[ ***] A start job is running for dev-ttyS0.device (1min 28s / 1min 30s)[ **] A start job is running for dev-ttyS0.device (1min 29s / 1min 30s)[ *] A start job is running for dev-ttyS0.device (1min 29s / 1min 30s)[ TIME ] Timed out waiting for device dev-ttyS0.device. [DEPEND] Dependency failed for Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Warning: Permanently added '10.128.0.253' (ECDSA) to the list of known hosts. 2021/04/08 02:56:22 parsed 1 programs 2021/04/08 02:56:22 executed programs: 0 [ 406.534028][ T22] audit: type=1400 audit(1617850582.632:8): avc: denied { execmem } for pid=338 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 406.538431][ T342] cgroup1: Unknown subsys name 'perf_event' [ 406.561137][ T342] cgroup1: Unknown subsys name 'net_cls' [ 406.565316][ T341] cgroup1: Unknown subsys name 'perf_event' [ 406.584030][ T341] cgroup1: Unknown subsys name 'net_cls' [ 406.596895][ T347] cgroup1: Unknown subsys name 'perf_event' [ 406.598503][ T346] cgroup1: Unknown subsys name 'perf_event' [ 406.604017][ T347] cgroup1: Unknown subsys name 'net_cls' [ 406.620438][ T346] cgroup1: Unknown subsys name 'net_cls' [ 406.621163][ T349] cgroup1: Unknown subsys name 'perf_event' [ 406.629392][ T350] cgroup1: Unknown subsys name 'perf_event' [ 406.650271][ T350] cgroup1: Unknown subsys name 'net_cls' [ 406.651678][ T349] cgroup1: Unknown subsys name 'net_cls' [ 406.741509][ T341] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.748530][ T341] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.756324][ T341] device bridge_slave_0 entered promiscuous mode [ 406.764483][ T341] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.771816][ T341] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.779092][ T341] device bridge_slave_1 entered promiscuous mode [ 406.869440][ T349] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.876716][ T349] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.884168][ T349] device bridge_slave_0 entered promiscuous mode [ 406.892571][ T349] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.899578][ T349] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.907303][ T349] device bridge_slave_1 entered promiscuous mode [ 406.914584][ T342] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.921875][ T342] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.929141][ T342] device bridge_slave_0 entered promiscuous mode [ 406.936352][ T342] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.943601][ T342] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.951106][ T342] device bridge_slave_1 entered promiscuous mode [ 407.019466][ T347] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.026637][ T347] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.034071][ T347] device bridge_slave_0 entered promiscuous mode [ 407.043365][ T347] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.050626][ T347] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.057880][ T347] device bridge_slave_1 entered promiscuous mode [ 407.073922][ T346] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.080955][ T346] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.088217][ T346] device bridge_slave_0 entered promiscuous mode [ 407.098025][ T346] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.105210][ T346] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.112575][ T346] device bridge_slave_1 entered promiscuous mode [ 407.196552][ T350] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.203613][ T350] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.211321][ T350] device bridge_slave_0 entered promiscuous mode [ 407.241474][ T350] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.248487][ T350] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.256290][ T350] device bridge_slave_1 entered promiscuous mode [ 407.326925][ T349] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.333966][ T349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.341226][ T349] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.348224][ T349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.367729][ T350] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.374766][ T350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.382034][ T350] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.389036][ T350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.400130][ T346] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.407152][ T346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.414412][ T346] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.421443][ T346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.440357][ T146] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.447560][ T146] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.455321][ T146] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.463125][ T146] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.470568][ T146] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.477687][ T146] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.485636][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 407.493098][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 407.500572][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 407.508741][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 407.516886][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.523930][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.531223][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 