8021q: adding VLAN 0 to HW filter on device team0
8021q: adding VLAN 0 to HW filter on device team0
==================================================================
BUG: KASAN: use-after-free in get_link fs/namei.c:1048 [inline] at addr ffff88005d723540
BUG: KASAN: use-after-free in trailing_symlink+0x768/0x780 fs/namei.c:2241 at addr ffff88005d723540
Read of size 1 by task syz-executor0/14737
CPU: 1 PID: 14737 Comm: syz-executor0 Not tainted 4.9.0-rc3+ #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014
 ffff88004c7afaa8 ffffffff82aa3bb6 ffff88006c000100 ffff88005d723540
 ffff88005d723560 ffff88004c7afc88 ffff88004c7afad0 ffffffff8177725c
 ffff88004c7afb60 ffff88005d723540 ffff88004c7afca8 ffff88004c7afb50
Call Trace:
 [<ffffffff82aa3bb6>] __dump_stack lib/dump_stack.c:15 [inline]
 [<ffffffff82aa3bb6>] dump_stack+0xe6/0x120 lib/dump_stack.c:51
 [<ffffffff8177725c>] kasan_object_err+0x1c/0x70 mm/kasan/report.c:156
 [<ffffffff817774b0>] print_address_description mm/kasan/report.c:194 [inline]
 [<ffffffff817774b0>] kasan_report_error+0x1b0/0x480 mm/kasan/report.c:283
 [<ffffffff817777be>] kasan_report mm/kasan/report.c:303 [inline]
 [<ffffffff817777be>] __asan_report_load1_noabort+0x3e/0x40 mm/kasan/report.c:321
 [<ffffffff817fd618>] get_link fs/namei.c:1048 [inline]
 [<ffffffff817fd618>] trailing_symlink+0x768/0x780 fs/namei.c:2241
 [<ffffffff8180385c>] path_lookupat+0x13c/0x410 fs/namei.c:2269
 [<ffffffff818078e6>] filename_lookup+0x166/0x350 fs/namei.c:2302
 [<ffffffff81807bd1>] user_path_at_empty+0x31/0x40 fs/namei.c:2556
 [<ffffffff8183f81c>] user_path include/linux/namei.h:60 [inline]
 [<ffffffff8183f81c>] do_mount+0xfc/0x2a90 fs/namespace.c:2703
 [<ffffffff81842df0>] SYSC_mount fs/namespace.c:2974 [inline]
 [<ffffffff81842df0>] SyS_mount+0x90/0xd0 fs/namespace.c:2951
 [<ffffffff859ffd85>] entry_SYSCALL_64_fastpath+0x23/0xc6
Object at ffff88005d723540, in cache kmalloc-32 size: 32
Allocated:
PID = 14740
 [  131.893001] [<ffffffff81216576>] save_stack_trace+0x16/0x20 arch/x86/kernel/stacktrace.c:57
 [  131.895270] [<ffffffff81776626>] save_stack+0x46/0xd0 mm/kasan/kasan.c:495
 [  131.897378] [<ffffffff8177689d>] set_track mm/kasan/kasan.c:507 [inline]
 [  131.897378] [<ffffffff8177689d>] kasan_kmalloc+0xad/0xe0 mm/kasan/kasan.c:598
 [  131.899042] [<ffffffff81771015>] __do_kmalloc mm/slab.c:3733 [inline]
 [  131.899042] [<ffffffff81771015>] __kmalloc_track_caller+0x185/0x760 mm/slab.c:3748
 [  131.900910] [<ffffffff816b5f2c>] kstrdup+0x2c/0x50 mm/util.c:53
 [  131.902870] [<ffffffff815fea10>] bpf_symlink+0x20/0x110 kernel/bpf/inode.c:198
 [  131.904836] [<ffffffff817f712e>] vfs_symlink+0x31e/0x520 fs/namei.c:4085
 [  131.906366] [<ffffffff8180a875>] SYSC_symlinkat fs/namei.c:4112 [inline]
 [  131.906366] [<ffffffff8180a875>] SyS_symlinkat fs/namei.c:4092 [inline]
