[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 23.483062] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. [ 24.255218] random: sshd: uninitialized urandom read (32 bytes read) [ 24.564465] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 25.120916] random: sshd: uninitialized urandom read (32 bytes read) [ 25.298325] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.6' (ECDSA) to the list of known hosts. [ 30.971363] random: sshd: uninitialized urandom read (32 bytes read) 2018/08/28 01:16:02 parsed 1 programs [ 32.000240] random: cc1: uninitialized urandom read (8 bytes read) 2018/08/28 01:16:04 executed programs: 0 [ 33.213244] IPVS: ftp: loaded support on port[0] = 21 [ 33.427142] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.433692] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.441100] device bridge_slave_0 entered promiscuous mode [ 33.459306] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.465684] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.472997] device bridge_slave_1 entered promiscuous mode [ 33.489459] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 33.506699] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 33.551707] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 33.571104] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 33.638101] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 33.645370] team0: Port device team_slave_0 added [ 33.661504] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 33.669058] team0: Port device team_slave_1 added [ 33.685027] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.702600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.720697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.739888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.867553] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.874061] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.880854] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.887204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.333694] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 34.339855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.371229] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 34.391320] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 34.437447] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 34.443630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.451114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.489457] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.782852] hrtimer: interrupt took 26788 ns 2018/08/28 01:16:09 executed programs: 64 [ 38.562013] ================================================================== [ 38.569721] BUG: KASAN: use-after-free in ccid_hc_tx_delete+0xe0/0x100 [ 38.576374] Read of size 8 at addr ffff8801a9a15340 by task syz-executor0/4473 [ 38.583714] [ 38.585336] CPU: 0 PID: 4473 Comm: syz-executor0 Not tainted 4.19.0-rc1+ #212 [ 38.592586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 38.601923] Call Trace: [ 38.604486] [ 38.606626] dump_stack+0x1c9/0x2b4 [ 38.610240] ? dump_stack_print_info.cold.2+0x52/0x52 [ 38.615414] ? printk+0xa7/0xcf [ 38.618678] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 38.623424] ? ccid_hc_tx_delete+0xe0/0x100 [ 38.627732] print_address_description+0x6c/0x20b [ 38.632577] ? ccid_hc_tx_delete+0xe0/0x100 [ 38.636888] kasan_report.cold.7+0x242/0x30d [ 38.641288] __asan_report_load8_noabort+0x14/0x20 [ 38.646207] ccid_hc_tx_delete+0xe0/0x100 [ 38.650347] ? dccp_init_sock+0x4a0/0x4a0 [ 38.654480] dccp_sk_destruct+0x3c/0x80 [ 38.658441] __sk_destruct+0x107/0xa60 [ 38.662325] ? sock_warn_obsolete_bsdism+0xb0/0xb0 [ 38.667246] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 38.672341] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 38.677429] ? lockdep_hardirqs_on+0x19e/0x5c0 [ 38.681996] ? trace_hardirqs_on+0xbd/0x2c0 [ 38.686302] ? kasan_check_read+0x11/0x20 [ 38.690443] ? debug_object_deactivate+0x2eb/0x450 [ 38.695360] ? lock_acquire+0x1e4/0x4f0 [ 38.699331] ? rcu_process_callbacks+0x1065/0x27c0 [ 38.704250] ? lock_release+0x9f0/0x9f0 [ 38.708213] ? debug_stats_show+0x100/0x100 [ 38.712538] ? file_free_rcu+0x6f/0x90 [ 38.716416] ? kmem_cache_free+0x246/0x280 [ 38.720637] ? sock_warn_obsolete_bsdism+0xb0/0xb0 [ 38.725606] rcu_process_callbacks+0xf78/0x27c0 [ 38.730269] ? call_rcu_sched+0x20/0x20 [ 38.734229] ? find_held_lock+0x36/0x1c0 [ 38.738281] ? mark_held_locks+0xc9/0x160 [ 38.742418] ? _raw_spin_unlock_irq+0x27/0x70 [ 38.746901] ? _raw_spin_unlock_irq+0x27/0x70 [ 38.751388] ? lockdep_hardirqs_on+0x19e/0x5c0 [ 38.755956] ? trace_hardirqs_on+0xbd/0x2c0 [ 38.760261] ? kasan_check_read+0x11/0x20 [ 38.764400] ? __run_timers+0x9c8/0xc60 [ 38.768359] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 38.773453] ? kasan_check_write+0x14/0x20 [ 38.777674] ? do_raw_spin_lock+0xc1/0x200 [ 38.781897] ? _raw_spin_unlock_irq+0x27/0x70 [ 38.786386] ? __run_timers+0x9f6/0xc60 [ 38.790351] ? __bpf_trace_timer_expire_entry+0x30/0x30 [ 38.795700] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 38.800703] ? graph_lock+0x170/0x170 [ 38.804488] ? print_usage_bug+0xc0/0xc0 [ 38.808531] ? lock_release+0x9f0/0x9f0 [ 38.812493] ? hrtimer_update_softirq_timer+0xa0/0xa0 [ 38.817668] ? find_held_lock+0x36/0x1c0 [ 38.821717] ? graph_lock+0x170/0x170 [ 38.825505] ? mark_held_locks+0xc9/0x160 [ 38.829636] ? lock_downgrade+0x8f0/0x8f0 [ 38.833770] ? __do_softirq+0x278/0xa74 [ 38.837731] ? __lock_is_held+0xb5/0x140 [ 38.841784] __do_softirq+0x2eb/0xa74 [ 38.845577] ? __irqentry_text_end+0x1f9f00/0x1f9f00 [ 38.850665] ? trace_hardirqs_off+0xb8/0x2b0 [ 38.855058] ? kasan_check_read+0x11/0x20 [ 38.859191] ? graph_lock+0x170/0x170 [ 38.862977] ? native_apic_msr_write+0x5b/0x80 [ 38.867569] ? lapic_next_event+0x5a/0x90 [ 38.871723] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 38.877247] ? clockevents_program_event+0x140/0x370 [ 38.882346] ? trace_hardirqs_off+0xb8/0x2b0 [ 38.886740] ? trace_hardirqs_on+0x2c0/0x2c0 [ 38.891139] irq_exit+0x1d6/0x210 [ 38.894579] smp_apic_timer_interrupt+0x18e/0x6a0 [ 38.899415] ? smp_call_function_single_interrupt+0x5d0/0x5d0 [ 38.905285] ? interrupt_entry+0xb5/0xf0 [ 38.909334] ? trace_hardirqs_off_caller+0xbb/0x2b0 [ 38.914339] ? trace_hardirqs_off_caller+0xbb/0x2b0 [ 38.919342] ? trace_hardirqs_off+0xb8/0x2b0 [ 38.923736] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 38.928580] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 38.933581] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 38.938596] ? task_prio+0x50/0x50 [ 38.942130] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 38.946960] apic_timer_interrupt+0xf/0x20 [ 38.951175] [ 38.953403] RIP: 0010:__sanitizer_cov_trace_cmp4+0x16/0x20 [ 38.959012] Code: 48 89 e5 48 8b 4d 08 e8 08 ff ff ff 5d c3 66 0f 1f 44 00 00 55 89 f2 89 fe bf 04 00 00 00 48 89 e5 48 8b 4d 08 e8 ea fe ff ff <5d> c3 0f 1f 84 00 00 00 00 00 55 48 89 f2 48 89 fe bf 06 00 00 00 [ 38.977906] RSP: 0018:ffff8801d9fc7690 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 [ 38.985601] RAX: 0000000000000000 RBX: ffffffff87f619ec RCX: ffffffff81787d42 [ 38.992859] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 39.000123] RBP: ffff8801d9fc7690 R08: ffff8801c69f0140 R09: ffffed003629d6bc [ 39.007374] R10: ffffed003629d6bc R11: ffff8801b14eb5e3 