[K[ [0;31m*[0;1;31m*[0m] A start job is running for dev-ttyS0.device (1min 28s / 1min 30s)
[K[ [0;31m*[0;1;31m*[0m[0;31m*[0m] A start job is running for dev-ttyS0.device (1min 29s / 1min 30s)
[K[ [0;31m*[0;1;31m*[0m[0;31m* [0m] A start job is running for dev-ttyS0.device (1min 29s / 1min 30s)
[K[[0;1;31m TIME [0m] Timed out waiting for device dev-ttyS0.device.
[[0;1;33mDEPEND[0m] Dependency failed for Serial Getty on ttyS0.
[[0;32m OK [0m] Reached target Login Prompts.
[[0;32m OK [0m] Reached target Multi-User System.
[[0;32m OK [0m] Reached target Graphical Interface.
Starting Update UTMP about System Runlevel Changes...
[[0;32m OK [0m] Started Update UTMP about System Runlevel Changes.
Warning: Permanently added '10.128.1.22' (ECDSA) to the list of known hosts.
2020/07/08 21:40:32 parsed 1 programs
2020/07/08 21:40:32 executed programs: 0
[ 617.080047][ T22] audit: type=1400 audit(1594244432.128:8): avc: denied { execmem } for pid=348 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
[ 617.090034][ T352] cgroup1: Unknown subsys name 'perf_event'
[ 617.107646][ T354] cgroup1: Unknown subsys name 'perf_event'
[ 617.114233][ T354] cgroup1: Unknown subsys name 'net_cls'
[ 617.117911][ T352] cgroup1: Unknown subsys name 'net_cls'
[ 617.122958][ T357] cgroup1: Unknown subsys name 'perf_event'
[ 617.128392][ T359] cgroup1: Unknown subsys name 'perf_event'
[ 617.134867][ T360] cgroup1: Unknown subsys name 'perf_event'
[ 617.139281][ T361] cgroup1: Unknown subsys name 'perf_event'
[ 617.143617][ T357] cgroup1: Unknown subsys name 'net_cls'
[ 617.150693][ T361] cgroup1: Unknown subsys name 'net_cls'
[ 617.156449][ T360] cgroup1: Unknown subsys name 'net_cls'
[ 617.164360][ T359] cgroup1: Unknown subsys name 'net_cls'
2020/07/08 21:40:37 executed programs: 48
2020/07/08 21:40:42 executed programs: 208
2020/07/08 21:40:47 executed programs: 375
2020/07/08 21:40:52 executed programs: 546
2020/07/08 21:40:57 executed programs: 705
2020/07/08 21:41:02 executed programs: 871
2020/07/08 21:41:07 executed programs: 1035
2020/07/08 21:41:12 executed programs: 1196
[ 660.934282][ T7994] ==================================================================
[ 660.942392][ T7994] BUG: KASAN: use-after-free in __internal_add_timer+0x28d/0x490
[ 660.950089][ T7994] Write of size 8 at addr ffff8881c83fb188 by task syz-executor.5/7994
[ 660.958289][ T7994]
[ 660.960588][ T7994] CPU: 1 PID: 7994 Comm: syz-executor.5 Not tainted 5.4.50-syzkaller-00011-g07da2129a868 #0
[ 660.970609][ T7994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 660.980628][ T7994] Call Trace:
[ 660.983888][ T7994] dump_stack+0x14a/0x1ce
[ 660.988185][ T7994] ? show_regs_print_info+0x12/0x12
[ 660.993350][ T7994] ? printk+0xd2/0x114
[ 660.997385][ T7994] print_address_description+0x93/0x620
[ 661.002892][ T7994] ? devkmsg_release+0x11c/0x11c
[ 661.007793][ T7994] ? do_vfs_ioctl+0x770/0x1750
[ 661.012569][ T7994] __kasan_report+0x16d/0x1e0
[ 661.017212][ T7994] ? __internal_add_timer+0x28d/0x490
[ 661.022549][ T7994] kasan_report+0x36/0x60
[ 661.026881][ T7994] __internal_add_timer+0x28d/0x490
[ 661.032048][ T7994] __mod_timer+0xbf4/0x1af0
[ 661.036520][ T7994] ? mod_timer_pending+0x20/0x20
[ 661.041430][ T7994] ? kmem_cache_alloc_trace+0xc3/0x280
[ 661.046853][ T7994] ? round_jiffies_up+0xf3/0x130
[ 661.051756][ T7994] ? __round_jiffies_up_relative+0x160/0x160
