace_hardirqs_off_caller+0xbb/0x2b0 [ 119.554827] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 119.559823] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 119.564669] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 119.569775] ? prepare_exit_to_usermode+0x291/0x3b0 [ 119.574784] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 119.579616] entry_SYSENTER_compat+0x70/0x7f [ 119.584068] RIP: 0023:0xf7f6eca9 [ 119.587427] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 119.606312] RSP: 002b:00000000ffec0afc EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 119.614007] RAX: ffffffffffffffda RBX: 00000000ffec1be0 RCX: 000000000812368c [ 119.621371] RDX: 00000000ffec1be0 RSI: 0000000000000065 RDI: 00000000080d7747 [ 119.628711] RBP: 00000000ffec0b8c R08: 0000000000000000 R09: 0000000000000000 [ 119.636016] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 119.643286] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 119.650648] [ 119.652266] Allocated by task 4774: [ 119.655890] save_stack+0x43/0xd0 [ 119.659335] kasan_kmalloc+0xc4/0xe0 [ 119.663045] kasan_slab_alloc+0x12/0x20 [ 119.667001] kmem_cache_alloc+0x12e/0x710 [ 119.671146] ccid_new+0x25b/0x3e0 [ 119.674595] dccp_hdlr_ccid+0x27/0x150 [ 119.678469] __dccp_feat_activate+0x184/0x270 [ 119.682948] dccp_feat_activate_values+0x3b6/0x839 [ 119.687879] dccp_create_openreq_child+0x47a/0x620 [ 119.692794] dccp_v6_request_recv_sock+0x253/0x2040 [ 119.697795] dccp_check_req+0x46e/0x6c0 [ 119.701771] dccp_v6_rcv+0x88e/0x1d9c [ 119.705558] ip6_input_finish+0x407/0x1a40 [ 119.709776] ip6_input+0xe9/0x600 [ 119.713215] ip6_rcv_finish+0x17a/0x330 [ 119.717189] ipv6_rcv+0x11e/0x650 [ 119.720642] __netif_receive_skb_one_core+0x14d/0x200 [ 119.725816] __netif_receive_skb+0x2c/0x1e0 [ 119.730132] process_backlog+0x219/0x760 [ 119.734192] net_rx_action+0x799/0x1900 [ 119.738154] __do_softirq+0x2eb/0xa74 [ 119.741939] [ 119.743550] Freed by task 4775: [ 119.746812] save_stack+0x43/0xd0 [ 119.750322] __kasan_slab_free+0x11a/0x170 [ 119.754544] kasan_slab_free+0xe/0x10 [ 119.758329] kmem_cache_free+0x86/0x280 [ 119.762286] ccid_hc_tx_delete+0xc3/0x100 [ 119.766414] dccp_hdlr_ccid+0x7d/0x150 [ 119.770289] __dccp_feat_activate+0x184/0x270 [ 119.774769] dccp_feat_activate_values+0x3b6/0x839 [ 119.779683] dccp_create_openreq_child+0x47a/0x620 [ 119.784596] dccp_v6_request_recv_sock+0x253/0x2040 [ 119.789596] dccp_check_req+0x46e/0x6c0 [ 119.793569] dccp_v6_rcv+0x88e/0x1d9c [ 119.797355] ip6_input_finish+0x407/0x1a40 [ 119.801571] ip6_input+0xe9/0x600 [ 119.805010] ip6_rcv_finish+0x17a/0x330 [ 119.808968] ipv6_rcv+0x11e/0x650 [ 119.812405] __netif_receive_skb_one_core+0x14d/0x200 [ 119.817577] __netif_receive_skb+0x2c/0x1e0 [ 119.821894] process_backlog+0x219/0x760 [ 119.825951] net_rx_action+0x799/0x1900 [ 119.829909] __do_softirq+0x2eb/0xa74 [ 119.833689] [ 119.835301] The buggy address belongs to the object at ffff8801aaaf7700 [ 119.835301] which belongs to the cache ccid2_hc_tx_sock of size 1240 [ 119.848461] The buggy address is located 0 bytes inside of [ 119.848461] 1240-byte region [ffff8801aaaf7700, ffff8801aaaf7bd8) [ 119.860230] The buggy address belongs to the page: [ 119.865175] page:ffffea0006aabd80 count:1 mapcount:0 mapping:ffff8801cd855080 index:0x0 compound_mapcount: 0 [ 