INIT: Id "1" respawning too fast: disabled for 5 minutes INIT: Id "4" respawning too fast: disabled for 5 minutes INIT: Id "5" respawning too fast: disabled for 5 minutes INIT: Id "6" respawning too fast: disabled for 5 minutes INIT: Id "3" respawning too fast: disabled for 5 minutes Warning: Permanently added '10.128.10.21' (ECDSA) to the list of known hosts. 2018/10/08 05:12:49 parsed 1 programs 2018/10/08 05:12:50 executed programs: 0 [ 408.164975] ip (2179) used greatest stack depth: 24184 bytes left [ 413.015572] audit: type=1400 audit(1538975575.949:5): avc: denied { associate } for pid=2106 comm="syz-executor3" name="syz3" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 2018/10/08 05:12:56 executed programs: 6 2018/10/08 05:13:01 executed programs: 83 2018/10/08 05:13:06 executed programs: 158 2018/10/08 05:13:11 executed programs: 235 2018/10/08 05:13:16 executed programs: 310 2018/10/08 05:13:21 executed programs: 389 2018/10/08 05:13:26 executed programs: 466 2018/10/08 05:13:31 executed programs: 549 2018/10/08 05:13:36 executed programs: 633 2018/10/08 05:13:41 executed programs: 708 2018/10/08 05:13:46 executed programs: 783 2018/10/08 05:13:51 executed programs: 861 2018/10/08 05:13:56 executed programs: 936 2018/10/08 05:14:01 executed programs: 1013 2018/10/08 05:14:07 executed programs: 1092 2018/10/08 05:14:12 executed programs: 1168 2018/10/08 05:14:17 executed programs: 1241 2018/10/08 05:14:22 executed programs: 1310 2018/10/08 05:14:27 executed programs: 1389 2018/10/08 05:14:32 executed programs: 1468 INIT: Id "2" respawning too fast: disabled for 5 minutes INIT: Id "4" respawning too fast: disabled for 5 minutes INIT: Id "1" respawning too fast: disabled for 5 minutes INIT: Id "5" respawning too fast: disabled for 5 minutes INIT: Id "6" respawning too fast: disabled for 5 minutes 2018/10/08 05:14:37 executed programs: 1544 INIT: Id "3" respawning too fast: disabled for 5 minutes 2018/10/08 05:14:42 executed programs: 1619 2018/10/08 05:14:47 executed programs: 1697 2018/10/08 05:14:52 executed programs: 1775 2018/10/08 05:14:57 executed programs: 1848 2018/10/08 05:15:02 executed programs: 1926 2018/10/08 05:15:07 executed programs: 1995 2018/10/08 05:15:12 executed programs: 2068 2018/10/08 05:15:17 executed programs: 2143 2018/10/08 05:15:22 executed programs: 2220 2018/10/08 05:15:27 executed programs: 2299 2018/10/08 05:15:32 executed programs: 2376 2018/10/08 05:15:37 executed programs: 2452 2018/10/08 05:15:42 executed programs: 2528 2018/10/08 05:15:47 executed programs: 2610 2018/10/08 05:15:52 executed programs: 2692 2018/10/08 05:15:57 executed programs: 2765 2018/10/08 05:16:03 executed programs: 2843 2018/10/08 05:16:08 executed programs: 2918 2018/10/08 05:16:13 executed programs: 2996 2018/10/08 05:16:18 executed programs: 3070 2018/10/08 05:16:23 executed programs: 3147 2018/10/08 05:16:28 executed programs: 3224 2018/10/08 05:16:33 executed programs: 3303 2018/10/08 05:16:38 executed programs: 3381 2018/10/08 05:16:43 executed programs: 3454 2018/10/08 05:16:48 executed programs: 3537 2018/10/08 05:16:53 executed programs: 3614 2018/10/08 05:16:58 executed programs: 3684 2018/10/08 05:17:03 executed programs: 3758 2018/10/08 05:17:08 executed programs: 3835 2018/10/08 05:17:13 executed programs: 3901 2018/10/08 05:17:18 executed programs: 3978 2018/10/08 05:17:23 executed programs: 4058 2018/10/08 05:17:28 executed programs: 4139 2018/10/08 05:17:33 executed programs: 4217 2018/10/08 05:17:38 executed programs: 4291 2018/10/08 05:17:43 executed programs: 4368 2018/10/08 05:17:49 executed