 [  131.906366] [<ffffffff8180a875>] SYSC_symlink fs/namei.c:4125 [inline]
 [  131.906366] [<ffffffff8180a875>] SyS_symlink+0x165/0x1d0 fs/namei.c:4123
 [  131.908548] [<ffffffff859ffd85>] entry_SYSCALL_64_fastpath+0x23/0xc6
Freed:
PID = 14741
 [  131.911046] [<ffffffff81216576>] save_stack_trace+0x16/0x20 arch/x86/kernel/stacktrace.c:57
 [  131.912321] [<ffffffff81776626>] save_stack+0x46/0xd0 mm/kasan/kasan.c:495
 [  131.914228] [<ffffffff81776e80>] set_track mm/kasan/kasan.c:507 [inline]
 [  131.914228] [<ffffffff81776e80>] kasan_slab_free+0x70/0xb0 mm/kasan/kasan.c:571
 [  131.916273] [<ffffffff81774bdf>] __cache_free mm/slab.c:3511 [inline]
 [  131.916273] [<ffffffff81774bdf>] kfree+0xcf/0x2c0 mm/slab.c:3828
 [  131.918108] [<ffffffff815fec28>] bpf_evict_inode+0xe8/0x120 kernel/bpf/inode.c:359
 [  131.919749] [<ffffffff8182a8b3>] evict+0x203/0x470 fs/inode.c:553
 [  131.920913] [<ffffffff8182b18b>] iput_final fs/inode.c:1515 [inline]
 [  131.920913] [<ffffffff8182b18b>] iput+0x56b/0x880 fs/inode.c:1542
 [  131.922046] [<ffffffff81808a0b>] do_unlinkat+0x30b/0x640 fs/namei.c:4027
 [  131.923335] [<ffffffff8180a531>] SYSC_unlink fs/namei.c:4068 [inline]
 [  131.923335] [<ffffffff8180a531>] SyS_unlink+0x11/0x20 fs/namei.c:4066
 [  131.924531] [<ffffffff859ffd85>] entry_SYSCALL_64_fastpath+0x23/0xc6
Memory state around the buggy address:
 ffff88005d723400: 00 01 fc fc fc fc fc fc fb fb fb fb fc fc fc fc
 ffff88005d723480: 00 00 01 fc fc fc fc fc 00 00 01 fc fc fc fc fc
>ffff88005d723500: 00 02 fc fc fc fc fc fc fb fb fb fb fc fc fc fc
                                           ^
 ffff88005d723580: 00 fc fc fc fc fc fc fc fb fb fb fb fc fc fc fc
 ffff88005d723600: fb fb fb fb fc fc fc fc 00 00 01 fc fc fc fc fc
==================================================================
==================================================================
BUG: KASAN: use-after-free in link_path_walk+0x1438/0x1760 fs/namei.c:2043 at addr ffff88005d723540
Read of size 1 by task syz-executor0/14737
CPU: 1 PID: 14737 Comm: syz-executor0 Tainted: G    B           4.9.0-rc3+ #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014
 ffff88004c7afa00 ffffffff82aa3bb6 ffff88006c000100 ffff88005d723540
 ffff88005d723560 ffff88004c7afc94 ffff88004c7afa28 ffffffff8177725c
 ffff88004c7afab8 ffff88005d723540 ffffed00098f5f92 ffff88004c7afaa8
Call Trace:
 [<ffffffff82aa3bb6>] __dump_stack lib/dump_stack.c:15 [inline]
 [<ffffffff82aa3bb6>] dump_stack+0xe6/0x120 lib/dump_stack.c:51
 [<ffffffff8177725c>] kasan_object_err+0x1c/0x70 mm/kasan/report.c:156
 [<ffffffff817774b0>] print_address_description mm/kasan/report.c:194 [inline]
 [<ffffffff817774b0>] kasan_report_error+0x1b0/0x480 mm/kasan/report.c:283
 [<ffffffff817777be>] kasan_report mm/kasan/report.c:303 [inline]
 [<ffffffff817777be>] __asan_report_load1_noabort+0x3e/0x40 mm/kasan/report.c:321
