IPVS: ftp: loaded support on port[0] = 21 input: syz1 as /devices/virtual/input/input1765 WARNING: CPU: 1 PID: 5505 at mm/slab_common.c:1031 kmalloc_slab+0x56/0x70 mm/slab_common.c:1031 kobject: 'ip_vti0' (0000000063566ac3): kobject_add_internal: parent: 'net', set: 'devices' Kernel panic - not syncing: panic_on_warn set ... CPU: 1 PID: 5505 Comm: syz-executor1 Not tainted 4.19.0-rc7+ #56 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 kobject: 'ip_vti0' (0000000063566ac3): kobject_uevent_env Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1c4/0x2b4 lib/dump_stack.c:113 panic+0x238/0x4e7 kernel/panic.c:184 kobject: 'ip_vti0' (0000000063566ac3): fill_kobj_path: path = '/devices/virtual/net/ip_vti0' __warn.cold.8+0x163/0x1ba kernel/panic.c:536 report_bug+0x254/0x2d0 lib/bug.c:186 fixup_bug arch/x86/kernel/traps.c:178 [inline] do_error_trap+0x1fc/0x4d0 arch/x86/kernel/traps.c:296 kobject: 'event4' (00000000bcedb2e8): kobject_cleanup, parent (null) do_invalid_op+0x1b/0x20 arch/x86/kernel/traps.c:316 invalid_op+0x14/0x20 arch/x86/entry/entry_64.S:993 RIP: 0010:kmalloc_slab+0x56/0x70 mm/slab_common.c:1031 kobject: 'event4' (00000000bcedb2e8): calling ktype release Code: c5 60 ab 00 89 5d c3 48 85 ff b8 10 00 00 00 74 f4 83 ef 01 c1 ef 03 0f b6 87 80 aa 00 89 eb d8 31 c0 81 e6 00 02 00 00 75 db <0f> 0b 5d c3 48 8b 04 c5 a0 aa 00 89 5d c3 66 90 66 2e 0f 1f 84 00 RSP: 0018:ffff8801830f7980 EFLAGS: 00010246 kobject: 'queues' (00000000db0532cb): kobject_add_internal: parent: 'ip_vti0', set: '' RAX: 0000000000000000 RBX: 0000040000000449 RCX: ffffc90003e86000 RDX: 000000000001226e RSI: 0000000000000000 RDI: 0000040000000449 RBP: ffff8801830f7980 R08: ffff880180e56700 R09: fffffbfff12e13a4 R10: fffffbfff12e13a4 R11: ffffffff89709d23 R12: fffffffffffffff4 R13: ffff8801ca2d7280 R14: ffff8801ca2d7280 R15: 0000000000608040 __do_kmalloc mm/slab.c:3713 [inline] __kmalloc+0x25/0x760 mm/slab.c:3727 kobject: 'queues' (00000000db0532cb): kobject_uevent_env kmalloc include/linux/slab.h:518 [inline] kzalloc include/linux/slab.h:707 [inline] __v9fs_get_acl+0xc5/0x170 fs/9p/acl.c:36 kobject: 'queues' (00000000db0532cb): kobject_uevent_env: filter function caused the event to drop! v9fs_get_acl+0xe5/0x2a0 fs/9p/acl.c:70 kobject: 'event4': free name v9fs_mount+0x636/0x8f0 fs/9p/vfs_super.c:191 mount_fs+0xae/0x31d fs/super.c:1261 vfs_kern_mount.part.35+0xdc/0x4f0 fs/namespace.c:961 kobject: 'event4' (000000000a6e285c): kobject_add_internal: parent: 'input1765', set: 'devices' vfs_kern_mount fs/namespace.c:951 [inline] do_new_mount fs/namespace.c:2457 [inline] do_mount+0x581/0x31f0 fs/namespace.c:2787 kobject: 'rx-0' (00000000e7cad274): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'input1764' (00000000cafff815): kobject_uevent_env ksys_mount+0x12d/0x140 fs/namespace.c:3003 __do_sys_mount fs/namespace.c:3017 [inline] __se_sys_mount fs/namespace.c:3014 [inline] __x64_sys_mount+0xbe/0x150 fs/namespace.c:3014 kobject: 'rx-0' (00000000e7cad274): kobject_uevent_env do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290 kobject: 'input1764' (00000000cafff815): fill_kobj_path: path = '/devices/virtual/input/input1764' kobject: 'rx-0' (00000000e7cad274): fill_kobj_path: path = '/devices/virtual/net/ip_vti0/queues/rx-0' kobject: 'tx-0' (0000000050ec203a): kobject_add_internal: parent: 'queues', set: 'queues' entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x457519 Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f93aa992c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000457519 RDX: 00000000200003c0 RSI: 0000000020000000 RDI: 0000000000000000 RBP: 000000000072bf00 R08: 00000000200004c0 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f93aa9936d4 kobject: 'input1764' (00000000cafff815): kobject_cleanup, parent (null) R13: 00000000004c2854 R14: 00000000004d3c30 R15: 00000000ffffffff Kernel Offset: disabled Rebooting in 86400 seconds..