Warning: Permanently added '10.128.15.203' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program executing program executing program [ 28.386214] md: md1 stopped. executing program executing program executing program executing program executing program executing program [ 28.497751] md: md1 stopped. executing program executing program executing program executing program [ 28.538896] md: md1 stopped. executing program executing program [ 28.586251] md: md1 stopped. executing program executing program [ 28.635886] md: md1 stopped. executing program executing program [ 28.673911] md: md1 stopped. executing program executing program executing program [ 28.710157] md: md1 stopped. [ 28.758927] md: md1 stopped. executing program executing program executing program executing program executing program executing program [ 28.829189] md: md1 stopped. [ 28.840760] md: md1 stopped. executing program executing program executing program [ 28.924907] md: md1 stopped. executing program executing program executing program [ 28.965775] md: md1 stopped. executing program [ 29.011653] md: md1 stopped. executing program executing program executing program [ 29.062861] md: md1 stopped. executing program [ 29.112049] md: md1 stopped. executing program executing program [ 29.170176] md: md1 stopped. executing program executing program executing program executing program [ 29.239066] md: md1 stopped. executing program executing program [ 29.297514] md: md1 stopped. executing program executing program executing program executing program executing program executing program [ 29.354559] md: md1 stopped. [ 29.359314] md: md1 stopped. executing program [ 29.413234] md: md1 stopped. executing program executing program executing program executing program executing program [ 29.464793] md: md1 stopped. [ 29.470409] md: md1 stopped. executing program executing program executing program [ 29.525710] md: md1 stopped. executing program executing program [ 29.574528] md: md1 stopped. [ 29.621519] md: md1 stopped. executing program executing program executing program executing program executing program [ 29.689764] md: md1 stopped. executing program executing program [ 29.741604] md: md1 stopped. executing program executing program executing program [ 29.780665] md: md1 stopped. executing program [ 29.819305] md: md1 stopped. executing program executing program [ 29.869559] md: md1 stopped. executing program executing program executing program executing program executing program executing program [ 29.941787] md: md1 stopped. [ 29.947111] md: md1 stopped. [ 29.958474] md: md1 stopped. [ 30.010473] md: md1 stopped. executing program executing program executing program executing program [ 30.076395] md: md1 stopped. executing program [ 30.132302] md: md1 stopped. executing program executing program executing program executing program executing program [ 30.183532] md: md1 stopped. executing program executing program executing program executing program executing program [ 30.273243] md: md1 stopped. executing program [ 30.315592] md: md1 stopped. [ 30.369778] md: md1 stopped. executing program executing program executing program executing program executing program [ 30.429371] md: md1 stopped. executing program executing program executing program executing program executing program executing program [ 30.522843] md: md1 stopped. executing program [ 30.556476] md: md1 stopped. executing program [ 30.608711] md: md1 stopped. executing program executing program executing program executing program executing program [ 30.659646] md: md1 stopped. [ 30.671254] md: md1 stopped. [ 30.718489] md: md1 stopped. executing program executing program executing program executing program executing program [ 30.777637] md: md1 stopped. executing program [ 30.830977] md: md1 stopped. [ 30.835954] md: md1 stopped. executing program [ 30.881791] md: md1 stopped. executing program executing program executing program executing program executing program executing program [ 30.937346] md: md1 stopped. [ 30.941510] md: md1 stopped. executing program executing program [ 30.999044] md: md1 