 [<ffffffff818032f8>] link_path_walk+0x1438/0x1760 fs/namei.c:2043
 [<ffffffff8180386f>] path_lookupat+0x14f/0x410 fs/namei.c:2267
 [<ffffffff818078e6>] filename_lookup+0x166/0x350 fs/namei.c:2302
 [<ffffffff81807bd1>] user_path_at_empty+0x31/0x40 fs/namei.c:2556
 [<ffffffff8183f81c>] user_path include/linux/namei.h:60 [inline]
 [<ffffffff8183f81c>] do_mount+0xfc/0x2a90 fs/namespace.c:2703
 [<ffffffff81842df0>] SYSC_mount fs/namespace.c:2974 [inline]
 [<ffffffff81842df0>] SyS_mount+0x90/0xd0 fs/namespace.c:2951
 [<ffffffff859ffd85>] entry_SYSCALL_64_fastpath+0x23/0xc6
Object at ffff88005d723540, in cache kmalloc-32 size: 32
Allocated:
PID = 14740
 [  131.999713] [<ffffffff81216576>] save_stack_trace+0x16/0x20 arch/x86/kernel/stacktrace.c:57
 [  132.001909] [<ffffffff81776626>] save_stack+0x46/0xd0 mm/kasan/kasan.c:495
 [  132.003934] [<ffffffff8177689d>] set_track mm/kasan/kasan.c:507 [inline]
 [  132.003934] [<ffffffff8177689d>] kasan_kmalloc+0xad/0xe0 mm/kasan/kasan.c:598
 [  132.006110] [<ffffffff81771015>] __do_kmalloc mm/slab.c:3733 [inline]
 [  132.006110] [<ffffffff81771015>] __kmalloc_track_caller+0x185/0x760 mm/slab.c:3748
 [  132.008539] [<ffffffff816b5f2c>] kstrdup+0x2c/0x50 mm/util.c:53
 [  132.010462] [<ffffffff815fea10>] bpf_symlink+0x20/0x110 kernel/bpf/inode.c:198
 [  132.013007] [<ffffffff817f712e>] vfs_symlink+0x31e/0x520 fs/namei.c:4085
 [  132.015107] [<ffffffff8180a875>] SYSC_symlinkat fs/namei.c:4112 [inline]
 [  132.015107] [<ffffffff8180a875>] SyS_symlinkat fs/namei.c:4092 [inline]
 [  132.015107] [<ffffffff8180a875>] SYSC_symlink fs/namei.c:4125 [inline]
 [  132.015107] [<ffffffff8180a875>] SyS_symlink+0x165/0x1d0 fs/namei.c:4123
 [  132.017262] [<ffffffff859ffd85>] entry_SYSCALL_64_fastpath+0x23/0xc6
Freed:
PID = 14741
 [  132.020282] [<ffffffff81216576>] save_stack_trace+0x16/0x20 arch/x86/kernel/stacktrace.c:57
 [  132.021597] [<ffffffff81776626>] save_stack+0x46/0xd0 mm/kasan/kasan.c:495
 [  132.023107] [<ffffffff81776e80>] set_track mm/kasan/kasan.c:507 [inline]
 [  132.023107] [<ffffffff81776e80>] kasan_slab_free+0x70/0xb0 mm/kasan/kasan.c:571
 [  132.024458] [<ffffffff81774bdf>] __cache_free mm/slab.c:3511 [inline]
 [  132.024458] [<ffffffff81774bdf>] kfree+0xcf/0x2c0 mm/slab.c:3828
 [  132.025949] [<ffffffff815fec28>] bpf_evict_inode+0xe8/0x120 kernel/bpf/inode.c:359
 [  132.027619] [<ffffffff8182a8b3>] evict+0x203/0x470 fs/inode.c:553
 [  132.028765] [<ffffffff8182b18b>] iput_final fs/inode.c:1515 [inline]
 [  132.028765] [<ffffffff8182b18b>] iput+0x56b/0x880 fs/inode.c:1542
 [  132.029832] [<ffffffff81808a0b>] do_unlinkat+0x30b/0x640 fs/namei.c:4027
 [  132.031058] [<ffffffff8180a531>] SYSC_unlink fs/namei.c:4068 [inline]
 [  132.031058] [<ffffffff8180a531>] SyS_unlink+0x11/0x20 fs/namei.c:4066
 [  132.032322] [<ffffffff859ffd85>] entry_SYSCALL_64_fastpath+0x23/0xc6
