INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.47' (ECDSA) to the list of known hosts. 2018/09/22 05:52:24 parsed 1 programs 2018/09/22 05:52:26 executed programs: 0 syzkaller login: [ 122.387631] IPVS: ftp: loaded support on port[0] = 21 [ 122.395178] IPVS: ftp: loaded support on port[0] = 21 [ 122.404174] IPVS: ftp: loaded support on port[0] = 21 [ 122.404380] IPVS: ftp: loaded support on port[0] = 21 [ 122.420665] IPVS: ftp: loaded support on port[0] = 21 [ 122.440809] IPVS: ftp: loaded support on port[0] = 21 [ 123.327003] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.333767] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.352699] device bridge_slave_0 entered promiscuous mode [ 123.385061] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.394633] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.402808] device bridge_slave_0 entered promiscuous mode [ 123.423434] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.434296] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.442002] device bridge_slave_0 entered promiscuous mode [ 123.470573] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.480829] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.489281] device bridge_slave_1 entered promiscuous mode [ 123.499906] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.507288] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.514734] device bridge_slave_1 entered promiscuous mode [ 123.524630] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 123.534650] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.543920] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.551861] device bridge_slave_1 entered promiscuous mode [ 123.560808] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.567824] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.574967] device bridge_slave_0 entered promiscuous mode [ 123.591741] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.600218] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.609209] device bridge_slave_0 entered promiscuous mode [ 123.619150] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 123.631413] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 123.641507] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 123.658982] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.665431] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.678797] device bridge_slave_0 entered promiscuous mode [ 123.688194] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.694565] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.703392] device bridge_slave_1 entered promiscuous mode [ 123.712966] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 123.734266] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.743738] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.751632] device bridge_slave_1 entered promiscuous mode [ 123.760757] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 123.776584] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.783126] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.792758] device bridge_slave_1 entered promiscuous mode [ 123.799455] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 123.853569] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 123.863088] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 123.871026] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 123.907289] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 123.941768] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 123.966462] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 123.992315] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 124.008944] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 124.071742] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 124.082730] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 124.107801] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 124.121757] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 124.140638] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 124.152175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 124.186801] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 124.195067] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 124.208410] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 124.218881] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 124.225704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 124.238054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 124.251869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 124.264729] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 124.276566] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 124.286650] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 124.301638] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 124.327297] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 124.338768] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 124.353326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 124.365693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 124.374094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 124.420134] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 124.441461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 124.460478] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 124.469176] team0: Port device team_slave_0 added [ 124.477514] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 124.546532] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 124.553962] team0: Port device team_slave_1 added [ 124.582191] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 124.589733] team0: Port device team_slave_0 added [ 124.605135] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 124.617660] team0: Port device team_slave_0 added [ 124.662250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 124.679042] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 124.694508] team0: Port device team_slave_1 added [ 124.700351] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 124.707866] team0: Port device team_slave_1 added [ 124.717932] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 124.725241] team0: Port device team_slave_0 added [ 124.747196] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 124.756188] team0: Port device team_slave_0 added [ 124.764197] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 124.797498] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 124.811974] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 124.822197] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 124.833544] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 124.841457] team0: Port device team_slave_1 added [ 124.853226] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 124.860985] team0: Port device team_slave_1 added [ 124.867443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.876169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 124.895203] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 