Warning: Permanently added '10.128.0.152' (ECDSA) to the list of known hosts. syzkaller login: [ 71.413239][ T8850] IPVS: ftp: loaded support on port[0] = 21 [ 71.414907][ T8851] IPVS: ftp: loaded support on port[0] = 21 [ 71.433346][ T8854] IPVS: ftp: loaded support on port[0] = 21 [ 71.433628][ T8849] IPVS: ftp: loaded support on port[0] = 21 [ 71.455181][ T8852] IPVS: ftp: loaded support on port[0] = 21 [ 71.466193][ T8853] IPVS: ftp: loaded support on port[0] = 21 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 71.925320][ T8949] ------------[ cut here ]------------ [ 71.934957][ T8949] refcount_t: increment on 0; use-after-free. [ 71.941980][ T8949] WARNING: CPU: 0 PID: 8949 at lib/refcount.c:156 refcount_inc_checked+0x61/0x70 [ 71.951259][ T8949] Kernel panic - not syncing: panic_on_warn set ... [ 71.958134][ T8949] CPU: 0 PID: 8949 Comm: syz-executor118 Not tainted 5.2.0-rc7+ #67 [ 71.966192][ T8949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.976231][ T8949] Call Trace: [ 71.979521][ T8949] dump_stack+0x172/0x1f0 [ 71.983931][ T8949] ? refcount_inc_not_zero_checked+0x1b0/0x200 [ 71.990117][ T8949] panic+0x2cb/0x744 [ 71.994228][ T8949] ? __warn_printk+0xf3/0xf3 [ 71.998926][ T8949] ? refcount_inc_checked+0x61/0x70 [ 72.004146][ T8949] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 72.010387][ T8949] ? __warn.cold+0x5/0x4d [ 72.014780][ T8949] ? __warn+0xe8/0x1d0 [ 72.018850][ T8949] ? refcount_inc_checked+0x61/0x70 [ 72.024050][ T8949] __warn.cold+0x20/0x4d [ 72.028381][ T8949] ? refcount_inc_checked+0x61/0x70 [ 72.033679][ T8949] report_bug+0x263/0x2b0 [ 72.038011][ T8949] do_error_trap+0x11b/0x200 [ 72.042602][ T8949] do_invalid_op+0x37/0x50 [ 72.047103][ T8949] ? refcount_inc_checked+0x61/0x70 [ 72.052408][ T8949] invalid_op+0x14/0x20 [ 72.056550][ T8949] RIP: 0010:refcount_inc_checked+0x61/0x70 [ 72.062340][ T8949] Code: 1d fe 59 48 06 31 ff 89 de e8 fb 52 3c fe 84 db 75 dd e8 b2 51 3c fe 48 c7 c7 20 9d a4 87 c6 05 de 59 48 06 01 e8 cd 8a 0e fe <0f> 0b eb c1 90 90 90 90 90 90 90 90 90 90 90 55 48 89 e5 41 57 41 [ 72.082053][ T8949] RSP: 0018:ffff888096c3f8f8 EFLAGS: 00010286 [ 72.088118][ T8949] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 72.096070][ T8949] RDX: 0000000000000000 RSI: ffffffff815adb46 RDI: ffffed1012d87f11 [ 72.104075][ T8949] RBP: ffff888096c3f908 R08: ffff8880a0432240 R09: ffffed1015d060a1 [ 72.112045][ T8949] R10: ffffed1015d060a0 R11: ffff8880ae830507 R12: ffff88821adfb0b8 [ 72.120017][ T8949] R13: ffff8880929783a0 R14: ffff888092978398 R15: ffff88821adfb038 [ 72.127993][ T8949] ? vprintk_func+0x86/0x189 [ 72.132581][ T8949] ? refcount_inc_checked+0x61/0x70 [ 72.137772][ T8949] kobject_get+0x66/0xc0 [ 72.142168][ T8949] kobject_add_internal+0x14f/0x380 [ 72.147366][ T8949] ? kfree_const+0x5e/0x70 [ 72.151870][ T8949] kobject_add+0x150/0x1c0 [ 72.156315][ T8949] ? kset_create_and_add+0x1a0/0x1a0 [ 72.161599][ T8949] ? get_device_parent.isra.0+0x34c/0x560 [ 72.167418][ T8949] ? rcu_read_lock_sched_held+0x110/0x130 [ 72.173139][ T8949] ? kmem_cache_alloc_trace+0x351/0x750 [ 72.179155][ T8949] get_device_parent.isra.0+0x413/0x560 [ 72.184705][ T8949] device_add+0x2df/0x17a0 [ 72.189149][ T8949] ? get_device_parent.isra.0+0x560/0x560 [ 72.194860][ T8949] ? up_write+0xbe/0x1e0 [ 72.199102][ T8949] hci_register_dev+0x2e8/0x860 [ 72.203961][ T8949] __vhci_create_device+0x2d0/0x5a0 [ 72.209154][ T8949] vhci_write+0x2d0/0x470 [ 72.213470][ T8949] new_sync_write+0x4d3/0x770 [ 72.218133][ T8949] ? new_sync_read+0x800/0x800 [ 72.223030][ T8949] ? common_file_perm+0x238/0x720 [ 72.228045][ T8949] ? __fget+0x381/0x550 [ 72.232190][ T8949] ? apparmor_file_permission+0x25/0x30 [ 72.237730][ T8949] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 72.243994][ T8949] ? security_file_permission+0x8f/0x380 [ 72.249616][ T8949] ? putname+0xef/0x130 [ 72.253769][ T8949] __vfs_write+0xe1/0x110 [ 72.258088][ T8949] vfs_write+0x20c/0x580 [ 72.262456][ T8949] ksys_write+0x14f/0x290 [ 72.266772][ T8949] ? __ia32_sys_read+0xb0/0xb0 [ 72.271524][ T8949] ? do_syscall_64+0x26/0x680 [ 72.276189][ T8949] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 72.282246][ T8949] ? do_syscall_64+0x26/0x680 [ 72.286954][ T8949] __x64_sys_write+0x73/0xb0 [ 72.291539][ T8949] do_syscall_64+0xfd/0x680 [ 72.296034][ T8949] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 72.301913][ T8949] RIP: 0033:0x447119 [ 72.305855][ T8949] Code: e8 1c e6 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 8b 06 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 72.325490][ T8949] RSP: 002b:00007f200baf3db8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 72.333933][ T8949] RAX: ffffffffffffffda RBX: 00000000006f0028 RCX: 0000000000447119 [ 72.341900][ T8949] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000003 [ 72.349871][ T8949] RBP: 00000000006f0020 R08: 0000000000000000 R09: 0000000000000000 [ 72.357911][ T8949] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006f002c [ 72.366003][ T8949] R13: 00000000007ffcff R14: 00007f200baf49c0 R15: 20c49ba5e353f7cf [ 72.375307][ T8949] Kernel Offset: disabled [ 72.379688][ T8949] Rebooting in 86400 seconds..