Memory state around the buggy address:
 ffff88005d723400: 00 01 fc fc fc fc fc fc fb fb fb fb fc fc fc fc
 ffff88005d723480: 00 00 01 fc fc fc fc fc 00 00 01 fc fc fc fc fc
>ffff88005d723500: 00 02 fc fc fc fc fc fc fb fb fb fb fc fc fc fc
                                           ^
 ffff88005d723580: 00 fc fc fc fc fc fc fc fb fb fb fb fc fc fc fc
 ffff88005d723600: fb fb fb fb fc fc fc fc 00 00 01 fc fc fc fc fc
==================================================================
==================================================================
BUG: KASAN: use-after-free in link_path_walk+0xf7d/0x1760 fs/namei.c:2060 at addr ffff88005d723540
Read of size 1 by task syz-executor0/14737
CPU: 1 PID: 14737 Comm: syz-executor0 Tainted: G    B           4.9.0-rc3+ #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014
 ffff88004c7afa00 ffffffff82aa3bb6 ffff88006c000100 ffff88005d723540
 ffff88005d723560 fefefefefefefeff ffff88004c7afa28 ffffffff8177725c
 ffff88004c7afab8 ffff88005d723540 ffff88004a4f8580 ffff88004c7afaa8
Call Trace:
 [<ffffffff82aa3bb6>] __dump_stack lib/dump_stack.c:15 [inline]
 [<ffffffff82aa3bb6>] dump_stack+0xe6/0x120 lib/dump_stack.c:51
 [<ffffffff8177725c>] kasan_object_err+0x1c/0x70 mm/kasan/report.c:156
 [<ffffffff817774b0>] print_address_description mm/kasan/report.c:194 [inline]
 [<ffffffff817774b0>] kasan_report_error+0x1b0/0x480 mm/kasan/report.c:283
 [<ffffffff817777be>] kasan_report mm/kasan/report.c:303 [inline]
 [<ffffffff817777be>] __asan_report_load1_noabort+0x3e/0x40 mm/kasan/report.c:321
 [<ffffffff81802e3d>] link_path_walk+0xf7d/0x1760 fs/namei.c:2060
 [<ffffffff8180386f>] path_lookupat+0x14f/0x410 fs/namei.c:2267
 [<ffffffff818078e6>] filename_lookup+0x166/0x350 fs/namei.c:2302
 [<ffffffff81807bd1>] user_path_at_empty+0x31/0x40 fs/namei.c:2556
 [<ffffffff8183f81c>] user_path include/linux/namei.h:60 [inline]
 [<ffffffff8183f81c>] do_mount+0xfc/0x2a90 fs/namespace.c:2703
 [<ffffffff81842df0>] SYSC_mount fs/namespace.c:2974 [inline]
 [<ffffffff81842df0>] SyS_mount+0x90/0xd0 fs/namespace.c:2951
 [<ffffffff859ffd85>] entry_SYSCALL_64_fastpath+0x23/0xc6
Object at ffff88005d723540, in cache kmalloc-32 size: 32
Allocated:
PID = 14740
 [  132.083403] [<ffffffff81216576>] save_stack_trace+0x16/0x20 arch/x86/kernel/stacktrace.c:57
 [  132.084655] [<ffffffff81776626>] save_stack+0x46/0xd0 mm/kasan/kasan.c:495
 [  132.085867] [<ffffffff8177689d>] set_track mm/kasan/kasan.c:507 [inline]
 [  132.085867] [<ffffffff8177689d>] kasan_kmalloc+0xad/0xe0 mm/kasan/kasan.c:598
 [  132.087326] [<ffffffff81771015>] __do_kmalloc mm/slab.c:3733 [inline]
 [  132.087326] [<ffffffff81771015>] __kmalloc_track_caller+0x185/0x760 mm/slab.c:3748
 [  132.088873] [<ffffffff816b5f2c>] kstrdup+0x2c/0x50 mm/util.c:53
 [  132.089909] [<ffffffff815fea10>] bpf_symlink+0x20/0x110 kernel/bpf/inode.c:198