119.875140] flags: 0x2fffc0000008100(slab|head) [ 119.879818] raw: 02fffc0000008100 ffffea00075c7c08 ffff8801cd856448 ffff8801cd855080 [ 119.887684] raw: 0000000000000000 ffff8801aaaf6100 0000000100000005 0000000000000000 [ 119.895568] page dumped because: kasan: bad access detected [ 119.901365] [ 119.902973] Memory state around the buggy address: [ 119.907884] ffff8801aaaf7600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 119.915226] ffff8801aaaf7680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 119.922565] >ffff8801aaaf7700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 119.929905] ^ [ 119.933275] ffff8801aaaf7780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 119.940618] ffff8801aaaf7800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 119.947954] ================================================================== [ 119.955292] Disabling lock debugging due to kernel taint [ 119.960791] Kernel panic - not syncing: panic_on_warn set ... [ 119.960791] [ 119.968171] CPU: 1 PID: 4491 Comm: syz-executor0 Tainted: G B 4.19.0-rc1+ #115 [ 119.976828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 119.986178] Call Trace: [ 119.988751] [ 119.990902] dump_stack+0x1c9/0x2b4 [ 119.994533] ? dump_stack_print_info.cold.2+0x52/0x52 [ 119.999721] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 120.004472] panic+0x238/0x4e7 [ 120.007661] ? add_taint.cold.5+0x16/0x16 [ 120.011807] ? trace_hardirqs_on+0xb4/0x2c0 [ 120.016121] ? trace_hardirqs_on+0x9a/0x2c0 [ 120.020456] ? ccid_hc_tx_delete+0xe0/0x100 [ 120.024773] kasan_end_report+0x47/0x4f [ 120.028743] kasan_report.cold.7+0x76/0x30d [ 120.033076] __asan_report_load8_noabort+0x14/0x20 [ 120.038004] ccid_hc_tx_delete+0xe0/0x100 [ 120.042150] ? dccp_init_sock+0x4a0/0x4a0 [ 120.046304] dccp_sk_destruct+0x3c/0x80 [ 120.050283] __sk_destruct+0x107/0xa60 [ 120.054184] ? sock_warn_obsolete_bsdism+0xb0/0xb0 [ 120.059123] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 120.064233] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 120.069331] ? lockdep_hardirqs_on+0x19e/0x5c0 [ 120.073907] ? trace_hardirqs_on+0xbd/0x2c0 [ 120.078258] ? kasan_check_read+0x11/0x20 [ 120.082400] ? debug_object_deactivate+0x2eb/0x450 [ 120.087325] ? lock_acquire+0x1e4/0x4f0 [ 120.091294] ? rcu_process_callbacks+0x1065/0x27c0 [ 120.096393] ? lock_release+0x9f0/0x9f0 [ 120.100374] ? debug_stats_show+0x100/0x100 [ 120.104695] ? file_free_rcu+0x6f/0x90 [ 120.108579] ? kmem_cache_free+0x246/0x280 [ 120.112846] ? sock_warn_obsolete_bsdism+0xb0/0xb0 [ 120.117776] rcu_process_callbacks+0xf78/0x27c0 [ 120.122452] ? call_rcu_sched+0x20/0x20 [ 120.126422] ? find_held_lock+0x36/0x1c0 [ 120.130512] ? mark_held_locks+0xc9/0x160 [ 120.134663] ? _raw_spin_unlock_irq+0x27/0x70 [ 120.139152] ? _raw_spin_unlock_irq+0x27/0x70 [ 120.143656] ? lockdep_hardirqs_on+0x19e/0x5c0 [ 120.148236] ? trace_hardirqs_on+0xbd/0x2c0 [ 120.152552] ? kasan_check_read+0x11/0x20 [ 120.156696] ? __run_timers+0x9c8/0xc60 [ 120.160667] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 120.165768] ? kasan_check_write+0x14/0x20 [ 120.169998] ? do_raw_spin_lock+0xc1/0x200 [ 120.174242] ? _raw_spin_unlock_irq+0x27/0x70 [ 120.178731] ? __run_timers+0x9f6/0xc60 [ 120.182708] ? __bpf_trace_timer_expire_entry+0x30/0x30 [ 