124.904367] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 124.934638] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 124.946368] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 124.955327] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 124.973280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.986880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 124.995747] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 125.004409] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 125.019248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.030092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.038711] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 125.053816] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 125.065680] team0: Port device team_slave_0 added [ 125.074615] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 125.087295] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 125.098330] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 125.105738] team0: Port device team_slave_1 added [ 125.111784] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 125.120304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.137234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.145505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.159572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.167551] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.175283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.185780] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 125.197947] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 125.213092] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 125.231674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.241057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.256497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.264418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.272510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 125.280405] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 125.288667] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 125.300111] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 125.317624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.325556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.351330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.360050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.371293] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 125.390799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 125.404027] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 125.468935] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 125.476580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.491204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.524624] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 125.536645] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.547831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.962527] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.969077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.976074] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.982468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.992986] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 126.004782] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.011258] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.018001] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.024392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.034246] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 126.055973] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 126.063330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 126.082191] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.088642] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.095324] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.101743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.112689] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 126.148883] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.155275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.162019] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.168439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.190050] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 126.200331] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.206746] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.213411] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.219869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.229280] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 126.430310] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.436743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.443401] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.449830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.461786] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 127.141229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 127.150424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 127.158091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 127.165301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 128.618319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.874736] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 128.901919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.973592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.004660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.067934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.121611] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 129.141427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 129.151176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 129.179687] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 129.254542] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 129.273256] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 129.354917] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 129.371727] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.384810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.477586] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 129.485360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 129.497405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 129.534569] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 129.542869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 129.552288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 129.568236] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 129.589477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 129.604416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 129.635189] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 129.653927] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 129.667286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 129.675250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 