 [  132.091120] [<ffffffff817f712e>] vfs_symlink+0x31e/0x520 fs/namei.c:4085
 [  132.092354] [<ffffffff8180a875>] SYSC_symlinkat fs/namei.c:4112 [inline]
 [  132.092354] [<ffffffff8180a875>] SyS_symlinkat fs/namei.c:4092 [inline]
 [  132.092354] [<ffffffff8180a875>] SYSC_symlink fs/namei.c:4125 [inline]
 [  132.092354] [<ffffffff8180a875>] SyS_symlink+0x165/0x1d0 fs/namei.c:4123
 [  132.093447] [<ffffffff859ffd85>] entry_SYSCALL_64_fastpath+0x23/0xc6
Freed:
PID = 14741
 [  132.095671] [<ffffffff81216576>] save_stack_trace+0x16/0x20 arch/x86/kernel/stacktrace.c:57
 [  132.096982] [<ffffffff81776626>] save_stack+0x46/0xd0 mm/kasan/kasan.c:495
 [  132.098398] [<ffffffff81776e80>] set_track mm/kasan/kasan.c:507 [inline]
 [  132.098398] [<ffffffff81776e80>] kasan_slab_free+0x70/0xb0 mm/kasan/kasan.c:571
 [  132.100558] [<ffffffff81774bdf>] __cache_free mm/slab.c:3511 [inline]
 [  132.100558] [<ffffffff81774bdf>] kfree+0xcf/0x2c0 mm/slab.c:3828
 [  132.101788] [<ffffffff815fec28>] bpf_evict_inode+0xe8/0x120 kernel/bpf/inode.c:359
 [  132.103057] [<ffffffff8182a8b3>] evict+0x203/0x470 fs/inode.c:553
 [  132.104502] [<ffffffff8182b18b>] iput_final fs/inode.c:1515 [inline]
 [  132.104502] [<ffffffff8182b18b>] iput+0x56b/0x880 fs/inode.c:1542
 [  132.105771] [<ffffffff81808a0b>] do_unlinkat+0x30b/0x640 fs/namei.c:4027
 [  132.107200] [<ffffffff8180a531>] SYSC_unlink fs/namei.c:4068 [inline]
 [  132.107200] [<ffffffff8180a531>] SyS_unlink+0x11/0x20 fs/namei.c:4066
 [  132.108675] [<ffffffff859ffd85>] entry_SYSCALL_64_fastpath+0x23/0xc6
Memory state around the buggy address:
 ffff88005d723400: 00 01 fc fc fc fc fc fc fb fb fb fb fc fc fc fc
 ffff88005d723480: 00 00 01 fc fc fc fc fc 00 00 01 fc fc fc fc fc
>ffff88005d723500: 00 02 fc fc fc fc fc fc fb fb fb fb fc fc fc fc
                                           ^
 ffff88005d723580: 00 fc fc fc fc fc fc fc fb fb fb fb fc fc fc fc
 ffff88005d723600: fb fb fb fb fc fc fc fc 00 00 01 fc fc fc fc fc
==================================================================
==================================================================
BUG: KASAN: use-after-free in link_path_walk+0x1339/0x1760 fs/namei.c:2088 at addr ffff88005d723544
Read of size 1 by task syz-executor0/14737
CPU: 1 PID: 14737 Comm: syz-executor0 Tainted: G    B           4.9.0-rc3+ #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014
 ffff88004c7afa00 ffffffff82aa3bb6 ffff88006c000100 ffff88005d723540
 ffff88005d723560 fefefefefefefeff ffff88004c7afa28 ffffffff8177725c
 ffff88004c7afab8 ffff88005d723544 0000000000000000 ffff88004c7afaa8
Call Trace:
 [<ffffffff82aa3bb6>] __dump_stack lib/dump_stack.c:15 [inline]
 [<ffffffff82aa3bb6>] dump_stack+0xe6/0x120 lib/dump_stack.c:51
 [<ffffffff8177725c>] kasan_object_err+0x1c/0x70 mm/kasan/report.c:156
 [<ffffffff817774b0>] print_address_description mm/kasan/report.c:194 [inline]