stopped. executing program executing program executing program executing program [ 31.039170] md: md1 stopped. [ 31.044192] md: md1 stopped. [ 31.099292] md: md1 stopped. executing program executing program executing program executing program executing program executing program [ 31.157189] md: md1 stopped. [ 31.160360] md: md1 stopped. [ 31.215368] md: md1 stopped. executing program executing program executing program executing program [ 31.280700] md: md1 stopped. executing program executing program executing program [ 31.336586] md: md1 stopped. executing program executing program executing program executing program executing program [ 31.380232] md: md1 stopped. [ 31.385471] md: md1 stopped. [ 31.389067] md: md1 stopped. [ 31.451766] md: md1 stopped. executing program executing program executing program executing program executing program executing program [ 31.512080] md: md1 stopped. [ 31.517165] md: md1 stopped. [ 31.561034] md: md1 stopped. executing program executing program executing program executing program [ 31.621963] md: md1 stopped. executing program executing program executing program [ 31.670059] md: md1 stopped. [ 31.675464] md: md1 stopped. [ 31.730008] md: md1 stopped. executing program executing program executing program executing program executing program [ 31.789028] md: md1 stopped. [ 31.793603] md: md1 stopped. [ 31.799505] md: md1 stopped. [ 31.808603] md: md1 stopped. executing program executing program executing program executing program executing program executing program [ 31.891718] md: md1 stopped. [ 31.900882] md: md1 stopped. [ 31.912835] md: md1 stopped. [ 31.919037] md: md1 stopped. executing program executing program [ 31.998827] md: md1 stopped. executing program executing program executing program executing program executing program executing program [ 32.049982] md: md1 stopped. [ 32.053255] md: md1 stopped. executing program executing program [ 32.110594] md: md1 stopped. executing program [ 32.161277] md: md1 stopped. executing program executing program executing program executing program executing program [ 32.219521] md: md1 stopped. executing program executing program [ 32.260431] md: md1 stopped. [ 32.266774] md: md1 stopped. [ 32.275741] md: md1 stopped. [ 32.319358] md: md1 stopped. executing program executing program executing program executing program executing program executing program [ 32.378180] md: md1 stopped. [ 32.382681] md: md1 stopped. executing program [ 32.437520] md: md1 stopped. executing program executing program executing program executing program executing program [ 32.483007] md: md1 stopped. [ 32.487459] md: md1 stopped. [ 32.493636] md: md1 stopped. executing program [ 32.552431] md: md1 stopped. executing program executing program executing program executing program [ 32.595870] md: md1 stopped. [ 32.599630] md: md1 stopped. [ 32.604030] md: md1 stopped. executing program executing program executing program executing program executing program [ 32.699862] md: md1 stopped. [ 32.705365] md: md1 stopped. [ 32.709468] md: md1 stopped. executing program executing program executing program executing program [ 32.785403] md: md1 stopped. executing program executing program [ 32.827728] md: md1 stopped. executing program [ 32.891772] md: md1 stopped. executing program executing program executing program executing program executing program executing program [ 32.943403] md: md1 stopped. [ 32.990608] md: md1 stopped. executing program executing program executing program executing program [ 33.055973] md: md1 stopped. [ 33.059815] md: md1 stopped. executing program executing program executing program [ 33.115247] md: md1 stopped. executing program [ 33.171163] md: md1 stopped. executing program executing program executing program executing program executing program [ 33.227129] md: md1 stopped. executing program executing program [ 33.280920] md: md1 stopped. [ 33.320265] md: md1 stopped. executing program executing program executing program executing program executing program executing program [ 33.383727] md: md1 stopped. [ 33.433380] md: md1 stopped. executing