Warning: Permanently added '10.128.0.128' (ECDSA) to the list of known hosts. 2019/05/18 00:50:03 fuzzer started 2019/05/18 00:50:06 dialing manager at 10.128.0.26:37669 2019/05/18 00:50:06 syscalls: 1006 2019/05/18 00:50:06 code coverage: enabled 2019/05/18 00:50:06 comparison tracing: enabled 2019/05/18 00:50:06 extra coverage: extra coverage is not supported by the kernel 2019/05/18 00:50:06 setuid sandbox: enabled 2019/05/18 00:50:06 namespace sandbox: enabled 2019/05/18 00:50:06 Android sandbox: /sys/fs/selinux/policy does not exist 2019/05/18 00:50:06 fault injection: enabled 2019/05/18 00:50:06 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/05/18 00:50:06 net packet injection: enabled 2019/05/18 00:50:06 net device setup: enabled 00:50:08 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x3e) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)=',', 0x1}], 0x1}, 0xc100) write(r0, &(0x7f0000000200)="e6a2e0091b61501ea87850c6d258201cbf3fe9fe75bc31032c1bd695e6f89fffb8dd1bb327cde2faef7e8115c8949109dddb3332b28603a1e35d08e3d07606314bc0e1cf58b62864f002380700335454a2a6d9cc29a3fc3d2c30ff2907f14f80fce3c46806732418663bbb11e34e1f9e819d012f4928b5fb59fb31755c98649f35c587263cbf7830ddde04ed4e4a9fda1923d06559d4e9df911797333a46b8d2268133da26a6e59e35a66021404ba08e9b550cd132eda9a970ae2ef50b25dbe1c3da78074af2a762c27eeb9b22630beec52475e7a8a159fad88d41e8309b5e32983e315025fbc9c7603d676a5316fffcb42642150cd498d59748ff6200a73c31b403eb73a2dcd677d8d0340034b5c59235f2fd893d6b5b86efa9b05a2b56616ce4f8a3589d5d5e09337f161517cdcac41b5732064919358d7cd6a9b1fb0a5ad5c4106124da93437fed9f2503223c3eb1103cd9b1a9ecf29674ea86921bd5b0094e3937a1286a44089ef4b42cca8e46cfda355cfe8622e860f416b60af1196f7c0196daa0bf0dd3797d0b8199ac4e2381d92f473393b860c9f97a08324c83c372553042c7f24709106c016ff1e20c93d645e734daaf50f13ad845377b895c1dede9b73432d24c9f6207bcb1fe8fb9900377b387f8787f20849ec05b0d44982a78a650e12306efff6f4ef89b0eb175bfff545fda8692314d7fc9e8f4fdffd01b56a6b1358adab6d78f3d693e6781c8bf399024aaa888d572d59cf7cdb74aa974d20549a47624f35caf0956651e8d24079e0866e0172f2fc26af14c628f99051e04e50fba06de938d52d934a78921d5144d18e8c5d1f4fd2d0e7ca22119be065574f5f7dfbabbc44d42b51d62d658ed2ed1250d7821a09d26760b65ca0f8bc1b186e5cf931377b2adefca5a752c7f9e82224c5734c88d27c3afb7d785ee510fb3806f42bbff9fe9bc1d50cb329bb666a1d766182ffd6b6aee8535406b2a77e2328d90b90950034dd468577693571bc9a9fb9f8aeae67d5a8747f85e38318d97f458c6c9fed9c3b8f0affe63a2adaa57e472449c76b53af7f0cf9087e62bd5556947e681873a002c78d08326290a34489f5eb7acb38367778460473e6b5e4a8c5caa8213092cf59a2f3834548793ef1a55983af67a304c187ded353c4b3f95b9ec569fdc39b60613f8f622a759b7b6a59901d32a2725c7db7768259ad896a7315d07c850035b67dd4ba1ab8be64d2dcf83988b66f3801c26164b3ceb65778e2db97212cac966167ffea65af621e027588b76a23d01995d91e83b6ba104272789f857e75cb959a2206a439d56fd89108d4d6590ac1c6da88cdc53913a51c4b68c17aa26a050d026d6aff72329f597f506280268c61507d62535345d6d2c9e48343825fc36648aa68b2d01c404dfd1dedcba7532f510316d7b18baa8786bd5fa2d1b56c875de3ea88201003b92f6d70ee1e9408cceb561ea511db3a8c85da59390668c486fe1e555b317e767046f69ee031d6021369a01a474bbb3d6f5b094d78745ce3f8ad89e373c18ec3c2dd85af00a79ebaaffb7c049386078bf0b9b56b686c1f0a8855fb1007eb306a68fd840176ff09797edfbace33d4f213ea3599d97d643569ed40a69a41083c65592508305b234587a79aae09645416898a659b17a2c778f5bb2f80878f01f3a14a0488e48fd9d4670cf218b4da04e79c03f77174717e3c25a828bd6286dd91f08af9d281da4bae8d033197171c4fd2503ed398059a78d0ed1fbd98dba8314008ed399ab3ccb56847d30fff2b26a3be5d84af230e1915c2ab7eef4b01b29986985db14213b9b05816ef7724aa896073641a7bc6eb9406e79fa961eb8afbeba75293c1f786e3c8c0517331d0640dcfb0f45a036