 [<ffffffff817774b0>] kasan_report_error+0x1b0/0x480 mm/kasan/report.c:283
 [<ffffffff817777be>] kasan_report mm/kasan/report.c:303 [inline]
 [<ffffffff817777be>] __asan_report_load1_noabort+0x3e/0x40 mm/kasan/report.c:321
 [<ffffffff818031f9>] link_path_walk+0x1339/0x1760 fs/namei.c:2088
 [<ffffffff8180386f>] path_lookupat+0x14f/0x410 fs/namei.c:2267
 [<ffffffff818078e6>] filename_lookup+0x166/0x350 fs/namei.c:2302
 [<ffffffff81807bd1>] user_path_at_empty+0x31/0x40 fs/namei.c:2556
 [<ffffffff8183f81c>] user_path include/linux/namei.h:60 [inline]
 [<ffffffff8183f81c>] do_mount+0xfc/0x2a90 fs/namespace.c:2703
 [<ffffffff81842df0>] SYSC_mount fs/namespace.c:2974 [inline]
 [<ffffffff81842df0>] SyS_mount+0x90/0xd0 fs/namespace.c:2951
 [<ffffffff859ffd85>] entry_SYSCALL_64_fastpath+0x23/0xc6
Object at ffff88005d723540, in cache kmalloc-32 size: 32
Allocated:
PID = 14740
 [  132.209083] [<ffffffff81216576>] save_stack_trace+0x16/0x20 arch/x86/kernel/stacktrace.c:57
 [  132.210346] [<ffffffff81776626>] save_stack+0x46/0xd0 mm/kasan/kasan.c:495
 [  132.211537] [<ffffffff8177689d>] set_track mm/kasan/kasan.c:507 [inline]
 [  132.211537] [<ffffffff8177689d>] kasan_kmalloc+0xad/0xe0 mm/kasan/kasan.c:598
 [  132.219527] [<ffffffff81771015>] __do_kmalloc mm/slab.c:3733 [inline]
 [  132.219527] [<ffffffff81771015>] __kmalloc_track_caller+0x185/0x760 mm/slab.c:3748
 [  132.220923] [<ffffffff816b5f2c>] kstrdup+0x2c/0x50 mm/util.c:53
 [  132.222054] [<ffffffff815fea10>] bpf_symlink+0x20/0x110 kernel/bpf/inode.c:198
 [  132.223245] [<ffffffff817f712e>] vfs_symlink+0x31e/0x520 fs/namei.c:4085
 [  132.224457] [<ffffffff8180a875>] SYSC_symlinkat fs/namei.c:4112 [inline]
 [  132.224457] [<ffffffff8180a875>] SyS_symlinkat fs/namei.c:4092 [inline]
 [  132.224457] [<ffffffff8180a875>] SYSC_symlink fs/namei.c:4125 [inline]
 [  132.224457] [<ffffffff8180a875>] SyS_symlink+0x165/0x1d0 fs/namei.c:4123
 [  132.225661] [<ffffffff859ffd85>] entry_SYSCALL_64_fastpath+0x23/0xc6
Freed:
PID = 14741
 [  132.227794] [<ffffffff81216576>] save_stack_trace+0x16/0x20 arch/x86/kernel/stacktrace.c:57
 [  132.229095] [<ffffffff81776626>] save_stack+0x46/0xd0 mm/kasan/kasan.c:495
 [  132.230277] [<ffffffff81776e80>] set_track mm/kasan/kasan.c:507 [inline]
 [  132.230277] [<ffffffff81776e80>] kasan_slab_free+0x70/0xb0 mm/kasan/kasan.c:571
 [  132.231462] [<ffffffff81774bdf>] __cache_free mm/slab.c:3511 [inline]
 [  132.231462] [<ffffffff81774bdf>] kfree+0xcf/0x2c0 mm/slab.c:3828
 [  132.244875] [<ffffffff815fec28>] bpf_evict_inode+0xe8/0x120 kernel/bpf/inode.c:359
 [  132.253014] [<ffffffff8182a8b3>] evict+0x203/0x470 fs/inode.c:553
 [  132.253988] [<ffffffff8182b18b>] iput_final fs/inode.c:1515 [inline]
 [  132.253988] [<ffffffff8182b18b>] iput+0x56b/0x880 fs/inode.c:1542
 [  132.254994] [<ffffffff81808a0b>] do_unlinkat+0x30b/0x640 fs/namei.c:4027