program executing program [ 33.494092] md: md1 stopped. [ 33.537835] md: md1 stopped. [ 33.543034] md: md1 stopped. [ 33.543329] ================================================================== [ 33.553538] BUG: KASAN: use-after-free in disk_unblock_events+0x4b/0x50 [ 33.560315] Read of size 8 at addr ffff88808f3992c8 by task syz-executor408/9947 [ 33.567846] [ 33.569462] CPU: 0 PID: 9947 Comm: syz-executor408 Not tainted 4.14.213-syzkaller #0 [ 33.577077] md: md1 stopped. [ 33.577324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 33.577328] Call Trace: [ 33.577344] dump_stack+0x1b2/0x283 [ 33.577358] print_address_description.cold+0x54/0x1d3 [ 33.582359] md: md1 stopped. [ 33.589711] kasan_report_error.cold+0x8a/0x194 [ 33.589722] ? disk_unblock_events+0x4b/0x50 [ 33.589728] __asan_report_load8_noabort+0x68/0x70 [ 33.589738] ? md_do_sync+0x1780/0x17b0 [ 33.589745] ? disk_unblock_events+0x4b/0x50 [ 33.589752] ? md_do_sync+0x17b0/0x17b0 [ 33.589767] disk_unblock_events+0x4b/0x50 [ 33.589777] __blkdev_get+0x83b/0x1090 [ 33.589788] ? blkdev_get_block+0x70/0x70 [ 33.642632] ? sb_min_blocksize+0x1d0/0x1d0 [ 33.647066] blkdev_get+0x88/0x890 [ 33.650597] ? __blkdev_get+0x1090/0x1090 [ 33.654723] ? lock_downgrade+0x740/0x740 [ 33.658851] ? do_raw_spin_unlock+0x164/0x220 [ 33.663329] ? _raw_spin_unlock+0x29/0x40 [ 33.667453] blkdev_open+0x1cc/0x250 [ 33.671145] ? security_file_open+0x82/0x190 [ 33.675531] do_dentry_open+0x44b/0xec0 [ 33.679498] ? blkdev_get_by_dev+0x70/0x70 [ 33.683713] ? __inode_permission+0xcd/0x2f0 [ 33.688099] vfs_open+0x105/0x220 [ 33.691529] path_openat+0x628/0x2970 [ 33.695320] ? path_lookupat+0x780/0x780 [ 33.699370] ? trace_hardirqs_on+0x10/0x10 [ 33.703598] do_filp_open+0x179/0x3c0 [ 33.707385] ? may_open_dev+0xe0/0xe0 [ 33.711179] ? lock_downgrade+0x740/0x740 [ 33.715320] ? do_raw_spin_unlock+0x164/0x220 [ 33.719802] ? _raw_spin_unlock+0x29/0x40 [ 33.723937] ? __alloc_fd+0x1be/0x490 [ 33.727716] do_sys_open+0x296/0x410 [ 33.731406] ? filp_open+0x60/0x60 [ 33.734924] ? _raw_spin_unlock_irq+0x5a/0x80 [ 33.739394] ? do_syscall_64+0x4c/0x640 [ 33.743357] ? SyS_open+0x30/0x30 [ 33.746788] do_syscall_64+0x1d5/0x640 [ 33.750656] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 33.755821] RIP: 0033:0x447369 [ 33.758996] RSP: 002b:00007f73a4f2bd98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 33.766679] RAX: ffffffffffffffda RBX: 00000000006dec58 RCX: 0000000000447369 [ 33.773927] RDX: 0000000000000000 RSI: 00000000200020c0 RDI: 00000000ffffff9c [ 33.781172] RBP: 00000000006dec50 R08: 00007f73a4f2c700 R09: 0000000000000000 [ 33.788428] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dec5c [ 33.795711] R13: 0000000020000000 R14: 00000000004af9e0 R15: 0000000000000001 [ 33.803006] [ 33.804624] Allocated by task 9934: [ 33.808319] kasan_kmalloc+0xeb/0x160 [ 33.812099] kmem_cache_alloc_node_trace+0x153/0x400 [ 33.817181] alloc_disk_node+0x5d/0x3d0 [ 33.821136] md_alloc+0x22a/0x890 [ 33.824575] md_probe+0x28/0x40 [ 33.827831] kobj_lookup+0x21f/0x400 [ 33.831541] get_gendisk+0x36/0x230 [ 33.835156] __blkdev_get+0x3e5/0x1090 [ 33.839016] blkdev_get+0x88/0x890 [ 33.842542] blkdev_open+0x1cc/0x250 [ 33.846231] do_dentry_open+0x44b/0xec0 [ 33.850190] vfs_open+0x105/0x220 [ 33.853617] path_openat+0x628/0x2970 [ 33.857402] do_filp_open+0x179/0x3c0 [ 33.861184] do_sys_open+0x296/0x410 [ 33.864887] do_syscall_64+0x1d5/0x640 [ 33.868767] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 33.873929] [ 33.875556] Freed by task 9947: [ 33.878822] kasan_slab_free+0xc3/0x1a0 [ 33.882789] kfree+0xc9/0x250 [ 33.885871] device_release+0xf0/0x1a0 [ 33.889733] kobject_put+0x251/0x550 [ 33.893422] put_disk+0x1f/0x30 [ 33.896690] __blkdev_get+0x7a6/0x1090 [ 33.900551] blkdev_get+0x88/0x890 [ 33.904084] blkdev_open+0x1cc/0x250 [ 33.907786] do_dentry_open+0x44b/0xec0 [ 33.911747] vfs_open+0x105/0x220 [ 33.915189] path_openat+0x628/0x2970 [ 33.919057] do_filp_open+0x179/0x3c0 [ 33.922834] do_sys_open+0x296/0x410 [ 33.926525] do_syscall_64+0x1d5/0x640 [ 33.930389] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 