129.816050] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.852991] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.875260] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.897549] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 129.903697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 129.913528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 129.952692] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.169444] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.956941] hrtimer: interrupt took 46111 ns 2018/09/22 05:52:35 executed programs: 6 2018/09/22 05:52:40 executed programs: 83 [ 140.541830] cgroup: fork rejected by pids controller in /syz3 [ 141.101327] cgroup: fork rejected by pids controller in /syz4 [ 141.218868] cgroup: fork rejected by pids controller in /syz1 [ 141.271831] cgroup: fork rejected by pids controller in /syz5 2018/09/22 05:52:46 executed programs: 172 [ 142.716592] device bridge_slave_1 left promiscuous mode [ 142.722412] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.788329] device bridge_slave_0 left promiscuous mode [ 142.810433] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.844980] IPVS: ftp: loaded support on port[0] = 21 [ 142.933159] team0 (unregistering): Port device team_slave_1 removed [ 142.944874] team0 (unregistering): Port device team_slave_0 removed [ 142.960853] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 143.030708] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 143.117759] bond0 (unregistering): Released all slaves [ 143.257799] cgroup: fork rejected by pids controller in /syz0 [ 143.286118] cgroup: fork rejected by pids controller in /syz2 [ 143.507764] IPVS: ftp: loaded support on port[0] = 21 [ 144.335123] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.348611] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.359014] device bridge_slave_0 entered promiscuous mode [ 144.410375] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.419189] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.438453] device bridge_slave_1 entered promiscuous mode [ 144.481108] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.487625] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.494993] device bridge_slave_0 entered promiscuous mode [ 144.505255] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 144.525707] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.532648] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.547350] device bridge_slave_1 entered promiscuous mode [ 144.572148] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 144.602955] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 144.648725] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 144.727641] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 144.782044] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 144.796974] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 144.829063] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 144.977061] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 144.984623] team0: Port device team_slave_0 added [ 144.994949] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 145.003148] team0: Port device team_slave_0 added [ 145.032820] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 145.040401] team0: Port device team_slave_1 added [ 145.059193] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 145.066714] team0: Port device team_slave_1 added [ 145.096862] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 145.107336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 145.135586] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 145.148206] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 145.163553] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 145.171810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 145.181115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 145.199294] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 145.209794] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 145.219369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 145.229270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 145.243279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 145.257681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 145.271048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 145.529745] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.536176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.542907] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.549415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.557038] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 145.601136] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.607586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.614175] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.620580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.627973] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 146.147269] device bridge_slave_1 left promiscuous mode [ 146.152899] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.187047] device bridge_slave_0 left promiscuous mode [ 146.192476] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.227772] device bridge_slave_1 left promiscuous mode [ 146.233195] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.287215] device bridge_slave_0 left promiscuous mode [ 146.292679] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.327591] device bridge_slave_1 left promiscuous mode [ 146.333037] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.377046] device bridge_slave_0 left promiscuous mode [ 146.382469] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.457091] device bridge_slave_1 left promiscuous mode [ 146.462547] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.516688] device bridge_slave_0 left promiscuous mode [ 146.522165] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.651789] team0 (unregistering): Port device team_slave_1 removed [ 146.664551] team0 (unregistering): Port device team_slave_0 removed [ 146.675420] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 146.729219] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 146.789365] bond0 (unregistering): Released all slaves [ 146.839418] team0 (unregistering): Port device team_slave_1 removed [ 146.850259] team0 (unregistering): Port device team_slave_0 removed [ 146.861014] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 146.919845] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 146.976955] bond0 (unregistering): Released all slaves [ 147.050332] team0 (unregistering): Port device team_slave_1 removed [ 147.061474] team0 (unregistering): Port device team_slave_0 removed [ 147.072691] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 147.140107] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 147.217344] bond0 (unregistering): Released all slaves [ 147.280720] team0 (unregistering): Port device team_slave_1 removed [ 147.291625] team0 (unregistering): Port device team_slave_0 