[ 661.057702][ T7994] ? selinux_tun_dev_alloc_security+0x6b/0x140
[ 661.063964][ T7994] ? init_timer_key+0x2c/0x1d0
[ 661.068692][ T7994] __tun_chr_ioctl+0x35c7/0x4bc0
[ 661.073596][ T7994] ? tun_xdp_xmit+0x5b0/0x5b0
[ 661.078390][ T7994] ? tun_chr_poll+0x640/0x640
[ 661.083032][ T7994] do_vfs_ioctl+0x770/0x1750
[ 661.087592][ T7994] ? selinux_file_ioctl+0x73b/0x990
[ 661.092755][ T7994] ? ioctl_preallocate+0x250/0x250
[ 661.097831][ T7994] ? _copy_to_user+0x8e/0xb0
[ 661.102386][ T7994] ? __fget+0x37c/0x3c0
[ 661.106506][ T7994] ? get_timespec64+0x1d0/0x1d0
[ 661.111329][ T7994] ? fget_many+0x20/0x20
[ 661.115553][ T7994] ? __x64_sys_clock_gettime+0x20d/0x260
[ 661.121150][ T7994] ? security_file_ioctl+0xad/0xc0
[ 661.126228][ T7994] __x64_sys_ioctl+0xd4/0x110
[ 661.130869][ T7994] do_syscall_64+0xcb/0x150
[ 661.135338][ T7994] entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 661.141213][ T7994] RIP: 0033:0x45cba9
[ 661.145075][ T7994] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 661.164647][ T7994] RSP: 002b:00007f762205fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 661.173040][ T7994] RAX: ffffffffffffffda RBX: 00000000004f05e0 RCX: 000000000045cba9
[ 661.180998][ T7994] RDX: 0000000020000300 RSI: 00000000400454ca RDI: 0000000000000003
[ 661.188937][ T7994] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[ 661.196876][ T7994] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[ 661.204812][ T7994] R13: 00000000000005b8 R14: 00000000004c88dd R15: 00007f76220606d4
[ 661.212764][ T7994]
[ 661.215061][ T7994] The buggy address belongs to the page:
[ 661.220658][ T7994] page:ffffea000720fec0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0
[ 661.229742][ T7994] flags: 0x8000000000000000()
[ 661.234388][ T7994] raw: 8000000000000000 0000000000000000 ffffea000709ab08 0000000000000000
[ 661.242937][ T7994] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[ 661.251577][ T7994] page dumped because: kasan: bad access detected
[ 661.258000][ T7994]
[ 661.260302][ T7994] Memory state around the buggy address:
[ 661.265899][ T7994] ffff8881c83fb080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 661.273923][ T7994] ffff8881c83fb100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 661.281962][ T7994] >ffff8881c83fb180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 661.290000][ T7994] ^
[ 661.294292][ T7994] ffff8881c83fb200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 661.302317][ T7994] ffff8881c83fb280: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 661.310341][ T7994] ==================================================================
[ 661.318365][ T7994] Disabling lock debugging due to kernel taint
2020/07/08 21:41:17 executed programs: 1351
[ 664.562044][ C0] BUG: kernel NULL pointer dereference, address: 0000000000000000
[ 664.569873][ C0] #PF: supervisor instruction fetch in kernel mode
[ 664.576354][ C0] #PF: error_code(0x0010) - not-present page
[ 664.582305][ C0] PGD 1cdcba067 P4D 1cdcba067 PUD 1cdcbb067 PMD 0
[ 664.588780][ C0] Oops: 0010 [#1] PREEMPT SMP KASAN
[ 664.593945][ C0] CPU: 0 PID: 8434 Comm: syz-executor.3 Tainted: G B 5.4.50-syzkaller-00011-g07da2129a868 #0
[ 664.605358][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 664.615386][ C0] RIP: 0010:0x0
[ 664.618825][ C0] Code: Bad RIP value.
