INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added 'ci-upstream-net-kasan-gce-3,10.128.0.43' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program syzkaller login: [ 51.956865] dev_remove_pack: ffff8801d4330ac0 not found [ 52.015374] ================================================================== [ 52.022773] BUG: KASAN: use-after-free in fanout_demux_rollover+0x49b/0x4d0 [ 52.029840] Read of size 8 at addr ffff8801d4330a70 by task syzkaller943089/12351 [ 52.037428] [ 52.039028] CPU: 0 PID: 12351 Comm: syzkaller943089 Not tainted 4.14.0-rc1+ #48 [ 52.046445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.055765] Call Trace: [ 52.058316] [ 52.060440] dump_stack+0x194/0x257 [ 52.064041] ? arch_local_irq_restore+0x53/0x53 [ 52.068685] ? show_regs_print_info+0x65/0x65 [ 52.073165] ? fanout_demux_rollover+0x49b/0x4d0 [ 52.077904] print_address_description+0x73/0x250 [ 52.082731] ? fanout_demux_rollover+0x49b/0x4d0 [ 52.087460] kasan_report+0x24e/0x340 [ 52.091234] __asan_report_load8_noabort+0x14/0x20 [ 52.096136] fanout_demux_rollover+0x49b/0x4d0 [ 52.100686] ? skb_split+0x1310/0x1310 [ 52.104563] packet_rcv_fanout+0x52e/0x7d0 [ 52.108773] ? compat_packet_setsockopt+0x140/0x140 [ 52.113772] ? refcount_add+0x60/0x60 [ 52.117541] ? packet_rcv_fanout+0x7d0/0x7d0 [ 52.121932] __netif_receive_skb_core+0xc12/0x33d0 [ 52.126832] ? __bpf_address_lookup+0x2b0/0x2b0 [ 52.131484] ? nf_ingress+0x9f0/0x9f0 [ 52.135256] ? unwind_dump+0x4c0/0x4c0 [ 52.139123] ? check_noncircular+0x20/0x20 [ 52.143339] ? check_noncircular+0x20/0x20 [ 52.147544] ? __kernel_text_address+0xae/0xe0 [ 52.152098] ? unwind_get_return_address+0x61/0xa0 [ 52.157003] ? __save_stack_trace+0x7e/0xd0 [ 52.161300] ? print_usage_bug+0x480/0x480 [ 52.165513] ? find_held_lock+0x39/0x1d0 [ 52.169554] ? lock_downgrade+0x990/0x990 [ 52.173671] ? __alloc_pages_nodemask+0x588/0xd80 [ 52.178496] ? lock_acquire+0x1d5/0x580 [ 52.182438] ? netif_receive_skb_internal+0x1d7/0x670 [ 52.187600] ? find_held_lock+0x39/0x1d0 [ 52.191642] ? pvclock_read_flags+0x160/0x160 [ 52.196108] ? mark_held_locks+0xb2/0x100 [ 52.200231] ? lock_acquire+0x1d5/0x580 [ 52.204174] ? netif_receive_skb_internal+0xa2/0x670 [ 52.209248] ? ktime_get_with_offset+0x2c1/0x420 [ 52.213981] ? lock_release+0xd70/0xd70 [ 52.217922] ? ktime_get+0x3a0/0x3a0 [ 52.221618] __netif_receive_skb+0x2c/0x1b0 [ 52.225906] ? __netif_receive_skb+0x2c/0x1b0 [ 52.230373] netif_receive_skb_internal+0x10b/0x670 [ 52.235358] ? dev_cpu_dead+0xb00/0xb00 [ 52.239298] ? __alloc_pages_nodemask+0xd80/0xd80 [ 52.244111] ? net_rx_action+0x1910/0x1910 [ 52.248316] ? __lock_is_held+0xbc/0x140 [ 