Starting Network Time Synchronization... [ OK ] Started Network Time Synchronization. [ OK ] Started Raise network interfaces. [ OK ] Reached target Network. Starting Permit User Sessions... Starting OpenBSD Secure Shell server... [ OK ] Started Permit User Sessions. [ OK ] Started OpenBSD Secure Shell server. [ 12.143487][ C1] random: crng init done [ 12.144349][ C1] random: 7 urandom warning(s) missed due to ratelimiting Warning: Permanently added '10.128.0.72' (ECDSA) to the list of known hosts. 2020/08/28 06:21:32 parsed 1 programs 2020/08/28 06:21:32 executed programs: 0 [* ] A start job is running for dev-ttyS0.device (9s / 1min 30s) [** ] A start job is running for dev-ttyS0.device (9s / 1min 30s) [*** ] A start job is running for dev-ttyS0.device (10s / 1min 30s) [ *** ] A start job is running for dev-ttyS0.device (10s / 1min 30s) [ *** ] A start job is running for dev-ttyS0.device (11s / 1min 30s) [ ***] A start job is running for dev-ttyS0.device (12s / 1min 30s) [ **] A start job is running for dev-ttyS0.device (12s / 1min 30s) [ *] A start job is running for dev-ttyS0.device (13s / 1min 30s)[ 19.685014][ T22] audit: type=1400 audit(1598595692.549:8): avc: denied { execmem } for pid=344 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 19.690630][ T346] cgroup1: Unknown subsys name 'perf_event' [ 19.712381][ T346] cgroup1: Unknown subsys name 'net_cls' [ **] A start job is running for dev-ttyS0.device (14s / 1min 30s) [ ***] A start job is running for dev-ttyS0.device (14s / 1min 30s) [ *** ] A start job is running for dev-ttyS0.device (15s / 1min 30s) [ *** ] A start job is running for dev-ttyS0.device (15s / 1min 30s) [*** ] A start job is running for dev-ttyS0.device (16s / 1min 30s) [** ] A start job is running for dev-ttyS0.device (17s / 1min 30s) [* ] A start job is running for dev-ttyS0.device (17s / 1min 30s)[ 23.868021][ T2234] ================================================================== [ 23.876198][ T2234] BUG: KASAN: use-after-free in __fsnotify_parent+0x2e7/0x310 [ 23.883622][ T2234] Read of size 4 at addr ffff8881c2201990 by task syz-executor.0/2234 [ 23.891732][ T2234] [ 23.894036][ T2234] CPU: 0 PID: 2234 Comm: syz-executor.0 Not tainted 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 23.904070][ T2234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 23.914102][ T2234] Call Trace: [ 23.917381][ T2234] dump_stack+0x14a/0x1ce [ 23.921675][ T2234] ? show_regs_print_info+0x12/0x12 [ 23.926852][ T2234] ? printk+0xd2/0x114 [ 23.930896][ T2234] print_address_description+0x93/0x620 [ 23.936430][ T2234] __kasan_report+0x16d/0x1e0 [ 23.941098][ T2234] ? __fsnotify_parent+0x2e7/0x310 [ 23.946177][ T2234] kasan_report+0x36/0x60 [ 23.950485][ T2234] __fsnotify_parent+0x2e7/0x310 [ 23.955443][ T2234] ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0 [ 23.962192][ T2234] ? _raw_spin_lock_irq+0xa2/0x180 [ 23.967272][ T2234] __fput+0x15a/0x6c0 [ 23.971221][ T2234] task_work_run+0x176/0x1a0 [ 23.975796][ T2234] prepare_exit_to_usermode+0x286/0x2e0 [ 23.981311][ T2234] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 23.987169][ T2234] RIP: 0033:0x416f01 [ 23.991034][ T2234] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 24.010616][ T2234] RSP: 002b:00007ffd6d0833d0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 24.019007][ T2234] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000416f01 [ 24.019012][ T2234] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 