removed [ 147.301644] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 147.339660] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 147.418865] bond0 (unregistering): Released all slaves [ 147.484884] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 147.492238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 148.185690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.299437] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 148.309326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.457787] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 148.463960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 148.476709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 148.505278] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 148.637170] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 148.643345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 148.656578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 148.670984] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.836474] 8021q: adding VLAN 0 to HW filter on device team0 2018/09/22 05:52:53 executed programs: 202 [ 149.739199] IPVS: ftp: loaded support on port[0] = 21 [ 149.785242] IPVS: ftp: loaded support on port[0] = 21 [ 149.806428] IPVS: ftp: loaded support on port[0] = 21 [ 150.142136] IPVS: ftp: loaded support on port[0] = 21 [ 150.568544] device bridge_slave_1 left promiscuous mode [ 150.574444] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.657139] device bridge_slave_0 left promiscuous mode [ 150.662702] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.732112] team0 (unregistering): Port device team_slave_1 removed [ 150.743157] team0 (unregistering): Port device team_slave_0 removed [ 150.755288] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 150.800889] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 150.872647] bond0 (unregistering): Released all slaves [ 151.355289] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.376187] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.395943] device bridge_slave_0 entered promiscuous mode [ 151.461922] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.475329] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.490301] device bridge_slave_0 entered promiscuous mode [ 151.513893] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.534598] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.548788] device bridge_slave_1 entered promiscuous mode [ 151.576925] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.588734] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.606347] device bridge_slave_1 entered promiscuous mode [ 151.624750] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.642626] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.657001] device bridge_slave_0 entered promiscuous mode [ 151.666096] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 151.701488] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 151.744523] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 151.752076] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.760927] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.769521] device bridge_slave_1 entered promiscuous mode [ 151.787798] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 151.846642] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 151.909756] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.927201] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.934544] device bridge_slave_0 entered promiscuous mode [ 151.951033] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 151.983283] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 152.012434] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.025696] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.039278] device bridge_slave_1 entered promiscuous mode [ 152.063556] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 152.087987] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 152.139399] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 152.163398] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 152.182654] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 152.194301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 152.225505] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 152.239125] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 152.256917] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 152.271014] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 152.292251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 152.308786] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 152.316149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 152.327148] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 152.353057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 152.390539] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 152.405983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 152.509898] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 152.520400] team0: Port device team_slave_0 added [ 152.528827] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 152.567914] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 152.575285] team0: Port device team_slave_0 added [ 152.595329] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 152.616641] team0: Port device team_slave_1 added [ 152.648252] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 152.668683] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 152.679948] team0: Port device team_slave_1 added [ 152.691013] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 152.731782] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 152.747111] team0: Port device team_slave_0 added [ 152.766686] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 152.797263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 152.819427] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 152.834174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 152.845371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 152.875031] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 152.898144] team0: Port device team_slave_1 added [ 152.907757] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 152.917965] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 152.930809] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 152.953907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 152.976821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 152.984692] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 152.993010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 153.001287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 153.012131] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 153.025579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 153.036631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 153.083144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 153.100925] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 