52.252353] ? skb_gro_reset_offset+0x17b/0x300 [ 52.257000] napi_gro_receive+0x3d0/0x500 [ 52.261120] ? dev_gro_receive+0x19b0/0x19b0 [ 52.265501] ? eth_type_trans+0x2a3/0x650 [ 52.269618] ? eth_gro_receive+0x810/0x810 [ 52.273834] receive_buf+0xcc5/0x51f0 [ 52.277602] ? unwind_next_frame.part.6+0x1ae/0xc70 [ 52.282588] ? unwind_dump+0x4c0/0x4c0 [ 52.286452] ? virtnet_set_rx_mode+0x9f0/0x9f0 [ 52.291017] ? unwind_get_return_address+0x61/0xa0 [ 52.295919] ? __save_stack_trace+0x61/0xd0 [ 52.300213] ? check_noncircular+0x20/0x20 [ 52.304417] ? rcu_report_qs_rnp+0x613/0x880 [ 52.308801] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 52.313970] ? find_held_lock+0x39/0x1d0 [ 52.318002] ? find_held_lock+0x39/0x1d0 [ 52.322043] ? lock_downgrade+0x990/0x990 [ 52.326162] ? check_noncircular+0x20/0x20 [ 52.330369] ? check_noncircular+0x20/0x20 [ 52.334576] ? pvclock_read_flags+0x160/0x160 [ 52.339044] ? do_raw_spin_trylock+0x190/0x190 [ 52.343599] ? print_usage_bug+0x480/0x480 [ 52.347806] ? _raw_spin_unlock_irqrestore+0x31/0xba [ 52.352879] ? trace_hardirqs_on_caller+0x19e/0x5c0 [ 52.357867] ? trace_hardirqs_on+0xd/0x10 [ 52.361988] ? update_blocked_averages+0x154f/0x4a30 [ 52.367065] ? smp_apic_timer_interrupt+0x177/0x710 [ 52.372064] ? print_usage_bug+0x480/0x480 [ 52.376274] ? dequeue_task_fair+0x68b0/0x68b0 [ 52.380827] ? unwind_next_frame.part.6+0x1ae/0xc70 [ 52.385812] ? unwind_dump+0x4c0/0x4c0 [ 52.389680] ? __lock_acquire+0x732/0x4620 [ 52.393893] ? __unwind_start+0x169/0x330 [ 52.398022] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 52.403194] ? __lock_acquire+0x732/0x4620 [ 52.407399] ? save_stack_trace+0x16/0x20 [ 52.411518] ? __lock_acquire+0x20fd/0x4620 [ 52.415816] ? unwind_next_frame.part.6+0x1ae/0xc70 [ 52.420804] ? unwind_dump+0x4c0/0x4c0 [ 52.424673] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 52.429836] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 52.435000] ? check_noncircular+0x20/0x20 [ 52.439207] ? check_noncircular+0x20/0x20 [ 52.443410] ? __unwind_start+0x169/0x330 [ 52.447529] ? print_usage_bug+0x480/0x480 [ 52.451733] ? unwind_get_return_address+0x61/0xa0 [ 52.456632] ? __save_stack_trace+0x61/0xd0 [ 52.460935] ? check_noncircular+0x20/0x20 [ 52.465145] ? vring_use_dma_api+0x7f/0xa0 [ 52.469349] ? vring_unmap_one+0x49/0x3d0 [ 52.473468] ? detach_buf+0x463/0x6a0 [ 52.477236] ? print_usage_bug+0x480/0x480 [ 52.481449] ? virtqueue_get_buf_ctx+0x3b1/0x8b0 [ 52.486175] ? common_interrupt+0x9d/0x9d [ 52.490298] ? detach_buf+0x6a0/0x6a0 [ 52.494074] ? unwind_next_frame.part.6+0x1ae/0xc70 [ 52.499067] virtnet_poll+0x304/0xad0 [ 52.502846] ? receive_buf+0x51f0/0x51f0 [ 52.506880] ? unwind_dump+0x4c0/0x4c0 [ 52.510746] ? mark_held_locks+0xb2/0x100 [ 52.514865] ? net_rx_action+0x49b/0x1910 [ 52.518991] net_rx_action+0x792/0x1910 [ 52.522955] ? napi_complete_done+0x6c0/0x6c0 [ 52.527421] ? save_stack_trace+0x16/0x20 [ 52.531539] ? __lock_acquire+0x20fd/0x4620 [ 52.535835] ? rcu_pm_notify+0xc0/0xc0 [ 52.539701] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 52.544869] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 52.550046] ? __lock_is_held+0xbc/0x140 [ 52.554089] ? rcu_read_lock_sched_held+0x108/0x120 [ 52.559077] ? __raise_softirq_irqoff+0x21c/0x2c0 [ 52.563891] ? raise_softirq+0x490/0x490 [ 52.567924] ? run_rebalance_domains+0x383/0x780 [ 52.572653] ? print_usage_bug+0x480/0x480 [ 52.576869] ? trace_hardirqs_off+0xd/0x10 [ 52.581073] ? __napi_schedule+0x25e/0x370 [ 52.585280] ? netdev_info+0x170/0x170 [ 52.589134] ? check_noncircular+0x20/0x20 [ 52.593335] ? rcu_pm_notify+0xc0/0xc0 [ 52.597191] ? check_noncircular+0x20/0x20 [ 52.601395] ? __lock_is_held+0xbc/0x140 [ 52.605434] ? rcu_read_lock_sched_held+0x108/0x120 [ 52.610420] ? __handle_irq_event_percpu+0x308/0x9d0 [ 52.615497] ? __lock_is_held+0xbc/0x140 [ 52.619541] __do_softirq+0x2bb/0xbd0 [ 52.623321] ? __softirqentry_text_start+0x8/0x8 [ 52.628047] ? do_raw_spin_trylock+0x190/0x190 [ 52.632598] ? handle_irq_event_percpu+0x141/0x1b0 [ 52.637496] ? __handle_irq_event_percpu+0x9d0/0x9d0 [ 52.642575] ? _raw_spin_lock+0x32/0x40 [ 52.646520] ? _raw_spin_unlock+0x22/0x30 [ 52.650635] ? handle_edge_irq+0x2b4/0x7c0 [ 52.654848] irq_exit+0x1d3/0x210 [ 52.658268] do_IRQ+0xf6/0x190 [ 52.661434] common_interrupt+0x9d/0x9d [ 52.665373] [ 52.667581] RIP: 0010:kasan_unpoison_shadow+0x35/0x50 [ 52.672735] RSP: 0000:ffff8801d3cb7138 EFLAGS: 00000206 ORIG_RAX: ffffffffffffff6e [ 52.680413] RAX: ffffed0037df4000 RBX: ffffed0037df4200 RCX: 0000000000000000 [ 52.687652] RDX: 0000000000000200 RSI: 0000000000000000 RDI: ffffed0037df4200 [ 52.694894] RBP: ffff8801d3cb7148 R08: 0000000000100000 R09: ffffed0037df4000 [ 52.702132] R10: 0000000000000000 R11: ffffea0006fbe800 R12: 0000000000001000 [ 52.709369] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8801d3cb7828 [ 52.716627] ? kasan_unpoison_shadow+0x35/0x50 [ 52.721180] kasan_alloc_pages+0x38/0x40 [ 52.725212] get_page_from_freelist+0x20a9/0x3430 [ 52.730036] ? __do_page_fault+0x4f6/0xb60 [ 52.734243] ? save_stack_trace+0x16/0x20 [ 52.738358] ? __lock_acquire+0x20fd/0x4620 [ 52.742656] ? __isolate_free_page+0x8a0/0x8a0 [ 52.747217] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 52.752380] ? do_page_fault+0xee/0x720 [ 52.756325] ? save_stack_trace+0x16/0x20 [ 52.760443] ? __lock_acquire+0x20fd/0x4620 [ 52.764741] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 52.769900] ? find_held_lock+0x39/0x1d0 [ 52.773941] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 52.779105] ? lock_downgrade+0x990/0x990 [ 52.783229] ? bpf_prog_alloc+0x310/0x310 [ 52.787347] ? __bpf_address_lookup+0x2b0/0x2b0 [ 52.791993] ? lock_release+0xd70/0xd70 [ 52.795940] ? __free_insn_slot+0x5c0/0x5c0 [ 52.800233] ? check_noncircular+0x20/0x20 [ 52.804442] ? rb_insert_color_cached+0x1660/0x1660 [ 52.809428] ? is_bpf_text_address+0xa4/0x120 [ 52.813902] ? __kernel_text_address+0xae/0xe0 [ 52.818458] ? unwind_get_return_address+0x61/0xa0 [ 52.823356] ? check_noncircular+0x20/0x20 [ 52.827563] ? find_held_lock+0x39/0x1d0 [ 52.831604] ? lock_downgrade+0x990/0x990 [ 52.835721] ? save_stack+0x43/0xd0 [ 52.839320] ? __lock_is_held+0xbc/0x140 [ 52.843363] ? check_same_owner+0x320/0x320 [ 52.847664] ? __might_sleep+0x95/0x190 [ 52.851611] __alloc_pages_nodemask+0x588/0xd80 [ 52.856250] ? __anon_vma_prepare+0x13e/0x6b0 [ 52.860717] ? __alloc_pages_slowpath+0x2ed0/0x2ed0 [ 52.865704] ? do_raw_spin_trylock+0x190/0x190 [ 52.870255] ? __might_sleep+0x95/0x190 [ 52.874202] ? up_write+0x6b/0x120 [ 52.877713] ? up_read+0x40/0x40 [ 52.881051] ? anon_vma_interval_tree_insert+0x23f/0x2d0 [ 52.886478] ? __anon_vma_prepare+0x34f/0x6b0 [ 52.890948] ? lockdep_init_map+0x3d/0x70 [ 52.895073] alloc_pages_vma+0xc8/0x4b0 [ 52.899023] __handle_mm_fault+0x24fd/0x39c0 [ 52.903406] ? __pmd_alloc+0x4e0/0x4e0 [ 52.907272] ? lock_downgrade+0x990/0x990 [ 52.911394] ? __lock_is_held+0xbc/0x140 [ 52.915452] handle_mm_fault+0x334/0x8d0 [ 52.919480] ? down_read_trylock+0xdb/0x170 [ 52.923770] ? __do_page_fault+0x2b8/0xb60 [ 52.927974] ? __handle_mm_fault+0x39c0/0x39c0 [ 52.932523] ? vmacache_find+0x61/0x270 [ 52.936466] ? vmacache_update+0xfe/0x130 [ 52.940583] ? find_vma+0x30/0x150 [ 52.944098] __do_page_fault+0x4f6/0xb60 [ 52.948136] do_page_fault+0xee/0x720 [ 52.951909] ? __do_page_fault+0xb60/0xb60 [ 52.956121] ? SyS_mmap_pgoff+0x243/0x5f0 [ 52.960242] ? entry_SYSCALL_64_fastpath+0x4b/0xbe [ 52.965147] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 52.969964] page_fault+0x22/0x30 [ 52.973384] RIP: 0033:0x4030ef [ 52.976541] RSP: 002b:00007ffc704557a0 EFLAGS: 00010206 [ 52.981878] RAX: 00007f0d7a019000 RBX: 0000000000800000 RCX: 0000000000445c9a [ 52.989119] RDX: 0000000000801000 RSI: 0000000000801000 RDI: 0000000000000000 [ 52.996357] RBP: 00007ffc70455880 R08: ffffffffffffffff R09: 0000000000000000 [ 53.003600] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc70455810 [ 53.010839] R13: 00007f0d7a819700 R14: 0000000000000000 R15: 0000000000000000 [ 53.018096]