33.935546] [ 33.937147] The buggy address belongs to the object at ffff88808f398d40 [ 33.937147] which belongs to the cache kmalloc-2048 of size 2048 [ 33.950338] The buggy address is located 1416 bytes inside of [ 33.950338] 2048-byte region [ffff88808f398d40, ffff88808f399540) [ 33.962381] The buggy address belongs to the page: [ 33.967288] page:ffffea00023ce600 count:1 mapcount:0 mapping:ffff88808f3984c0 index:0x0 compound_mapcount: 0 [ 33.977256] flags: 0xfff00000008100(slab|head) [ 33.981834] raw: 00fff00000008100 ffff88808f3984c0 0000000000000000 0000000100000003 [ 33.989698] raw: ffffea000248e6a0 ffffea0002753da0 ffff88813fe80c40 0000000000000000 [ 33.997559] page dumped because: kasan: bad access detected [ 34.003242] [ 34.004866] Memory state around the buggy address: [ 34.009783] ffff88808f399180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 34.017131] ffff88808f399200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 34.024837] >ffff88808f399280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 34.032198] ^ executing program executing program executing program executing program executing program [ 34.037950] ffff88808f399300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 34.045287] ffff88808f399380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 34.052656] ================================================================== [ 34.060076] Disabling lock debugging due to kernel taint [ 34.128597] Kernel panic - not syncing: panic_on_warn set ... [ 34.128597] [ 34.136083] CPU: 1 PID: 9947 Comm: syz-executor408 Tainted: G B 4.14.213-syzkaller #0 [ 34.140579] md: md1 stopped. [ 34.145171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 34.145174] Call Trace: [ 34.145188] dump_stack+0x1b2/0x283 [ 34.145198] panic+0x1f9/0x42d [ 34.145205] ? add_taint.cold+0x16/0x16 [ 34.145213] ? ___preempt_schedule+0x16/0x18 [ 34.145223] kasan_end_report+0x43/0x49 [ 34.145230] kasan_report_error.cold+0xa7/0x194 [ 34.145239] ? disk_unblock_events+0x4b/0x50 [ 34.145245] __asan_report_load8_noabort+0x68/0x70 [ 34.145254] ? md_do_sync+0x1780/0x17b0 [ 34.145261] ? disk_unblock_events+0x4b/0x50 [ 34.145267] ? md_do_sync+0x17b0/0x17b0 [ 34.145274] disk_unblock_events+0x4b/0x50 [ 34.145282] __blkdev_get+0x83b/0x1090 [ 34.145292] ? blkdev_get_block+0x70/0x70 [ 34.145299] ? sb_min_blocksize+0x1d0/0x1d0 [ 34.145308] blkdev_get+0x88/0x890 [ 34.145316] ? __blkdev_get+0x1090/0x1090 [ 34.145327] ? lock_downgrade+0x740/0x740 [ 34.150458] md: md1 stopped. [ 34.157676] ? do_raw_spin_unlock+0x164/0x220 [ 34.157685] ? _raw_spin_unlock+0x29/0x40 [ 34.157691] blkdev_open+0x1cc/0x250 [ 34.157700] ? security_file_open+0x82/0x190 [ 34.157707] do_dentry_open+0x44b/0xec0 [ 34.157713] ? blkdev_get_by_dev+0x70/0x70 [ 34.157725] ? __inode_permission+0xcd/0x2f0 [ 34.171644] md: md1 stopped. [ 34.175433] vfs_open+0x105/0x220 [ 34.175441] path_openat+0x628/0x2970 [ 34.175451] ? path_lookupat+0x780/0x780 [ 34.175459] ? trace_hardirqs_on+0x10/0x10 [ 34.175468] do_filp_open+0x179/0x3c0 [ 34.175474] ? may_open_dev+0xe0/0xe0 [ 34.175482] ? lock_downgrade+0x740/0x740 [ 34.296446] ? do_raw_spin_unlock+0x164/0x220 [ 34.300925] ? _raw_spin_unlock+0x29/0x40 [ 34.305056] ? __alloc_fd+0x1be/0x490 [ 34.308844] do_sys_open+0x296/0x410 [ 34.312533] ? filp_open+0x60/0x60 [ 34.316046] ? _raw_spin_unlock_irq+0x5a/0x80 [ 34.320514] ? do_syscall_64+0x4c/0x640 [ 34.324462] ? SyS_open+0x30/0x30 [ 34.327902] do_syscall_64+0x1d5/0x640 [ 34.331768] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 34.336947] RIP: 0033:0x447369 [ 34.340107] RSP: 002b:00007f73a4f2bd98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 34.347786] RAX: ffffffffffffffda RBX: 00000000006dec58 RCX: 0000000000447369 [ 34.355037] RDX: 0000000000000000 RSI: 00000000200020c0 RDI: 00000000ffffff9c [ 34.362279] RBP: 00000000006dec50 R08: 00007f73a4f2c700 R09: 0000000000000000 [ 34.369549] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dec5c [ 34.376794] R13: 0000000020000000 R14: 00000000004af9e0 R15: 0000000000000001 [ 34.384499] Kernel Offset: disabled [ 34.388106] Rebooting in 86400 seconds..