 [  132.255997] [<ffffffff8180a531>] SYSC_unlink fs/namei.c:4068 [inline]
 [  132.255997] [<ffffffff8180a531>] SyS_unlink+0x11/0x20 fs/namei.c:4066
 [  132.257069] [<ffffffff859ffd85>] entry_SYSCALL_64_fastpath+0x23/0xc6
Memory state around the buggy address:
 ffff88005d723400: 00 01 fc fc fc fc fc fc fb fb fb fb fc fc fc fc
 ffff88005d723480: 00 00 01 fc fc fc fc fc 00 00 01 fc fc fc fc fc
>ffff88005d723500: 00 02 fc fc fc fc fc fc fb fb fb fb fc fc fc fc
                                           ^
 ffff88005d723580: 00 fc fc fc fc fc fc fc fb fb fb fb fc fc fc fc
 ffff88005d723600: fb fb fb fb fc fc fc fc 00 00 01 fc fc fc fc fc
==================================================================
==================================================================
BUG: KASAN: use-after-free in lookup_last fs/namei.c:2247 [inline] at addr ffff88005d723544
BUG: KASAN: use-after-free in path_lookupat+0x3b4/0x410 fs/namei.c:2268 at addr ffff88005d723544
Read of size 1 by task syz-executor0/14737
CPU: 1 PID: 14737 Comm: syz-executor0 Tainted: G    B           4.9.0-rc3+ #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014
 ffff88004c7afae8 ffffffff82aa3bb6 ffff88006c000100 ffff88005d723540
 ffff88005d723560 ffff88004c7afc94 ffff88004c7afb10 ffffffff8177725c
 ffff88004c7afba0 ffff88005d723544 ffffed00098f5f92 ffff88004c7afb90
Call Trace:
 [<ffffffff82aa3bb6>] __dump_stack lib/dump_stack.c:15 [inline]
 [<ffffffff82aa3bb6>] dump_stack+0xe6/0x120 lib/dump_stack.c:51
 [<ffffffff8177725c>] kasan_object_err+0x1c/0x70 mm/kasan/report.c:156
 [<ffffffff817774b0>] print_address_description mm/kasan/report.c:194 [inline]
 [<ffffffff817774b0>] kasan_report_error+0x1b0/0x480 mm/kasan/report.c:283
 [<ffffffff817777be>] kasan_report mm/kasan/report.c:303 [inline]
 [<ffffffff817777be>] __asan_report_load1_noabort+0x3e/0x40 mm/kasan/report.c:321
 [<ffffffff81803ad4>] lookup_last fs/namei.c:2247 [inline]
 [<ffffffff81803ad4>] path_lookupat+0x3b4/0x410 fs/namei.c:2268
 [<ffffffff818078e6>] filename_lookup+0x166/0x350 fs/namei.c:2302
 [<ffffffff81807bd1>] user_path_at_empty+0x31/0x40 fs/namei.c:2556
 [<ffffffff8183f81c>] user_path include/linux/namei.h:60 [inline]
 [<ffffffff8183f81c>] do_mount+0xfc/0x2a90 fs/namespace.c:2703
 [<ffffffff81842df0>] SYSC_mount fs/namespace.c:2974 [inline]
 [<ffffffff81842df0>] SyS_mount+0x90/0xd0 fs/namespace.c:2951
 [<ffffffff859ffd85>] entry_SYSCALL_64_fastpath+0x23/0xc6
Object at ffff88005d723540, in cache kmalloc-32 size: 32
Allocated:
PID = 14740
 [  132.310670] [<ffffffff81216576>] save_stack_trace+0x16/0x20 arch/x86/kernel/stacktrace.c:57
 [  132.311998] [<ffffffff81776626>] save_stack+0x46/0xd0 mm/kasan/kasan.c:495
 [  132.313212] [<ffffffff8177689d>] set_track mm/kasan/kasan.c:507 [inline]
 [  132.313212] [<ffffffff8177689d>] kasan_kmalloc+0xad/0xe0 mm/kasan/kasan.c:598