120.188082] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 120.193103] ? graph_lock+0x170/0x170 [ 120.196906] ? print_usage_bug+0xc0/0xc0 [ 120.200976] ? lock_release+0x9f0/0x9f0 [ 120.204975] ? hrtimer_update_softirq_timer+0xa0/0xa0 [ 120.210169] ? find_held_lock+0x36/0x1c0 [ 120.214231] ? graph_lock+0x170/0x170 [ 120.218036] ? mark_held_locks+0xc9/0x160 [ 120.222183] ? lock_downgrade+0x8f0/0x8f0 [ 120.226331] ? __do_softirq+0x278/0xa74 [ 120.230306] ? __lock_is_held+0xb5/0x140 [ 120.234367] __do_softirq+0x2eb/0xa74 [ 120.238198] ? __irqentry_text_end+0x1f9f00/0x1f9f00 [ 120.243307] ? trace_hardirqs_off+0xb8/0x2b0 [ 120.247709] ? kasan_check_read+0x11/0x20 [ 120.251852] ? graph_lock+0x170/0x170 [ 120.255650] ? native_apic_msr_write+0x5b/0x80 [ 120.260229] ? lapic_next_event+0x5a/0x90 [ 120.264378] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 120.269912] ? clockevents_program_event+0x140/0x370 [ 120.275017] ? trace_hardirqs_off+0xb8/0x2b0 [ 120.279419] ? trace_hardirqs_on+0x2c0/0x2c0 [ 120.283833] irq_exit+0x1d6/0x210 [ 120.287283] smp_apic_timer_interrupt+0x18e/0x6a0 [ 120.292125] ? smp_call_function_single_interrupt+0x5d0/0x5d0 [ 120.298017] ? interrupt_entry+0xb5/0xf0 [ 120.302088] ? trace_hardirqs_off_caller+0xbb/0x2b0 [ 120.307112] ? trace_hardirqs_off_caller+0xbb/0x2b0 [ 120.312127] ? trace_hardirqs_off+0xb8/0x2b0 [ 120.316543] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 120.321382] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 120.326390] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 120.331403] ? task_prio+0x50/0x50 [ 120.334947] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 120.339801] apic_timer_interrupt+0xf/0x20 [ 120.344025] [ 120.346261] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x50 [ 120.351624] Code: 14 dd 28 00 00 00 4d 39 d0 72 1b 49 83 c1 01 4a 89 7c 10 e0 4a 89 74 10 e8 4a 89 54 10 f0 4a 89 4c d8 20 4c 89 08 5d c3 66 90 <55> 65 48 8b 04 25 40 ee 01 00 65 8b 15 3f 2d 85 7e 48 89 e5 81 e2 [ 120.370518] RSP: 0018:ffff8801d90cf190 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 120.378222] RAX: 0000000000000000 RBX: ffff8801a8a836f0 RCX: ffffffff820f4dfc [ 120.385513] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 120.392805] RBP: ffff8801d90cf3a0 R08: ffff8801acb18300 R09: ffffed0035150754 [ 120.400064] R10: ffffed0035150754 R11: ffff8801a8a83aa3 R12: 0000000000000000 [ 120.407325] R13: 00000000000000a0 R14: ffff8801ccfbe780 R15: 0000000000000000 [ 120.414597] ? ext4_mark_iloc_dirty+0x18bc/0x2f90 [ 120.419448] ? ext4_mark_iloc_dirty+0x18ca/0x2f90 [ 120.424307] ? lock_downgrade+0x8f0/0x8f0 [ 120.428455] ? ext4_chunk_trans_blocks+0x30/0x30 [ 120.433210] ? wait_for_completion+0x8d0/0x8d0 [ 120.437973] ? jbd2_write_access_granted.part.9+0x274/0x430 [ 120.443685] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 120.449218] ? ext4_superblock_csum_set+0x2af/0x380 [ 120.454229] ? ext4_group_desc_csum+0xdf0/0xdf0 [ 120.458893] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 120.464433] ? jbd2_journal_dirty_metadata+0x2f3/0xc60 [ 120.469712] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 120.475248] ext4_orphan_del+0x8d3/0xee0 [ 120.479309] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 120.484884] ? ext4_unlink+0x1100/0x1100 [ 120.488944] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 