fd07d4238b9b01e25be3291f0f5eba9523ba1679a35aebbcfa896ab6401296270ba8742259adaf5a52606c3239b8ecc208e39ee916d09f55e5789d5b08c72984dffb4511ee23cd741a73aba019f14712568221feb803a1d1e63df108d435b42fb0f38e3c6410f15d0f56142d4aba83d7bfe3ef5844d4ed36f0bfa6046697742a89689941fa04a68da4e7cbaf6e284d08a8fc3fb9150a6e262b55d616ccb3999a2ff16f6b0600000061d9e51d2f4bd294361fa2bf7fa193fac13535233de13789a1131daed83bd6d403be2ef6edd7d45b9d3cf77c2aa4d79fcbad52462b21bfc89920578e2a60363fb274e242d640109ef5dde5f218e256da6803c30c2253e09eaca762883b7cbefdea6eddc013257214d9bb588ed83a517dd9d34fcc32824f9d880712c2fe48f4e8949728473a6bf9688f999adf2e219423090a75b1acfc8ea96105e22de77e415e7b406b47ffb57bdc26ea0ccc5b43d43ba946a2be6602c64c79275a0ed0fdbbae0825b63c939a0e3ae6dcfbc2f1b6ddb3d4ec7479e85407fb70ac4813951705d6cf1a25d73e97f6fed3ad2d4e60af3e9c92f2ec48c6b7bb809d5d44247b2b224e4232b7adb97f060ea85bf22cdd8a2f7533d703fd75d6498e517478e144da0c273edcd31fea2143bed37c930c02c2d74261966e18b3ee1c1aa1f0518f63aa840a151785d941ffbd70683b165e3a31395d1d7d91189ab7985901f113d11a", 0x740) syzkaller login: [ 85.694143][ T9014] IPVS: ftp: loaded support on port[0] = 21 [ 85.704915][ T9014] NET: Registered protocol family 30 [ 85.710319][ T9014] Failed to register TIPC socket type 00:50:08 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="28000000000000002900000002000000840000000000000000000000a58aa49fa2395dceed4c5ebe"], 0x28}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x2ac, 0x0) [ 85.989931][ T9016] IPVS: ftp: loaded support on port[0] = 21 [ 86.018020][ T9016] NET: Registered protocol family 30 [ 86.032860][ T9016] Failed to register TIPC socket type 00:50:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000007, 0x32, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) r1 = socket$inet(0x2, 0x803, 0x1) getsockopt(r1, 0xff, 0x1, &(0x7f0000001180)=""/166, &(0x7f0000000040)=0x9) [ 86.367962][ T9018] IPVS: ftp: loaded support on port[0] = 21 [ 86.387588][ T9018] NET: Registered protocol family 30 [ 86.402602][ T9018] Failed to register TIPC socket type 00:50:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bc070") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x2f, &(0x7f0000000680)={&(0x7f00000006c0)={0x1c, 0x1c, 0x400000000000109, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 86.931294][ T9020] IPVS: ftp: loaded support on port[0] = 21 [ 86.956999][ T9020] NET: Registered protocol family 30 [ 86.962316][ T9020] Failed to register TIPC socket type 00:50:10 executing program 4: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f00000000c0)={0x9, @null=' \x00'}, 0x12) connect$x25(r0, &(0x7f0000000280)={0x9, @null=' \x00'}, 0x12) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000180)=0xffffffffffffffff, 0x3b1) sendto$x25(r0, 0x0, 0x0, 0x81, &(0x7f0000000040)={0x9, @null=' \x00'}, 0x12) [ 87.597999][ T9022] IPVS: ftp: loaded support on port[0] = 21 [ 87.636998][ T9022] NET: Registered protocol family 30 [ 87.642343][ T9022] Failed to register TIPC socket type 00:50:11 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'bridge_slave_0\x00', &(0x7f0000000100)=@ethtool_rxfh={0x26, 0x0, 0x0, 0x0, 0x0, "7da7e8"}}) [ 88.344455][ T9014] chnl_net:caif_netlink_parms(): no params data found [ 88.641441][ T9062] IPVS: ftp: loaded support on port[0] = 21 [ 88.740954][ T9062] NET: Registered protocol family 30 [ 88.765079][ T9014] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.774630][ T9014] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.815669][ T9062] Failed to register TIPC socket type [ 88.857653][ T9014] device bridge_slave_0 entered promiscuous mode [ 88.931934][ T9014] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.043841][ T9014] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.146386][ T9014] device bridge_slave_1 entered promiscuous mode [ 89.643961][ T9014] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 89.854214][ T9014] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 90.602669][ T9014] team0: Port device team_slave_0 added [ 90.893992][ T9014] team0: Port device team_slave_1 added [ 92.337939][ T9014] device hsr_slave_0 entered promiscuous mode [ 92.856360][ T9014] device hsr_slave_1 entered promiscuous mode [ 95.396089][ T9014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.954350][ T3485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.013773][ T3485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.265885][ T9014] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.573409][ T3485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.630977][ T3485] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.793206][ T3485] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.800463][ T3485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.086270][ T9160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.113700][ T9160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 97.257927][ T9160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 97.404106][ T9160] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.411215][ T9160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.645203][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 97.885850][ T3485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.045698][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.133538][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.328198][ T3485] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 98.385934][ T3485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 98.544458][ T3485] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.743862][ T9383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 98.783214][ T9383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.964034][ T9383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 99.093947][ T9383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.267881][ T9014] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 99.832730][ T9014] 8021q: adding VLAN 0 to HW filter on device batadv0 00:50:27 executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @icmp=@parameter_prob={0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}}}}}}, 0x0) 00:50:28 executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @icmp=@parameter_prob={0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}}}}}}, 0x0) 00:50:30 executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @icmp=@parameter_prob={0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}}}}}}, 0x0) 00:50:32 executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @icmp=@parameter_prob={0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}}}}}}, 0x0) [ 109.317392][ T9512] IPVS: ftp: loaded support on port[0] = 21 [ 109.479722][ T9511] IPVS: ftp: loaded support on port[0] = 21 [ 109.590892][ T9513] IPVS: ftp: loaded support on port[0] = 21 [ 109.736906][ T9514] IPVS: ftp: loaded support on port[0] = 21 [ 109.767450][ T9512] NET: Registered protocol family 30 [ 110.017984][ T9511] list_add double add: new=ffffffff89544ab0, prev=ffffffff89334ac0, next=ffffffff89544ab0. [ 110.076185][ T9512] Failed to register TIPC socket type [ 110.546603][ T9511] ------------[ cut here ]------------ [ 110.552122][ T9511] kernel BUG at lib/list_debug.c:29! [ 