407.539408][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 407.547565][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.554595][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.562038][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 407.590532][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 407.598877][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 407.607217][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 407.616038][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 407.660041][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 407.700239][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 407.707711][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 407.716672][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 407.725833][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 407.733723][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 407.741388][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 407.749457][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.756469][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.764011][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 407.772212][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.779214][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.813897][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 407.822145][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 407.853718][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 407.862252][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 407.870578][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 407.877901][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 407.886747][ T351] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.893775][ T351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.901315][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 407.909432][ T351] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.916444][ T351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.923736][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 407.931760][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 407.939628][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 407.947803][ T351] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.954830][ T351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.962119][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 407.970320][ T351] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.977320][ T351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.984627][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 407.992910][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 408.001095][ T351] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.008100][ T351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.015403][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 408.023465][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 408.031464][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 408.039451][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 408.047452][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 408.055505][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 408.063523][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 408.071831][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 408.080161][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 408.088383][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 408.096572][ T351] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.103600][ T351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.110912][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 408.119125][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 408.127447][ T351] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.134477][ T351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.141787][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 408.149568][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 408.157716][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 408.184509][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 408.192737][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 408.201669][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 408.209549][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 408.218684][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 408.227109][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.234161][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.242689][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 408.250814][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 408.258668][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 408.266723][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 408.291013][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 408.299099][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 408.314198][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 408.335839][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 408.344259][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 408.352864][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 408.361074][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 408.369276][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 408.377883][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 408.407160][ T96] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 408.415850][ T96] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 408.424493][ T96] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 408.433253][ T96] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 408.441903][ T96] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 408.449656][ T96] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 408.481521][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 408.489761][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 408.498162][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 408.506641][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 408.515164][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 408.550368][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 408.558253][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 408.568820][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 408.578149][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 408.587604][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 408.595599][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 408.617313][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 408.625455][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 408.634322][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 408.649182][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 408.657902][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 408.666291][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 408.674755][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 408.683663][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 408.692110][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 408.700462][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 408.708676][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 408.716918][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 409.066621][ T415] ================================================================== [ 409.074711][ T415] BUG: KASAN: slab-out-of-bounds in try_to_del_timer_sync+0x2b1/0x460 [ 409.082838][ T415] Write of size 8 at addr ffff8881e549f1c8 by task syz-executor.3/415 [ 409.090969][ T415] [ 409.093269][ T415] CPU: 0 PID: 415 Comm: syz-executor.3 Not tainted 5.4.109-syzkaller-00001-g46c5fdececa6 #0 [ 409.103319][ T415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 409.113341][ T415] Call Trace: [ 409.116689][ T415] dump_stack+0x1d8/0x24e [ 409.120982][ T415] ? show_regs_print_info+0x12/0x12 [ 409.126149][ T415] ? printk+0xcf/0x114 [ 409.130186][ T415] print_address_description+0x9b/0x650 [ 409.135696][ T415] ? devkmsg_release+0x11c/0x11c [ 409.140626][ T415] ? _raw_spin_lock_irqsave+0xf8/0x210 [ 409.146049][ T415] __kasan_report+0x182/0x260 [ 409.150692][ T415] ? try_to_del_timer_sync+0x2b1/0x460 [ 409.156223][ T415] kasan_report+0x30/0x60 [ 409.160540][ T415] try_to_del_timer_sync+0x2b1/0x460 [ 409.165793][ T415] del_timer_sync+0x78/0xe0 [ 409.170263][ T415] tun_free_netdev+0x99/0x3b0 [ 409.174905][ T415] ? find_next_bit+0xc6/0x110 [ 409.179548][ T415] ? tun_xdp+0x3d0/0x3d0 [ 409.183770][ T415] netdev_run_todo+0xb31/0xda0 [ 409.188505][ T415] ? __sk_destruct+0x427/0x4b0 [ 409.193242][ T415] ? refcount_inc_checked+0x50/0x50 [ 409.198407][ T415] ? netdev_refcnt_read+0x190/0x190 [ 409.203574][ T415] ? __module_put_and_exit+0x20/0x20 [ 409.208866][ T415] ? __sk_destruct+0x427/0x4b0 [ 409.213600][ T415] tun_chr_close+0xc0/0xd0 [ 409.217994][ T415] ? tun_chr_open+0x4a0/0x4a0 [ 409.222642][ T415] __fput+0x27d/0x6c0 [ 409.226590][ T415] task_work_run+0x186/0x1b0 [ 409.231145][ T415] prepare_exit_to_usermode+0x2b0/0x310 [ 409.236654][ T415] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 409.242537][ T415] RIP: 0033:0x41926b [ 409.246399][ T415] Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44 [ 409.265968][ T415] RSP: 002b:00007ffeb219fdb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 409.274355][ T415] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 000000000041926b [ 409.282382][ T415] RDX: 0000000000570750 RSI: 0000000000000080 RDI: 0000000000000003 [ 409.290326][ T415] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000005704c0 [ 409.298266][ T415] R10: 00007ffeb219fea0 R11: 0000000000000293 R12: 0000000000063db0 [ 409.306252][ T415] R13: 00000000000003e8 R14: 000000000056bf60 R15: 0000000000063d75 [ 409.314232][ T415] [ 409.316531][ T415] Allocated by task 0: [ 409.320561][ T415] (stack is not available) [ 409.324937][ T415] [ 409.327232][ T415] Freed by task 0: [ 409.330917][ T415] (stack is not available) [ 409.335338][ T415] [ 409.337634][ T415] The buggy address belongs to the object at ffff8881e549ef80 [ 409.337634][ T415] which belongs to the cache mm_struct of size 1040 [ 409.351563][ T415] The buggy address is located 584 bytes inside of [ 409.351563][ T415] 1040-byte region [ffff8881e549ef80, ffff8881e549f390) [ 409.364919][ T415] The buggy address belongs to the page: [ 409.370518][ T415] page:ffffea0007952700 refcount:1 mapcount:0 mapping:ffff8881f5cf8280 index:0x0 compound_mapcount: 0 [ 409.381408][ T415] flags: 0x8000000000010200(slab|head) [ 409.386832][ T415] raw: 8000000000010200 dead000000000100 dead000000000122 ffff8881f5cf8280 [ 409.395404][ T415] raw: 0000000000000000 00000000800d000d 00000001ffffffff 0000000000000000 [ 409.403949][ T415] page dumped because: kasan: bad access detected [ 409.410322][ T415] [ 409.412618][ T415] Memory state around the buggy address: [ 409.418213][ T415] ffff8881e549f080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 409.426236][ T415] ffff8881e549f100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 409.434261][ T415] >ffff8881e549f180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 409.442285][ T415] ^ [ 409.448658][ T415] ffff8881e549f200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 409.456685][ T415] ffff8881e549f280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 409.464707][ T415] ================================================================== [ 409.472729][ T415] Disabling lock debugging due to kernel taint 2021/04/08 02:56:27 executed programs: 75 [ 412.199647][ C0] kasan: CONFIG_KASAN_INLINE enabled [ 412.204936][ C0] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 412.212968][ C0] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 412.219900][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.4.109-syzkaller-00001-g46c5fdececa6 #0 [ 412.230703][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 412.240731][ C0] RIP: 0010:expire_timers+0x141/0x410 [ 412.246067][ C0] Code: c1 e8 03 80 3c 18 00 74 08 4c 89 e7 e8 f8 fb 3d 00 4d 89 3c 24 4d 85 ff 74 2f e8 da 2d 0f 00 49 83 c7 08 4c 89 f8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ff e8 d1 fb 3d 00 4d 89 27 eb 11 66 66 2e [ 412.265811][ C0] RSP: 0018:ffff8881f6e09d10 EFLAGS: 00010007 [ 412.271843][ C0] RAX: 0000000000000003 RBX: dffffc0000000000 RCX: ffffffff85e18a80 [ 412.279788][ C0] RDX: 0000000000000102 RSI: 0000000000000008 RDI: ffff8881e549f1c8 [ 412.287749][ C0] RBP: 1ffff1103ca93e39 R08: dffffc0000000000 R09: 0000000000000003 [ 412.295687][ C0] R10: ffffed103edc1391 R11: 0000000000000004 R12: ffff8881f6e09e20 [ 412.303624][ C0] R13: 1ffff1103ca93e38 R14: ffff8881e549f1c8 R15: 000000000000001f [ 412.311562][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 412.320454][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 412.327128][ C0] CR2: 0000000000000000 CR3: 00000001e997f000 CR4: 00000000001406f0 [ 412.335069][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 412.343006][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 412.350946][ C0] Call Trace: [ 412.354197][ C0] [ 412.357022][ C0] __run_timers+0x603/0x740 [ 412.361490][ C0] ? lapic_next_event+0x5b/0x70 [ 412.366305][ C0] ? __internal_add_timer+0x4a0/0x4a0 [ 412.371648][ C0] ? check_preemption_disabled+0x9e/0x330 [ 412.377333][ C0] ? debug_smp_processor_id+0x20/0x20 [ 412.382671][ C0] run_timer_softirq+0x46/0x80 [ 412.387403][ C0] __do_softirq+0x23e/0x615 [ 412.391874][ C0] irq_exit+0x195/0x1c0 [ 412.395999][ C0] smp_apic_timer_interrupt+0x113/0x420 [ 412.401510][ C0] apic_timer_interrupt+0xf/0x20 [ 412.406409][ C0] [ 412.409316][ C0] RIP: 0010:default_idle+0x1f/0x30 [ 412.414393][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 e8 5b f4 e5 fd bf 01 00 00 00 89 c6 e8 9f c6 e3 fc e9 07 00 00 00 0f 00 2d 23 d2 60 00 fb f4 3c f4 e5 fd bf ff ff ff ff 89 c6 e9 80 c6 e3 fc 41 57 41 56 53 [ 412.433963][ C0] RSP: 0018:ffffffff85e07d18 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 412.442336][ C0] RAX: 0000000000000000 RBX: ffffffff85e18a80 RCX: ffffffff85e18a80 [ 412.450274][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 412.458212][ C0] RBP: ffffffff85e07e20 R08: ffffffff822b8ef0 R09: fffffbfff0bc3151 [ 412.466175][ C0] R10: fffffbfff0bc3151 R11: 0000000000000000 R12: ffffffff86471d60 [ 412.474131][ C0] R13: 1ffffffff0bc3150 R14: dffffc0000000000 R15: 0000000000000000 [ 412.482077][ C0] ? check_preemption_disabled+0x90/0x330 [ 412.487762][ C0] ? default_idle+0x11/0x30 [ 412.492244][ C0] do_idle+0x229/0x600 [ 412.496279][ C0] ? check_preemption_disabled+0x9e/0x330 [ 412.501976][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 412.507139][ C0] ? schedule_idle+0x6d/0x90 [ 412.511708][ C0] cpu_startup_entry+0x15/0x20 [ 412.516436][ C0] ? time_init+0x33/0x33 [ 412.520645][ C0] start_kernel+0x710/0x85c [ 412.525121][ C0] ? __early_make_pgtable+0x157/0x1a2 [ 412.530476][ C0] ? arch_call_rest_init+0xa/0xa [ 412.535382][ C0] ? kasan_early_init+0x29e/0x2f8 [ 412.540370][ C0] ? check_loader_disabled_bsp+0x95/0x134 [ 412.546054][ C0] ? load_ucode_bsp+0xde/0x105 [ 412.550794][ C0] secondary_startup_64+0xa4/0xb0 [ 412.555788][ C0] Modules linked in: [ 412.559662][ C0] ---[ end trace a9327e6373eb9839 ]--- [ 412.565100][ C0] RIP: 0010:expire_timers+0x141/0x410 [ 412.570438][ C0] Code: c1 e8 03 80 3c 18 00 74 08 4c 89 e7 e8 f8 fb 3d 00 4d 89 3c 24 4d 85 ff 74 2f e8 da 2d 0f 00 49 83 c7 08 4c 89 f8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ff e8 d1 fb 3d 00 4d 89 27 eb 11 66 66 2e [ 412.590020][ C0] RSP: 0018:ffff8881f6e09d10 EFLAGS: 00010007 [ 412.596051][ C0] RAX: 0000000000000003 RBX: dffffc0000000000 RCX: ffffffff85e18a80 [ 412.603992][ C0] RDX: 0000000000000102 RSI: 0000000000000008 RDI: ffff8881e549f1c8 [ 412.611931][ C0] RBP: 1ffff1103ca93e39 R08: dffffc0000000000 R09: 0000000000000003 [ 412.619875][ C0] R10: ffffed103edc1391 R11: 0000000000000004 R12: ffff8881f6e09e20 [ 412.627821][ C0] R13: 1ffff1103ca93e38 R14: ffff8881e549f1c8 R15: 000000000000001f [ 412.635759][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 412.644653][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 412.651207][ C0] CR2: 0000000000000000 CR3: 00000001e997f000 CR4: 00000000001406f0 [ 412.659168][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 412.667105][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 412.675058][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 412.682820][ C0] Kernel Offset: disabled [ 412.687117][ C0] Rebooting in 86400 seconds..