 [  132.315184] [<ffffffff81771015>] __do_kmalloc mm/slab.c:3733 [inline]
 [  132.315184] [<ffffffff81771015>] __kmalloc_track_caller+0x185/0x760 mm/slab.c:3748
 [  132.317523] [<ffffffff816b5f2c>] kstrdup+0x2c/0x50 mm/util.c:53
 [  132.319431] [<ffffffff815fea10>] bpf_symlink+0x20/0x110 kernel/bpf/inode.c:198
 [  132.320862] [<ffffffff817f712e>] vfs_symlink+0x31e/0x520 fs/namei.c:4085
 [  132.322101] [<ffffffff8180a875>] SYSC_symlinkat fs/namei.c:4112 [inline]
 [  132.322101] [<ffffffff8180a875>] SyS_symlinkat fs/namei.c:4092 [inline]
 [  132.322101] [<ffffffff8180a875>] SYSC_symlink fs/namei.c:4125 [inline]
 [  132.322101] [<ffffffff8180a875>] SyS_symlink+0x165/0x1d0 fs/namei.c:4123
 [  132.323368] [<ffffffff859ffd85>] entry_SYSCALL_64_fastpath+0x23/0xc6
Freed:
PID = 14741
 [  132.325664] [<ffffffff81216576>] save_stack_trace+0x16/0x20 arch/x86/kernel/stacktrace.c:57
 [  132.326951] [<ffffffff81776626>] save_stack+0x46/0xd0 mm/kasan/kasan.c:495
 [  132.328111] [<ffffffff81776e80>] set_track mm/kasan/kasan.c:507 [inline]
 [  132.328111] [<ffffffff81776e80>] kasan_slab_free+0x70/0xb0 mm/kasan/kasan.c:571
 [  132.329387] [<ffffffff81774bdf>] __cache_free mm/slab.c:3511 [inline]
 [  132.329387] [<ffffffff81774bdf>] kfree+0xcf/0x2c0 mm/slab.c:3828
 [  132.330396] [<ffffffff815fec28>] bpf_evict_inode+0xe8/0x120 kernel/bpf/inode.c:359
 [  132.331564] [<ffffffff8182a8b3>] evict+0x203/0x470 fs/inode.c:553
 [  132.332751] [<ffffffff8182b18b>] iput_final fs/inode.c:1515 [inline]
 [  132.332751] [<ffffffff8182b18b>] iput+0x56b/0x880 fs/inode.c:1542
 [  132.333867] [<ffffffff81808a0b>] do_unlinkat+0x30b/0x640 fs/namei.c:4027
 [  132.335064] [<ffffffff8180a531>] SYSC_unlink fs/namei.c:4068 [inline]
 [  132.335064] [<ffffffff8180a531>] SyS_unlink+0x11/0x20 fs/namei.c:4066
 [  132.336219] [<ffffffff859ffd85>] entry_SYSCALL_64_fastpath+0x23/0xc6
Memory state around the buggy address:
 ffff88005d723400: 00 01 fc fc fc fc fc fc fb fb fb fb fc fc fc fc
 ffff88005d723480: 00 00 01 fc fc fc fc fc 00 00 01 fc fc fc fc fc
>ffff88005d723500: 00 02 fc fc fc fc fc fc fb fb fb fb fc fc fc fc
                                           ^
 ffff88005d723580: 00 fc fc fc fc fc fc fc fb fb fb fb fc fc fc fc
 ffff88005d723600: fb fb fb fb fc fc fc fc 00 00 01 fc fc fc fc fc
==================================================================
device bridge_slave_1 left promiscuous mode
bridge0: port 2(bridge_slave_1) entered disabled state
device bridge_slave_0 left promiscuous mode
bridge0: port 1(bridge_slave_0) entered disabled state
team0 (unregistering): Port device team_slave_1 removed
team0 (unregistering): Port device team_slave_0 removed
bond0 (unregistering): Releasing backup interface bond_slave_1
bond0 (unregistering): Releasing backup interface bond_slave_0
bond0 (unregistering): Released all slaves