153.109991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.121451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 153.132809] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 153.146669] team0: Port device team_slave_0 added [ 153.187030] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 153.194162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 153.206942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 153.220990] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 153.230401] team0: Port device team_slave_1 added [ 153.296509] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 153.303374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 153.314297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 153.346287] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 153.353695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 153.376977] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 153.419795] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 153.429619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.439668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 153.481198] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 153.489212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 153.508277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 153.702733] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.709188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.715927] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.722308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.732923] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 153.787559] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.793947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.800921] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.807373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.815165] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 153.868632] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.875009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.881773] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.888188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.896724] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 154.114183] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.120618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.127323] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.133698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.143425] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 154.150882] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 154.161306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 154.169867] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 154.177705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.653175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.748280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.815980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.842244] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 155.908258] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 155.975205] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 156.001121] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 156.007978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 156.015054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.099679] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 156.109048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 156.121774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.138321] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 156.146785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 156.153871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.166166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.230797] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.300943] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.323081] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.345761] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 156.516542] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 156.525180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 156.534763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.684264] 8021q: adding VLAN 0 to HW filter on device team0 2018/09/22 05:53:01 executed programs: 213 [ 159.998739] ================================================================== [ 160.006296] BUG: KASAN: use-after-free in vhost_work_queue+0xc3/0xe0 [ 160.012777] Read of size 8 at addr ffff8801b05432a8 by task syz-executor0/9644 [ 160.020120] [ 160.021752] CPU: 1 PID: 9644 Comm: syz-executor0 Not tainted 4.19.0-rc4-next-20180921+ #77 [ 160.030140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 160.039490] Call Trace: [ 160.042067] dump_stack+0x1d3/0x2c4 [ 160.045687] ? dump_stack_print_info.cold.2+0x52/0x52 [ 160.050871] ? printk+0xa7/0xcf [ 160.054204] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 160.058972] print_address_description.cold.8+0x9/0x1ff [ 160.064330] kasan_report.cold.9+0x242/0x309 [ 160.068726] ? vhost_work_queue+0xc3/0xe0 [ 160.072885] __asan_report_load8_noabort+0x14/0x20 [ 160.077817] vhost_work_queue+0xc3/0xe0 [ 160.081788] vhost_transport_send_pkt+0x28a/0x380 [ 160.086626] ? vhost_vsock_dev_open+0x5a0/0x5a0 [ 160.091296] ? virtio_transport_send_pkt_info+0x2e7/0x460 [ 160.096828] ? __local_bh_enable_ip+0x160/0x260 [ 160.101501] virtio_transport_send_pkt_info+0x31d/0x460 [ 160.106863] virtio_transport_connect+0x17c/0x220 [ 160.111693] ? virtio_transport_send_pkt_info+0x460/0x460 [ 160.117217] ? vsock_auto_bind+0xa9/0xe0 [ 160.121276] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 160.126844] vsock_stream_connect+0x4ed/0xe40 [ 160.131334] ? vsock_dgram_connect+0x500/0x500 [ 160.135916] ? __might_sleep+0x95/0x190 [ 160.139883] ? finish_wait+0x430/0x430 [ 160.143770] ? aa_af_perm+0x5a0/0x5a0 [ 160.147562] ? apparmor_socket_connect+0xb6/0x160 [ 160.152396] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 160.157923] ? security_socket_connect+0x94/0xc0 [ 160.162678] __sys_connect+0x37d/0x4c0 [ 160.166575] ? __ia32_sys_accept+0xb0/0xb0 [ 160.170820] ? fget_raw+0x20/0x20 [ 160.174293] ? __x64_sys_futex+0x47f/0x6a0 [ 160.178529] ? do_syscall_64+0x9a/0x820 [ 160.182498] ? do_syscall_64+0x9a/0x820 [ 160.186476] ? lockdep_hardirqs_on+0x421/0x5c0 [ 160.191048] ? trace_hardirqs_on+0xbd/0x310 [ 160.195357] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 160.200886] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 160.206236] ? trace_hardirqs_off_caller+0x300/0x300 [ 160.211332] ? ksys_ioctl+0x81/0xd0 [ 160.214948] __x64_sys_connect+0x73/0xb0 [ 160.219001] do_syscall_64+0x1b9/0x820 [ 160.222877] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 160.228228] ? syscall_return_slowpath+0x5e0/0x5e0 [ 160.233146] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 160.237979] ? trace_hardirqs_off+0x310/0x310 [ 160.242477] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 