120.493957] ? ext4_xattr_ensure_credits+0x86/0x350 [ 120.498975] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 120.504511] ? ext4_xattr_delete_inode+0x27d/0xeb0 [ 120.509443] ? ext4_expand_extra_isize_ea+0x1c10/0x1c10 [ 120.514816] ? __sb_start_write+0x17f/0x300 [ 120.519145] ext4_evict_inode+0xa0e/0x19b0 [ 120.523425] ? ext4_da_write_begin+0x11f0/0x11f0 [ 120.528195] ? lock_downgrade+0x8f0/0x8f0 [ 120.532339] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 120.537870] ? __inode_wait_for_writeback+0x2cf/0x380 [ 120.543056] ? kasan_check_read+0x11/0x20 [ 120.547666] ? do_raw_spin_unlock+0xa7/0x2f0 [ 120.552072] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 120.556652] ? kasan_check_write+0x14/0x20 [ 120.560884] ? do_raw_spin_lock+0xc1/0x200 [ 120.565113] ? ext4_da_write_begin+0x11f0/0x11f0 [ 120.569901] evict+0x4ae/0x990 [ 120.573103] ? destroy_inode+0x200/0x200 [ 120.577173] ? lock_downgrade+0x8f0/0x8f0 [ 120.581322] ? kasan_check_read+0x11/0x20 [ 120.585469] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 120.590046] iput+0x5fa/0xa00 [ 120.593169] ? inode_add_lru+0x2a0/0x2a0 [ 120.597236] ? fsnotify_destroy_marks+0x2e7/0x5c0 [ 120.602078] ? kasan_check_read+0x11/0x20 [ 120.606223] ? do_raw_spin_unlock+0xa7/0x2f0 [ 120.610630] ? fsnotify_clear_marks_by_group+0x640/0x640 [ 120.616082] dentry_unlink_inode+0x461/0x5e0 [ 120.620488] ? d_delete+0xab/0x220 [ 120.624028] ? d_lru_add+0x120/0x120 [ 120.627741] ? lock_release+0x9f0/0x9f0 [ 120.631714] ? kasan_check_write+0x14/0x20 [ 120.635951] ? do_raw_spin_lock+0xc1/0x200 [ 120.640194] d_delete+0x1d7/0x220 [ 120.643647] vfs_rmdir+0x38b/0x470 [ 120.647192] do_rmdir+0x537/0x630 [ 120.650667] ? __ia32_sys_mkdir+0x80/0x80 [ 120.654814] ? do_fast_syscall_32+0x150/0xfb2 [ 120.659319] ? do_fast_syscall_32+0x150/0xfb2 [ 120.663811] ? lockdep_hardirqs_on+0x421/0x5c0 [ 120.668386] ? trace_hardirqs_on+0xbd/0x2c0 [ 120.672707] ? exit_to_usermode_loop+0x1f4/0x380 [ 120.677457] ? entry_SYSENTER_compat+0x70/0x7f [ 120.682039] __ia32_sys_rmdir+0x35/0x40 [ 120.686015] do_fast_syscall_32+0x34d/0xfb2 [ 120.690339] ? do_int80_syscall_32+0x890/0x890 [ 120.694917] ? entry_SYSENTER_compat+0x68/0x7f [ 120.699498] ? trace_hardirqs_off_caller+0xbb/0x2b0 [ 120.704511] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 120.709347] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 120.714192] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 120.719217] ? prepare_exit_to_usermode+0x291/0x3b0 [ 120.724233] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 120.729083] entry_SYSENTER_compat+0x70/0x7f [ 120.733488] RIP: 0023:0xf7f6eca9 [ 120.736852] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 120.755749] RSP: 002b:00000000ffec0afc EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 120.763453] RAX: ffffffffffffffda RBX: 00000000ffec1be0 RCX: 000000000812368c [ 120.770716] RDX: 00000000ffec1be0 RSI: 0000000000000065 RDI: 00000000080d7747 [ 120.777977] RBP: 00000000ffec0b8c R08: 0000000000000000 R09: 0000000000000000 [ 120.785239] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 120.792500] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 120.800062] Dumping ftrace buffer: [ 120.803592] (ftrace buffer empty) [ 120.807280] Kernel Offset: disabled [ 120.810886] Rebooting in 86400 seconds..