R12: 0000000000000000 [ 39.014630] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 39.021902] ? map_id_up+0x112/0x3e0 [ 39.025625] map_id_up+0x112/0x3e0 [ 39.029158] ? make_kprojid+0x30/0x30 [ 39.032946] ? lock_release+0x9f0/0x9f0 [ 39.036910] from_kuid+0x85/0xc0 [ 39.040264] ? map_id_up+0x3e0/0x3e0 [ 39.043963] ? kasan_check_write+0x14/0x20 [ 39.048183] ? do_raw_spin_lock+0xc1/0x200 [ 39.052412] ext4_mark_iloc_dirty+0x464/0x2f90 [ 39.056982] ? kasan_check_read+0x11/0x20 [ 39.061116] ? rcu_is_watching+0x8c/0x150 [ 39.065251] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 39.070080] ? ext4_chunk_trans_blocks+0x30/0x30 [ 39.074827] ? jbd2_write_access_granted.part.9+0x274/0x430 [ 39.080537] ? jbd2_journal_file_inode+0x690/0x690 [ 39.085452] ? rcu_note_context_switch+0x680/0x680 [ 39.090376] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 39.095907] ? jbd2_journal_get_write_access+0xa5/0xc0 [ 39.101172] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 39.106696] ? __ext4_journal_get_write_access+0x72/0xa0 [ 39.112153] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 39.117675] ? ext4_reserve_inode_write+0x146/0x260 [ 39.122678] ext4_mark_inode_dirty+0x246/0xab0 [ 39.127247] ? ext4_mkdir+0x7b4/0xe60 [ 39.131034] ? ext4_expand_extra_isize+0x5b0/0x5b0 [ 39.135954] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 39.141481] ? kasan_check_write+0x14/0x20 [ 39.145703] ? __brelse+0x104/0x180 [ 39.149321] ? block_commit_write+0x30/0x30 [ 39.153632] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 39.159154] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 39.164681] ext4_mkdir+0x7b4/0xe60 [ 39.168299] ? ext4_init_dot_dotdot+0x510/0x510 [ 39.172967] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 39.178493] ? security_inode_permission+0xd2/0x100 [ 39.183496] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 39.189018] ? security_inode_mkdir+0xe8/0x120 [ 39.193593] vfs_mkdir+0x42e/0x6b0 [ 39.197137] do_mkdirat+0x27b/0x310 [ 39.200751] ? __ia32_sys_mknod+0xb0/0xb0 [ 39.204896] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 39.210249] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 39.215348] __x64_sys_mkdir+0x5c/0x80 [ 39.219221] do_syscall_64+0x1b9/0x820 [ 39.223098] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 39.228448] ? syscall_return_slowpath+0x5e0/0x5e0 [ 39.233365] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 39.238199] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 39.243204] ? prepare_exit_to_usermode+0x291/0x3b0 [ 39.248206] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 39.253043] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 39.258217] RIP: 0033:0x4564c7 [ 39.261401] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 ad c0 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 8d c0 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 39.280288] RSP: 002b:00007ffe8db86a18 EFLAGS: 00000206 ORIG_RAX: 0000000000000053 [ 39.287990] RAX: ffffffffffffffda RBX: 0000000000009687 RCX: 00000000004564c7 [ 39.295241] RDX: 00007ffe8db86a34 RSI: 00000000000001ff RDI: 00007ffe8db86a30 [ 39.302495] RBP: 0000000000000207 R08: 0000000000000000 R09: 0000000000000004 [ 39.309747] R10: 0000000000000064 R11: 0000000000000206 R12: 0000000000000009 [ 39.317002] R13: 000000000000965f R14: 0000000000000046 R15: badc0ffeebadface [ 39.324261] [ 39.325878] Allocated by task 5066: [ 39.329499] save_stack+0x43/0xd0 [ 39.332935] kasan_kmalloc+0xc4/0xe0 [ 39.336636] kasan_slab_alloc+0x12/0x20 [ 39.340593] kmem_cache_alloc+0x12e/0x710 [ 39.344725] ccid_new+0x25b/0x3e0 [ 39.348160] dccp_hdlr_ccid+0x27/0x150 [ 39.352035] __dccp_feat_activate+0x184/0x270 [ 39.356515] dccp_feat_activate_values+0x3b6/0x839 [ 39.361441] dccp_create_openreq_child+0x47a/0x620 [ 39.366357] dccp_v6_request_recv_sock+0x253/0x2040 [ 39.371357] dccp_check_req+0x46e/0x6c0 [ 39.375327] dccp_v6_rcv+0x88e/0x1d9c [ 39.379114] ip6_input_finish+0x407/0x1a40 [ 39.383349] ip6_input+0xe9/0x600 [ 39.386787] ip6_rcv_finish+0x17a/0x330 [ 39.390744] ipv6_rcv+0x11e/0x650 [ 39.394180] __netif_receive_skb_one_core+0x14d/0x200 [ 39.399352] __netif_receive_skb+0x2c/0x1e0 [ 39.403657] process_backlog+0x219/0x760 [ 39.407698] net_rx_action+0x799/0x1900 [ 39.411658] __do_softirq+0x2eb/0xa74 [ 39.415434] [ 39.417042] Freed by task 5067: [ 39.420308] save_stack+0x43/0xd0 [ 39.423755] __kasan_slab_free+0x11a/0x170 [ 39.427973] kasan_slab_free+0xe/0x10 [ 39.431756] kmem_cache_free+0x86/0x280 [ 39.435715] ccid_hc_tx_delete+0xc3/0x100 [ 39.439857] dccp_hdlr_ccid+0x7d/0x150 [ 39.443739] __dccp_feat_activate+0x184/0x270 [ 39.448217] dccp_feat_activate_values+0x3b6/0x839 [ 39.453131] dccp_create_openreq_child+0x47a/0x620 [ 39.458043] dccp_v6_request_recv_sock+0x253/0x2040 [ 39.463057] dccp_check_req+0x46e/0x6c0 [ 39.467013] dccp_v6_rcv+0x88e/0x1d9c [ 39.470799] ip6_input_finish+0x407/0x1a40 [ 39.475017] ip6_input+0xe9/0x600 [ 39.478465] ip6_rcv_finish+0x17a/0x330 [ 39.482428] ipv6_rcv+0x11e/0x650 [ 39.485877] __netif_receive_skb_one_core+0x14d/0x200 [ 39.491052] __netif_receive_skb+0x2c/0x1e0 [ 39.495357] process_backlog+0x219/0x760 [ 39.499407] net_rx_action+0x799/0x1900 [ 39.503366] __do_softirq+0x2eb/0xa74 [ 39.507152] [ 39.508762] The buggy address belongs to the object at ffff8801a9a15340 [ 39.508762] which belongs to the cache ccid2_hc_tx_sock of size 1240 [ 39.521943] The buggy address is located 0 bytes inside of [ 39.521943] 1240-byte region [ffff8801a9a15340, ffff8801a9a15818) [ 39.533712] The buggy address belongs to the page: [ 39.538651] page:ffffea0006a68500 count:1 mapcount:0 mapping:ffff8801cda94e40 index:0x0 compound_mapcount: 0 [ 39.548603] flags: 0x2fffc0000008100(slab|head) [ 39.553258] raw: 02fffc0000008100 ffffea00073f6008 ffffea00073e3108 ffff8801cda94e40 [ 39.561121] raw: 0000000000000000 ffff8801a9a142c0 0000000100000005 0000000000000000 [ 39.568979] page dumped because: kasan: bad access detected [ 39.574664] [ 39.576270] Memory state around the buggy address: [ 39.581179] ffff8801a9a15200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 39.588525] ffff8801a9a15280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 39.595872] >ffff8801a9a15300: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 39.603215] ^ [ 39.608646] ffff8801a9a15380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 39.615987] ffff8801a9a15400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 39.623334] ================================================================== [ 39.630670] Disabling lock debugging due to kernel taint [ 39.636163] Kernel panic - not syncing: panic_on_warn set ... [ 39.636163] [ 39.643537] CPU: 0 PID: 4473 Comm: syz-executor0 Tainted: G B 4.19.0-rc1+ #212 [ 39.652187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 39.661530] Call Trace: [ 39.664102] [ 39.666251] dump_stack+0x1c9/0x2b4 [ 39.669877] ? dump_stack_print_info.cold.2+0x52/0x52 [ 39.675065] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 39.679819] panic+0x238/0x4e7 [ 39.683010] ? add_taint.cold.5+0x16/0x16 [ 39.687156] ? trace_hardirqs_on+0xb4/0x2c0 [ 39.691475] ? trace_hardirqs_on+0x9a/0x2c0 [ 39.695798] ? ccid_hc_tx_delete+0xe0/0x100 [ 39.700120] kasan_end_report+0x47/0x4f [ 39.704091] kasan_report.cold.7+0x76/0x30d [ 39.708415] __asan_report_load8_noabort+0x14/0x20 [ 39.713350] ccid_hc_tx_delete+0xe0/0x100 [ 39.717497] ? dccp_init_sock+0x4a0/0x4a0 [ 39.721637] dccp_sk_destruct+0x3c/0x80 [ 39.725608] __sk_destruct+0x107/0xa60 [ 39.729494] ? sock_warn_obsolete_bsdism+0xb0/0xb0 [ 39.734423] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 39.739521] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 39.744621] ? lockdep_hardirqs_on+0x19e/0x5c0 [ 39.749203] ? trace_hardirqs_on+0xbd/0x2c0 [ 39.753521] ? kasan_check_read+0x11/0x20 [ 39.757667] ? debug_object_deactivate+0x2eb/0x450 [ 39.762596] ? lock_acquire+0x1e4/0x4f0 [ 39.766569] ? rcu_process_callbacks+0x1065/0x27c0 [ 39.771494] ? lock_release+0x9f0/0x9f0 [ 39.775463] ? debug_stats_show+0x100/0x100 [ 39.779782] ? file_free_rcu+0x6f/0x90 [ 39.783667] ? kmem_cache_free+0x246/0x280 [ 39.787900] ? sock_warn_obsolete_bsdism+0xb0/0xb0 [ 39.792826] rcu_process_callbacks+0xf78/0x27c0 [ 39.797499] ? call_rcu_sched+0x20/0x20 [ 39.801471] ? find_held_lock+0x36/0x1c0 [ 39.805533] ? mark_held_locks+0xc9/0x160 [ 39.809679] ? _raw_spin_unlock_irq+0x27/0x70 [ 39.814169] ? _raw_spin_unlock_irq+0x27/0x70 [ 39.818660] ? lockdep_hardirqs_on+0x19e/0x5c0 [ 39.823240] ? trace_hardirqs_on+0xbd/0x2c0 [ 39.827560] ? kasan_check_read+0x11/0x20 [ 39.831704] ? __run_timers+0x9c8/0xc60 [ 39.835677] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 39.840777] ? kasan_check_write+0x14/0x20 [ 39.845123] ? do_raw_spin_lock+0xc1/0x200 [ 39.849360] ? _raw_spin_unlock_irq+0x27/0x70 [ 39.853864] ? __run_timers+0x9f6/0xc60 [ 39.857840] ? __bpf_trace_timer_expire_entry+0x30/0x30 [ 39.863207] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 39.868218] ? graph_lock+0x170/0x170 [ 39.872016] ? print_usage_bug+0xc0/0xc0 [ 39.876072] ? lock_release+0x9f0/0x9f0 [ 39.880043] ? hrtimer_update_softirq_timer+0xa0/0xa0 [ 39.885229] ? find_held_lock+0x36/0x1c0 [ 39.889287] ? graph_lock+0x170/0x170 [ 39.893108] ? mark_held_locks+0xc9/0x160 [ 39.897248] ? lock_downgrade+0x8f0/0x8f0 [ 39.901403] ? __do_softirq+0x278/0xa74 [ 39.905376] ? __lock_is_held+0xb5/0x140 [ 39.909446] __do_softirq+0x2eb/0xa74 [ 39.913249] ? __irqentry_text_end+0x1f9f00/0x1f9f00 [ 39.918349] ? trace_hardirqs_off+0xb8/0x2b0 [ 39.922753] ? kasan_check_read+0x11/0x20 [ 39.926897] ? graph_lock+0x170/0x170 [ 39.930696] ? native_apic_msr_write+0x5b/0x80 [ 39.935277] ? lapic_next_event+0x5a/0x90 [ 39.939428] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 39.944965] ? clockevents_program_event+0x140/0x370 [ 39.950062] ? trace_hardirqs_off+0xb8/0x2b0 [ 39.954468] ? trace_hardirqs_on+0x2c0/0x2c0 [ 39.958879] irq_exit+0x1d6/0x210 [ 39.962338] smp_apic_timer_interrupt+0x18e/0x6a0 [ 39.967181] ? smp_call_function_single_interrupt+0x5d0/0x5d0 [ 39.973061] ? interrupt_entry+0xb5/0xf0 [ 39.977120] ? trace_hardirqs_off_caller+0xbb/0x2b0 [ 39.982129] ? trace_hardirqs_off_caller+0xbb/0x2b0 [ 39.987138] ? trace_hardirqs_off+0xb8/0x2b0 [ 39.991542] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 39.996381] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 40.001406] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 40.006421] ? task_prio+0x50/0x50 [ 40.009962] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 40.014805] apic_timer_interrupt+0xf/0x20 [ 40.019027] [ 40.021267] RIP: 0010:__sanitizer_cov_trace_cmp4+0x16/0x20 [ 40.026889] Code: 48 89 e5 48 8b 4d 08 e8 08 ff ff ff 5d c3 66 0f 1f 44 00 00 55 89 f2 89 fe bf 04 00 00 00 48 89 e5 48 8b 4d 08 e8 ea fe ff ff <5d> c3 0f 1f 84 00 00 00 00 00 55 48 89 f2 48 89 fe bf 06 00 00 00 [ 40.045790] RSP: 0018:ffff8801d9fc7690 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 [ 40.053500] RAX: 0000000000000000 RBX: ffffffff87f619ec RCX: ffffffff81787d42 [ 