160.247498] ? prepare_exit_to_usermode+0x291/0x3b0 [ 160.252504] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 160.257360] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 160.262534] RIP: 0033:0x457679 [ 160.265714] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 160.284599] RSP: 002b:00007f746bbf5c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 160.292303] RAX: ffffffffffffffda RBX: 00007f746bbf66d4 RCX: 0000000000457679 [ 160.299555] RDX: 0000000000000010 RSI: 0000000020000200 RDI: 0000000000000009 [ 160.306825] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 160.314102] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 160.321360] R13: 00000000004cc658 R14: 00000000004bdcb3 R15: 0000000000000000 [ 160.328625] [ 160.330241] Allocated by task 9654: [ 160.333875] save_stack+0x43/0xd0 [ 160.337334] kasan_kmalloc+0xc7/0xe0 [ 160.341040] __kmalloc_node+0x47/0x70 [ 160.344860] kvmalloc_node+0xb9/0xf0 [ 160.348574] vhost_vsock_dev_open+0xa2/0x5a0 [ 160.352995] misc_open+0x3ca/0x560 [ 160.356543] chrdev_open+0x25a/0x710 [ 160.360258] do_dentry_open+0x499/0x1250 [ 160.364302] vfs_open+0xa0/0xd0 [ 160.367575] path_openat+0x12bc/0x5160 [ 160.371466] do_filp_open+0x255/0x380 [ 160.375253] do_sys_open+0x568/0x700 [ 160.378954] __x64_sys_openat+0x9d/0x100 [ 160.383011] do_syscall_64+0x1b9/0x820 [ 160.386888] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 160.392079] [ 160.393688] Freed by task 9643: [ 160.396952] save_stack+0x43/0xd0 [ 160.400390] __kasan_slab_free+0x102/0x150 [ 160.404636] kasan_slab_free+0xe/0x10 [ 160.408428] kfree+0xcf/0x230 [ 160.411526] kvfree+0x61/0x70 [ 160.414621] vhost_vsock_dev_release+0x4f4/0x720 [ 160.419359] __fput+0x3bc/0xa70 [ 160.422624] ____fput+0x15/0x20 [ 160.425891] task_work_run+0x1e8/0x2a0 [ 160.429767] exit_to_usermode_loop+0x318/0x380 [ 160.434358] do_syscall_64+0x6be/0x820 [ 160.438245] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 160.443413] [ 160.445028] The buggy address belongs to the object at ffff8801b0543200 [ 160.445028] which belongs to the cache kmalloc-64k of size 65536 [ 160.457858] The buggy address is located 168 bytes inside of [ 160.457858] 65536-byte region [ffff8801b0543200, ffff8801b0553200) [ 160.469893] The buggy address belongs to the page: [ 160.474818] page:ffffea0006c15000 count:1 mapcount:0 mapping:ffff8801da802500 index:0x0 compound_mapcount: 0 [ 160.484797] flags: 0x2fffc0000010200(slab|head) [ 160.489453] raw: 02fffc0000010200 ffffea0006c14808 ffffea0006c15808 ffff8801da802500 [ 160.497320] raw: 0000000000000000 ffff8801b0543200 0000000100000001 0000000000000000 [ 160.505192] page dumped because: kasan: bad access detected [ 160.510896] [ 160.512506] Memory state around the buggy address: [ 160.517417] ffff8801b0543180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 160.524770] ffff8801b0543200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 160.532128] >ffff8801b0543280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 160.539465] ^ [ 160.544117] ffff8801b0543300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 160.551466] ffff8801b0543380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 160.558819] ================================================================== [ 160.566168] Disabling lock debugging due to kernel taint [ 160.577293] Kernel panic - not syncing: panic_on_warn set ... [ 160.577293] [ 160.584692] CPU: 0 PID: 9644 Comm: syz-executor0 Tainted: G B 4.19.0-rc4-next-20180921+ #77 [ 160.594466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 160.603801] Call Trace: [ 160.606394] dump_stack+0x1d3/0x2c4 [ 160.610007] ? dump_stack_print_info.cold.2+0x52/0x52 [ 160.615196] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 160.619953] panic+0x238/0x4e7 [ 160.623149] ? add_taint.cold.5+0x16/0x16 [ 160.627295] ? preempt_schedule+0x4d/0x60 [ 160.631440] ? ___preempt_schedule+0x16/0x18 [ 160.635859] ? trace_hardirqs_on+0xb4/0x310 [ 160.640205] kasan_end_report+0x47/0x4f [ 160.644189] kasan_report.cold.9+0x76/0x309 [ 160.648509] ? vhost_work_queue+0xc3/0xe0 [ 160.652654] __asan_report_load8_noabort+0x14/0x20 [ 160.657580] vhost_work_queue+0xc3/0xe0 [ 160.661553] vhost_transport_send_pkt+0x28a/0x380 [ 160.666394] ? vhost_vsock_dev_open+0x5a0/0x5a0 [ 160.671050] ? virtio_transport_send_pkt_info+0x2e7/0x460 [ 160.676612] ? __local_bh_enable_ip+0x160/0x260 [ 160.681273] virtio_transport_send_pkt_info+0x31d/0x460 [ 160.686623] virtio_transport_connect+0x17c/0x220 [ 160.691465] ? virtio_transport_send_pkt_info+0x460/0x460 [ 160.697002] ? vsock_auto_bind+0xa9/0xe0 [ 160.701069] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 160.703397] kobject: 'loop3' (000000003e55906a): kobject_uevent_env [ 160.706625] vsock_stream_connect+0x4ed/0xe40 [ 160.706646] ? vsock_dgram_connect+0x500/0x500 [ 160.706662] ? __might_sleep+0x95/0x190 [ 160.706680] ? finish_wait+0x430/0x430 [ 160.720166] kobject: 'loop3' (000000003e55906a): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 160.722139] ? aa_af_perm+0x5a0/0x5a0 [ 160.722163] ? apparmor_socket_connect+0xb6/0x160 [ 160.722180] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 160.722197] ? security_socket_connect+0x94/0xc0 [ 160.722218] __sys_connect+0x37d/0x4c0 [ 160.751994] kobject: 'loop5' (000000003c108eb1): kobject_uevent_env [ 160.753643] ? __ia32_sys_accept+0xb0/0xb0 [ 160.753662] ? fget_raw+0x20/0x20 [ 160.753683] ? __x64_sys_futex+0x47f/0x6a0 [ 160.753704] ? do_syscall_64+0x9a/0x820 [ 160.784562] ? do_syscall_64+0x9a/0x820 [ 160.788540] ? lockdep_hardirqs_on+0x421/0x5c0 [ 160.793133] ? trace_hardirqs_on+0xbd/0x310 [ 160.797460] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 160.803014] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 160.808377] ? trace_hardirqs_off_caller+0x300/0x300 [ 160.813508] ? ksys_ioctl+0x81/0xd0 [ 160.817150] __x64_sys_connect+0x73/0xb0 [ 160.821213] do_syscall_64+0x1b9/0x820 [ 160.825098] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 160.830471] ? syscall_return_slowpath+0x5e0/0x5e0 [ 160.835398] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 160.840243] ? trace_hardirqs_off+0x310/0x310 [ 160.844769] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 160.849784] ? prepare_exit_to_usermode+0x291/0x3b0 [ 160.854801] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 160.859712] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 160.864898] RIP: 0033:0x457679 [ 160.868102] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 160.887032] RSP: 002b:00007f746bbf5c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 160.894738] RAX: ffffffffffffffda RBX: 00007f746bbf66d4 RCX: 0000000000457679 [ 160.902003] RDX: 0000000000000010 RSI: 0000000020000200 RDI: 0000000000000009 [ 160.909268] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 160.916532] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 160.923797] R13: 00000000004cc658 R14: 00000000004bdcb3 R15: 0000000000000000 [ 160.932214] Kernel Offset: disabled [ 160.935970] Rebooting in 86400 seconds..