programs: 4452 [ 707.215095] ================================================================== [ 707.222556] BUG: KASAN: use-after-free in disk_unblock_events+0x51/0x60 [ 707.229290] Read of size 8 at addr ffff8801d2cb51e0 by task blkid/4432 [ 707.235926] [ 707.237539] CPU: 1 PID: 4432 Comm: blkid Not tainted 4.9.131+ #50 [ 707.243815] ffff8801c572f6f8 ffffffff81b37029 ffffea00074b2c00 ffff8801d2cb51e0 [ 707.251801] 0000000000000000 ffff8801d2cb51e0 0000000000000000 ffff8801c572f730 [ 707.259845] ffffffff81500aed ffff8801d2cb51e0 0000000000000008 0000000000000000 [ 707.267849] Call Trace: [ 707.270563] [] dump_stack+0xc1/0x128 [ 707.275958] [] print_address_description+0x6c/0x234 [ 707.282601] [] kasan_report.cold.6+0x242/0x2fe [ 707.289060] [] ? disk_unblock_events+0x51/0x60 [ 707.295266] [] __asan_report_load8_noabort+0x14/0x20 [ 707.301988] [] disk_unblock_events+0x51/0x60 [ 707.308044] [] __blkdev_get+0x6b6/0xd60 [ 707.313649] [] ? __blkdev_put+0x840/0x840 [ 707.319457] [] ? fsnotify+0x114/0x1100 [ 707.324972] [] blkdev_get+0x2da/0x920 [ 707.330512] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 707.337248] [] ? bd_may_claim+0xd0/0xd0 [ 707.342842] [] ? bd_acquire+0x27/0x250 [ 707.348362] [] ? bd_acquire+0x88/0x250 [ 707.353915] [] ? _raw_spin_unlock+0x2c/0x50 [ 707.359944] [] blkdev_open+0x1a5/0x250 [ 707.365475] [] do_dentry_open+0x3ef/0xc90 [ 707.371255] [] ? blkdev_get_by_dev+0x70/0x70 [ 707.377290] [] vfs_open+0x11c/0x210 [ 707.382572] [] ? may_open.isra.20+0x14f/0x2a0 [ 707.388699] [] path_openat+0x542/0x2790 [ 707.394302] [] ? path_mountpoint+0x6c0/0x6c0 [ 707.400384] [] ? trace_hardirqs_on+0x10/0x10 [ 707.406498] [] ? expand_files.part.3+0x3a9/0x6d0 [ 707.412884] [] do_filp_open+0x197/0x270 [ 707.418498] [] ? may_open_dev+0xe0/0xe0 [ 707.424099] [] ? _raw_spin_unlock+0x2c/0x50 [ 707.430045] [] ? __alloc_fd+0x1d7/0x4a0 [ 707.435642] [] do_sys_open+0x30d/0x5c0 [ 707.441151] [] ? filp_open+0x70/0x70 [ 707.446545] [] ? up_read+0x1a/0x40 [ 707.451714] [] SyS_open+0x2d/0x40 [ 707.456796] [] ? do_sys_open+0x5c0/0x5c0 [ 707.462565] [] do_syscall_64+0x19f/0x550 [ 707.468356] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 707.475264] [ 707.476871] Allocated by task 4401: [ 707.480506] save_stack_trace+0x16/0x20 [ 707.484456] kasan_kmalloc.part.1+0x62/0xf0 [ 707.488747] kasan_kmalloc+0xaf/0xc0 [ 707.492484] kmem_cache_alloc_trace+0x117/0x2e0 [ 707.497132] alloc_disk_node+0x54/0x3a0 [ 707.501077] alloc_disk+0x18/0x20 [ 707.504661] loop_add+0x33b/0x770 [ 707.508094] loop_probe+0x14f/0x180 [ 707.511723] kobj_lookup+0x223/0x410 [ 707.515417] get_gendisk+0x39/0x2d0 [ 707.519019] __blkdev_get+0x351/0xd60 [ 707.522803] blkdev_get+0x2da/0x920 [ 707.526416] blkdev_open+0x1a5/0x250 [ 707.530104] do_dentry_open+0x3ef/0xc90 [ 707.534057] vfs_open+0x11c/0x210 [ 707.537495] path_openat+0x542/0x2790 [ 707.541272] do_filp_open+0x197/0x270 [ 707.545048] do_sys_open+0x30d/0x5c0 [ 707.548732] SyS_open+0x2d/0x40 [ 707.551983] do_syscall_64+0x19f/0x550 [ 707.555846] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 707.560921] [ 707.562554] Freed by task 4432: [ 707.565883] save_stack_trace+0x16/0x20 [ 707.569842] kasan_slab_free+0xac/0x190 [ 707.573794] kfree+0xfb/0x310 [ 707.576879] disk_release+0x259/0x330 [ 707.580651] device_release+0x7e/0x220 [ 707.584507] kobject_put+0x148/0x250 [ 707.588194] put_disk+0x23/0x30 [ 707.591446] __blkdev_get+0x616/0xd60 [ 707.595218] blkdev_get+0x2da/0x920 [ 707.598818] blkdev_open+0x1a5/0x250 [ 707.602512] do_dentry_open+0x3ef/0xc90 [ 707.606489] vfs_open+0x11c/0x210 [ 707.609924] path_openat+0x542/0x2790 [ 707.613699] do_filp_open+0x197/0x270 [ 707.617479] do_sys_open+0x30d/0x5c0 [ 707.621169] SyS_open+0x2d/0x40 [ 707.624419] do_syscall_64+0x19f/0x550 [ 707.628278] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 707.633354] [ 707.634956] The buggy address belongs to the object at ffff8801d2cb4c80 [ 707.634956] which belongs to the cache kmalloc-2048 of size 2048 [ 707.647770] The buggy address is located 1376 bytes inside of [ 707.647770] 2048-byte region [ffff8801d2cb4c80, ffff8801d2cb5480) [ 707.659803] The buggy address belongs to the page: [ 707.664711] page:ffffea00074b2c00 count:1 mapcount:0 mapping: (null) index:0x0 compound_mapcount: 0 [ 707.674881] flags: 0x4000000000004080(slab|head) [ 707.679655] page dumped because: kasan: bad access detected [ 707.685340] [ 707.686982] Memory state around the buggy address: [ 707.691892] ffff8801d2cb5080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 707.699222] ffff8801d2cb5100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 707.706551] >ffff8801d2cb5180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 707.713882] ^ [ 707.720346] ffff8801d2cb5200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 707.727679] ffff8801d2cb5280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 707.735009] ================================================================== [ 707.742453] Disabling lock debugging due to kernel taint [ 707.748124] Kernel panic - not syncing: panic_on_warn set ... [ 707.748124] [ 707.755467] CPU: 1 PID: 4432 Comm: blkid Tainted: G B 4.9.131+ #50 [ 707.762890] ffff8801c572f658 ffffffff81b37029 ffffffff82e358d0 00000000ffffffff [ 707.770902] 0000000000000000 0000000000000001 0000000000000000 ffff8801c572f718 [ 707.778996] ffffffff813f6b25 0000000041b58ab3 ffffffff82e298d3 ffffffff813f6966 [ 707.787052] Call Trace: [ 707.789683] [] dump_stack+0xc1/0x128 [ 707.795102] [] panic+0x1bf/0x39f [ 707.800100] [] ? add_taint.cold.6+0x16/0x16 [ 707.806049] [] ? ___preempt_schedule+0x16/0x18 [ 707.812269] [] kasan_end_report+0x47/0x4f [ 707.818037] [] kasan_report.cold.6+0x76/0x2fe [ 707.824158] [] ? disk_unblock_events+0x51/0x60 [ 707.830365] [] __asan_report_load8_noabort+0x14/0x20 [ 707.837093] [] disk_unblock_events+0x51/0x60 [ 707.843125] [] __blkdev_get+0x6b6/0xd60 [ 707.848730] [] ? __blkdev_put+0x840/0x840 [ 707.854515] [] ? fsnotify+0x114/0x1100 [ 707.860029] [] blkdev_get+0x2da/0x920 [ 707.865461] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 707.872187] [] ? bd_may_claim+0xd0/0xd0 [ 707.877785] [] ? bd_acquire+0x27/0x250 [ 707.883297] [] ? bd_acquire+0x88/0x250 [ 707.888862] [] ? _raw_spin_unlock+0x2c/0x50 [ 707.894815] [] blkdev_open+0x1a5/0x250 [ 707.900329] [] do_dentry_open+0x3ef/0xc90 [ 707.906097] [] ? blkdev_get_by_dev+0x70/0x70 [ 707.912130] [] vfs_open+0x11c/0x210 [ 707.917381] [] ? may_open.isra.20+0x14f/0x2a0 [ 707.923498] [] path_openat+0x542/0x2790 [ 707.929097] [] ? path_mountpoint+0x6c0/0x6c0 [ 707.935134] [] ? trace_hardirqs_on+0x10/0x10 [ 707.941215] [] ? expand_files.part.3+0x3a9/0x6d0 [ 707.947607] [] do_filp_open+0x197/0x270 [ 707.953207] [] ? may_open_dev+0xe0/0xe0 [ 707.958805] [] ? _raw_spin_unlock+0x2c/0x50 [ 707.964752] [] ? __alloc_fd+0x1d7/0x4a0 [ 707.970353] [] do_sys_open+0x30d/0x5c0 [ 707.975862] [] ? filp_open+0x70/0x70 [ 707.981202] [] ? up_read+0x1a/0x40 [ 707.986450] [] SyS_open+0x2d/0x40 [ 707.991539] [] ? do_sys_open+0x5c0/0x5c0 [ 707.997227] [] do_syscall_64+0x19f/0x550 [ 708.002911] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 708.010079] Kernel Offset: disabled [ 708.013684] Rebooting in 86400 seconds..