[ 664.622860][ C0] RSP: 0000:ffff8881db809c08 EFLAGS: 00010202
[ 664.628890][ C0] RAX: ffffffff8132ff7c RBX: 0000000000000000 RCX: ffff8881cec65d00
[ 664.636829][ C0] RDX: 0000000080000101 RSI: 0000000000000000 RDI: ffff8881c83fb180
[ 664.644773][ C0] RBP: ffff8881c83fb1a0 R08: ffffffff8132fe17 R09: ffffed103b7046e7
[ 664.652712][ C0] R10: ffffed103b7046e7 R11: 0000000000000000 R12: 0000000000000000
[ 664.660662][ C0] R13: 0000000000000101 R14: ffff8881c83fb188 R15: ffff8881c83fb180
[ 664.668610][ C0] FS: 00007fda7de8f700(0000) GS:ffff8881db800000(0000) knlGS:0000000000000000
[ 664.677509][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 664.684110][ C0] CR2: ffffffffffffffd6 CR3: 00000001ce200005 CR4: 00000000001606f0
[ 664.692057][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 664.700002][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 664.707941][ C0] Call Trace:
[ 664.711227][ C0]
[ 664.714051][ C0] call_timer_fn+0x154/0x340
[ 664.718609][ C0] expire_timers+0x35c/0x470
[ 664.723165][ C0] __run_timers+0x662/0x7b0
[ 664.727635][ C0] ? enqueue_hrtimer+0x1cf/0x230
[ 664.732542][ C0] ? detach_timer+0x260/0x260
[ 664.737184][ C0] ? __run_hrtimer+0x601/0x7a0
[ 664.741916][ C0] ? clockevents_program_event+0x214/0x2d0
[ 664.747689][ C0] ? hrtimer_interrupt+0xe75/0x10a0
[ 664.752851][ C0] run_timer_softirq+0x19/0x30
[ 664.757598][ C0] __do_softirq+0x2d5/0x725
[ 664.762073][ C0] ? __irqentry_text_end+0x1fc47b/0x1fc47b
[ 664.767904][ C0] ? hrtimer_init+0x340/0x340
[ 664.772547][ C0] ? kvm_sched_clock_read+0x15/0x40
[ 664.777757][ C0] ? sched_clock_cpu+0x18/0x380
[ 664.782577][ C0] irq_exit+0x16d/0x180
[ 664.786702][ C0] smp_apic_timer_interrupt+0x281/0x3f0
[ 664.792217][ C0] apic_timer_interrupt+0xf/0x20
[ 664.797120][ C0]
[ 664.800031][ C0] RIP: 0010:clear_page_erms+0x7/0x10
[ 664.805331][ C0] Code: 48 89 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 aa c3 90 90 90 90 90 90 55 41 57 41 56 41 55 41 54 53 48 83 ec
[ 664.824966][ C0] RSP: 0000:ffff8881c78ff548 EFLAGS: 00010246 ORIG_RAX: ffffffffffffff13
[ 664.833356][ C0] RAX: 0000000000000000 RBX: ffff8881cec66730 RCX: 0000000000000c40
[ 664.841302][ C0] RDX: 0000000000000200 RSI: 0000000000000000 RDI: ffff8881d7bad3c0
[ 664.849249][ C0] RBP: 1ffff11039d8cce6 R08: dffffc0000000000 R09: ffffed103af75a00
[ 664.857191][ C0] R10: fffff94000ebdd6f R11: 0000000000000000 R12: 0000000000000001
[ 664.865131][ C0] R13: ffffea00075eeb40 R14: dffffc0000000000 R15: 0005088000000000
[ 664.873082][ C0] prep_new_page+0x11a/0x380
[ 664.877641][ C0] get_page_from_freelist+0x486/0x7c0
[ 664.882979][ C0] __alloc_pages_nodemask+0x374/0x7c0
[ 664.888320][ C0] ? gfp_pfmemalloc_allowed+0x130/0x130