40.060766] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 40.068029] RBP: ffff8801d9fc7690 R08: ffff8801c69f0140 R09: ffffed003629d6bc [ 40.075302] R10: ffffed003629d6bc R11: ffff8801b14eb5e3 R12: 0000000000000000 [ 40.082578] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 40.089860] ? map_id_up+0x112/0x3e0 [ 40.093582] map_id_up+0x112/0x3e0 [ 40.097121] ? make_kprojid+0x30/0x30 [ 40.100916] ? lock_release+0x9f0/0x9f0 [ 40.104891] from_kuid+0x85/0xc0 [ 40.108257] ? map_id_up+0x3e0/0x3e0 [ 40.111966] ? kasan_check_write+0x14/0x20 [ 40.116200] ? do_raw_spin_lock+0xc1/0x200 [ 40.120435] ext4_mark_iloc_dirty+0x464/0x2f90 [ 40.125014] ? kasan_check_read+0x11/0x20 [ 40.129157] ? rcu_is_watching+0x8c/0x150 [ 40.133300] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 40.137974] ? ext4_chunk_trans_blocks+0x30/0x30 [ 40.142728] ? jbd2_write_access_granted.part.9+0x274/0x430 [ 40.148434] ? jbd2_journal_file_inode+0x690/0x690 [ 40.153362] ? rcu_note_context_switch+0x680/0x680 [ 40.158295] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 40.163840] ? jbd2_journal_get_write_access+0xa5/0xc0 [ 40.169120] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 40.174655] ? __ext4_journal_get_write_access+0x72/0xa0 [ 40.180105] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 40.185640] ? ext4_reserve_inode_write+0x146/0x260 [ 40.190662] ext4_mark_inode_dirty+0x246/0xab0 [ 40.195247] ? ext4_mkdir+0x7b4/0xe60 [ 40.199044] ? ext4_expand_extra_isize+0x5b0/0x5b0 [ 40.203996] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 40.209554] ? kasan_check_write+0x14/0x20 [ 40.213783] ? __brelse+0x104/0x180 [ 40.217407] ? block_commit_write+0x30/0x30 [ 40.221731] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 40.227268] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 40.232808] ext4_mkdir+0x7b4/0xe60 [ 40.236439] ? ext4_init_dot_dotdot+0x510/0x510 [ 40.241109] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 40.246643] ? security_inode_permission+0xd2/0x100 [ 40.251659] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 40.257196] ? security_inode_mkdir+0xe8/0x120 [ 40.261780] vfs_mkdir+0x42e/0x6b0 [ 40.265332] do_mkdirat+0x27b/0x310 [ 40.268959] ? __ia32_sys_mknod+0xb0/0xb0 [ 40.273106] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 40.278466] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 40.283567] __x64_sys_mkdir+0x5c/0x80 [ 40.287458] do_syscall_64+0x1b9/0x820 [ 40.291356] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 40.296721] ? syscall_return_slowpath+0x5e0/0x5e0 [ 40.301644] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 40.306483] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 40.311496] ? prepare_exit_to_usermode+0x291/0x3b0 [ 40.316515] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 40.321359] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 40.326550] RIP: 0033:0x4564c7 [ 40.329743] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 ad c0 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 8d c0 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 40.348637] RSP: 002b:00007ffe8db86a18 EFLAGS: 00000206 ORIG_RAX: 0000000000000053 [ 40.356348] RAX: ffffffffffffffda RBX: 0000000000009687 RCX: 00000000004564c7 [ 40.363610] RDX: 00007ffe8db86a34 RSI: 00000000000001ff RDI: 00007ffe8db86a30 [ 40.370870] RBP: 0000000000000207 R08: 0000000000000000 R09: 0000000000000004 [ 40.378135] R10: 0000000000000064 R11: 0000000000000206 R12: 0000000000000009 [ 40.385401] R13: 000000000000965f R14: 0000000000000046 R15: badc0ffeebadface [ 40.392959] Dumping ftrace buffer: [ 40.396481] (ftrace buffer empty) [ 40.400172] Kernel Offset: disabled [ 40.403781] Rebooting in 86400 seconds..