0000000000000003 [ 24.019017][ T2234] RBP: 0000000000000000 R08: 0000000001190340 R09: 0000000000000000 [ 24.019021][ T2234] R10: 00007ffd6d0834b0 R11: 0000000000000293 R12: 0000000001190348 [ 24.019025][ T2234] R13: 0000000000000000 R14: ffffffffffffffff R15: 000000000118cf4c [ 24.019034][ T2234] [ 24.061090][ T2234] Allocated by task 2235: [ 24.065443][ T2234] __kasan_kmalloc+0x12c/0x1c0 [ 24.070208][ T2234] kmem_cache_alloc+0x1d5/0x260 [ 24.075055][ T2234] __d_alloc+0x2a/0x6b0 [ 24.079205][ T2234] d_alloc_pseudo+0x19/0x70 [ 24.083690][ T2234] alloc_file_pseudo+0x15b/0x340 [ 24.088637][ T2234] sock_alloc_file+0xb4/0x230 [ 24.093301][ T2234] __sys_socket+0x19b/0x370 [ 24.097836][ T2234] __x64_sys_socket+0x76/0x80 [ 24.102511][ T2234] do_syscall_64+0xcb/0x150 [ 24.106996][ T2234] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 24.112853][ T2234] [ 24.115154][ T2234] Freed by task 2235: [ 24.119106][ T2234] __kasan_slab_free+0x181/0x230 [ 24.124014][ T2234] slab_free_freelist_hook+0xd0/0x150 [ 24.129439][ T2234] kmem_cache_free+0xac/0x600 [ 24.134086][ T2234] dput+0x2e1/0x5e0 [ 24.137862][ T2234] __fput+0x46b/0x6c0 [ 24.141823][ T2234] task_work_run+0x176/0x1a0 [ 24.146383][ T2234] prepare_exit_to_usermode+0x286/0x2e0 [ 24.151898][ T2234] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 24.157853][ T2234] [ 24.160151][ T2234] The buggy address belongs to the object at ffff8881c2201990 [ 24.160151][ T2234] which belongs to the cache dentry of size 208 [ 24.173761][ T2234] The buggy address is located 0 bytes inside of [ 24.173761][ T2234] 208-byte region [ffff8881c2201990, ffff8881c2201a60) [ 24.186846][ T2234] The buggy address belongs to the page: [ 24.192477][ T2234] page:ffffea0007088040 refcount:1 mapcount:0 mapping:ffff8881da8eec80 index:0x0 [ 24.201570][ T2234] flags: 0x8000000000000200(slab) [ 24.206610][ T2234] raw: 8000000000000200 dead000000000100 dead000000000122 ffff8881da8eec80 [ 24.215209][ T2234] raw: 0000000000000000 00000000800f000f 00000001ffffffff 0000000000000000 [ 24.223770][ T2234] page dumped because: kasan: bad access detected [ 24.230210][ T2234] [ 24.232515][ T2234] Memory state around the buggy address: [ 24.238116][ T2234] ffff8881c2201880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 24.246167][ T2234] ffff8881c2201900: fb fb fb fb fb fb fb fb fb fb fc fc fc fc fc fc [ 24.254223][ T2234] >ffff8881c2201980: fc fc fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 24.262274][ T2234] ^ [ 24.266857][ T2234] ffff8881c2201a00: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 24.274999][ T2234] ffff8881c2201a80: fc fc fc fc 00 00 00 00 00 00 00 00 00 00 00 00 [ 24.283033][ T2234] ================================================================== [ 24.291065][ T2234] Disabling lock debugging due to kernel taint [** [ 24.299074][ T2234] kasan: CONFIG_KASAN_INLINE enabled [0m] A start job[ 24.305456][ T2234] kasan: GPF could be caused by NULL-ptr deref or user memory access is running for [ 24.315673][ T2234] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 24.323110][ T2234] CPU: 0 PID: 2234 Comm: syz-executor.0 Tainted: G B 5.4.61-syzkaller-00801-g1bd2e4c18e44 #0 [ 24.334541][ T2234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 24.344602][ T2234] RIP: 0010:__fsnotify_parent+0x140/0x310 [ 24.350300][ T2234] Code: 00 00 00 fc ff df 42 80 3c 20 00 74 08 48 89 df e8 15 19 eb ff 48 8b 03 48 89 04 24 48 8d 98 54 02 00 00 48 89 d8 48 c1 e8 03 <42> 8a 04 20 84 c0 0f 85 a0 01 00 00 8b 1b 89 de 81 e6 00 00 00 08 [ 24.369890][ T2234] RSP: 0018:ffff8881cd9b7d60 EFLAGS: 00010203 [ 24.375945][ T2234] RAX: 000000000000004a RBX: 0000000000000254 RCX: ffffffff8185289b [ 24.383894][ T2234] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff8881c22019c0 [ 24.391863][ T2234] RBP: ffff8881cd9b7e50 R08: ffffffff817a52d1 R09: 0000000000000003 [ 24.399825][ T2234] R10: ffffed1039b36f95 R11: 0000000000000004 R12: dffffc0000000000 [ 24.407771][ T2234] R13: 00000000cf495d80 R14: ffff8881c2201990 R15: 1ffff11039b36fb0 [ 24.415717][ T2234] FS: 0000000001dc9940(0000) GS:ffff8881db800000(0000) knlGS:0000000000000000 [ 24.424619][ T2234] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 24.431179][ T2234] CR2: 00007fa01167edb8 CR3: 00000001cb9c9003 CR4: 00000000001606f0 [ 24.439143][ T2234] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 24.447090][ T2234] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 24.455033][ T2234] Call Trace: [ 24.458304][ T2234] ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0 [ 24.465038][ T2234] ? _raw_spin_lock_irq+0xa2/0x180 [ 24.470120][ T2234] __fput+0x15a/0x6c0 [ 24.474078][ T2234] task_work_run+0x176/0x1a0 [ 24.478652][ T2234] prepare_exit_to_usermode+0x286/0x2e0 [ 24.484179][ T2234] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 24.490055][ T2234] RIP: 0033:0x416f01 [ 24.493921][ T2234] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 24.513514][ T2234] RSP: 002b:00007ffd6d0833d0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 24.521912][ T2234] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000416f01 [ 24.529873][ T2234] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 0000000000000003 [ 24.537829][ T2234] RBP: 0000000000000000 R08: 0000000001190340 R09: 0000000000000000 [ 24.545775][ T2234] R10: 00007ffd6d0834b0 R11: 0000000000000293 R12: 0000000001190348 [ 24.553741][ T2234] R13: 0000000000000000 R14: ffffffffffffffff R15: 000000000118cf4c [ 24.561699][ T2234] Modules linked in: dev-ttyS0.device[ 24.566304][ T2234] ---[ end trace 70c99626d9af1994 ]--- (18s / 1min 30s[ 24.572794][ T2234] RIP: 0010:__fsnotify_parent+0x140/0x310 )[ 24.579661][ T2234] Code: 00 00 00 fc ff df 42 80 3c 20 00 74 08 48 89 df e8 15 19 eb ff 48 8b 03 48 89 04 24 48 8d 98 54 02 00 00 48 89 d8 48 c1 e8 03 <42> 8a 04 20 84 c0 0f 85 a0 01 00 00 8b 1b 89 de 81 e6 00 00 00 08 [ 24.599532][ T2234] RSP: 0018:ffff8881cd9b7d60 EFLAGS: 00010203 [ 24.605587][ T2234] RAX: 000000000000004a RBX: 0000000000000254 RCX: ffffffff8185289b [ 24.613586][ T2234] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff8881c22019c0 [ 24.621615][ T2234] RBP: ffff8881cd9b7e50 R08: ffffffff817a52d1 R09: 0000000000000003 [ 24.629594][ T2234] R10: ffffed1039b36f95 R11: 0000000000000004 R12: dffffc0000000000 [ 24.637546][ T2234] R13: 00000000cf495d80 R14: ffff8881c2201990 R15: 1ffff11039b36fb0 [ 24.645546][ T2234] FS: 0000000001dc9940(0000) GS:ffff8881db800000(0000) knlGS:0000000000000000 [ 24.654483][ T2234] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 24.661092][ T2234] CR2: 00007f2cc0037068 CR3: 00000001cb9c9003 CR4: 00000000001606f0 [ 24.669079][ T2234] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 24.677034][ T2234] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 24.685701][ T2234] Kernel panic - not syncing: Fatal exception [ 24.692286][ T2234] Kernel Offset: disabled [ 24.696589][ T2234] Rebooting in 86400 seconds..