[ 664.893836][ C0] ? find_next_bit+0xf7/0x120
[ 664.898479][ C0] pcpu_populate_chunk+0x149/0xd60
[ 664.903557][ C0] ? find_next_bit+0xd8/0x120
[ 664.908201][ C0] pcpu_alloc+0x91c/0x11f0
[ 664.912590][ C0] array_map_alloc+0x38f/0x6e0
[ 664.917330][ C0] ? bpf_percpu_array_update+0x630/0x630
[ 664.922937][ C0] ? array_map_alloc_check+0x185/0x270
[ 664.928362][ C0] __do_sys_bpf+0x3743/0xbea0
[ 664.933009][ C0] ? __bpf_prog_put_rcu+0x300/0x300
[ 664.938194][ C0] ? switch_mm_irqs_off+0x509/0xa10
[ 664.943357][ C0] ? switch_mm+0x100/0x100
[ 664.947743][ C0] ? _copy_to_user+0x8e/0xb0
[ 664.952300][ C0] ? put_timespec64+0x109/0x150
[ 664.957136][ C0] ? ktime_get_raw+0x130/0x130
[ 664.961865][ C0] ? get_timespec64+0x1d0/0x1d0
[ 664.966681][ C0] ? __schedule+0x920/0xef0
[ 664.971171][ C0] do_syscall_64+0xcb/0x150
[ 664.975643][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 664.981501][ C0] RIP: 0033:0x45cba9
[ 664.985385][ C0] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 665.004957][ C0] RSP: 002b:00007fda7de8ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 665.013344][ C0] RAX: ffffffffffffffda RBX: 00000000004db0e0 RCX: 000000000045cba9
[ 665.021300][ C0] RDX: 0000000000000040 RSI: 0000000020000040 RDI: 0c00000000000000
[ 665.029241][ C0] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000
[ 665.037182][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[ 665.045124][ C0] R13: 0000000000000064 R14: 00000000004c33ef R15: 00007fda7de8f6d4
[ 665.053078][ C0] Modules linked in:
[ 665.056943][ C0] CR2: 0000000000000000
[ 665.061065][ C0] ---[ end trace 478ce9b2062906b5 ]---
[ 665.066490][ C0] RIP: 0010:0x0
[ 665.069932][ C0] Code: Bad RIP value.
[ 665.073979][ C0] RSP: 0000:ffff8881db809c08 EFLAGS: 00010202
[ 665.080010][ C0] RAX: ffffffff8132ff7c RBX: 0000000000000000 RCX: ffff8881cec65d00
[ 665.087959][ C0] RDX: 0000000080000101 RSI: 0000000000000000 RDI: ffff8881c83fb180
[ 665.095903][ C0] RBP: ffff8881c83fb1a0 R08: ffffffff8132fe17 R09: ffffed103b7046e7
[ 665.103847][ C0] R10: ffffed103b7046e7 R11: 0000000000000000 R12: 0000000000000000
[ 665.111787][ C0] R13: 0000000000000101 R14: ffff8881c83fb188 R15: ffff8881c83fb180
[ 665.119751][ C0] FS: 00007fda7de8f700(0000) GS:ffff8881db800000(0000) knlGS:0000000000000000
[ 665.128655][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 665.135207][ C0] CR2: ffffffffffffffd6 CR3: 00000001ce200005 CR4: 00000000001606f0
[ 665.143153][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 665.151094][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 665.159035][ C0] Kernel panic - not syncing: Fatal exception in interrupt
[ 665.166720][ C0] Kernel Offset: disabled
[ 665.171024][ C0] Rebooting in 86400 seconds..