111.239962][ T9511] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 111.246088][ T9511] CPU: 1 PID: 9511 Comm: syz-executor.1 Not tainted 5.1.0+ #18 [ 111.253627][ T9511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 111.263722][ T9511] RIP: 0010:__list_add_valid.cold+0x26/0x3c [ 111.269615][ T9511] Code: 56 ff ff ff 4c 89 e1 48 c7 c7 20 4c a3 87 e8 00 60 25 fe 0f 0b 48 89 f2 4c 89 e1 4c 89 ee 48 c7 c7 60 4d a3 87 e8 e9 5f 25 fe <0f> 0b 48 89 f1 48 c7 c7 e0 4c a3 87 4c 89 e6 e8 d5 5f 25 fe 0f 0b [ 111.289250][ T9511] RSP: 0018:ffff888077067b88 EFLAGS: 00010282 [ 111.295337][ T9511] RAX: 0000000000000058 RBX: ffffffff89544920 RCX: 0000000000000000 [ 111.303304][ T9511] RDX: 0000000000000000 RSI: ffffffff815afbe6 RDI: ffffed100ee0cf63 [ 111.311275][ T9511] RBP: ffff888077067ba0 R08: 0000000000000058 R09: ffffed1015d06011 [ 111.319245][ T9511] R10: ffffed1015d06010 R11: ffff8880ae830087 R12: ffffffff89544ab0 [ 111.327216][ T9511] R13: ffffffff89544ab0 R14: ffffffff89544ab0 R15: ffffffff89544a50 [ 111.335275][ T9511] FS: 0000000000ede940(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 111.344322][ T9511] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 111.350905][ T9511] CR2: 00007ffdeeeb6050 CR3: 0000000077019000 CR4: 00000000001406e0 [ 111.358872][ T9511] Call Trace: [ 111.362163][ T9511] ? mutex_lock_nested+0x16/0x20 [ 111.367104][ T9511] proto_register+0x459/0x8e0 [ 111.371779][ T9511] ? lockdep_init_map+0x1be/0x6d0 [ 111.376814][ T9511] tipc_socket_init+0x1c/0x70 [ 111.381499][ T9511] tipc_init_net+0x32a/0x5b0 [ 111.386091][ T9511] ? tipc_exit_net+0x40/0x40 [ 111.390695][ T9511] ops_init+0xb6/0x410 [ 111.394776][ T9511] setup_net+0x2d3/0x740 [ 111.399027][ T9511] ? copy_net_ns+0x1c0/0x340 [ 111.403616][ T9511] ? ops_init+0x410/0x410 [ 111.407946][ T9511] ? kasan_check_write+0x14/0x20 [ 111.412886][ T9511] ? down_read_killable+0x51/0x220 [ 111.418000][ T9511] copy_net_ns+0x1df/0x340 [ 111.422430][ T9511] create_new_namespaces+0x400/0x7b0 [ 111.427722][ T9511] unshare_nsproxy_namespaces+0xc2/0x200 [ 111.433366][ T9511] ksys_unshare+0x440/0x980 [ 111.437869][ T9511] ? trace_hardirqs_on+0x67/0x230 [ 111.442906][ T9511] ? walk_process_tree+0x2d0/0x2d0 [ 111.448024][ T9511] ? blkcg_exit_queue+0x30/0x30 [ 111.452881][ T9511] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 111.458369][ T9511] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 111.464435][ T9511] ? do_syscall_64+0x26/0x680 [ 111.469115][ T9511] ? lockdep_hardirqs_on+0x418/0x5d0 [ 111.474406][ T9511] __x64_sys_unshare+0x31/0x40 [ 111.479181][ T9511] do_syscall_64+0x103/0x680 [ 111.483797][ T9511] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 111.489686][ T9511] RIP: 0033:0x45b897 [ 111.493579][ T9511] Code: 00 00 00 b8 63 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 ad 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 8d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 111.513206][ T9511] RSP: 002b:00007ffcbd6d43a8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 111.521623][ T9511] RAX: ffffffffffffffda RBX: 000000000073c988 RCX: 000000000045b897 [ 111.529683][ T9511] RDX: 0000000000000000 RSI: 00007ffcbd6d4350 RDI: 0000000040000000 [ 111.537655][ T9511] RBP: 00000000000000f8 R08: 0000000000000000 R09: 0000000000000005 [ 111.545626][ T9511] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000414ab0 [ 111.553593][ T9511] R13: 0000000000414b40 R14: 0000000000000000 R15: 0000000000000000 [ 111.561571][ T9511] Modules linked in: 00:50:34 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r0, 0x65, 0x3, 0x0, &(0x7f0000000040))