Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 16.885579] cfg80211: Calling CRDA to update world regulatory domain [ 20.045756] cfg80211: Calling CRDA to update world regulatory domain [ 23.205595] cfg80211: Calling CRDA to update world regulatory domain [ 26.365571] cfg80211: Calling CRDA to update world regulatory domain [ 29.525581] cfg80211: Calling CRDA to update world regulatory domain [ 31.595871] IPVS: Creating netns size=2688 id=1 [ 31.600665] IPVS: ftp: loaded support on port[0] = 21 [ 32.685582] cfg80211: Calling CRDA to update world regulatory domain [ 35.845623] cfg80211: Calling CRDA to update world regulatory domain Warning: Permanently added '10.128.0.138' (ECDSA) to the list of known hosts. 2019/12/09 11:21:56 parsed 1 programs 2019/12/09 11:21:56 executed programs: 0 [ 38.223483] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready [ 38.232881] IPv6: ADDRCONF(NETDEV_CHANGE): nr5: link becomes ready [ 38.233445] IPVS: Creating netns size=2688 id=2 [ 38.233456] IPVS: ftp: loaded support on port[0] = 21 [ 38.252747] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready [ 38.259592] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready [ 38.266270] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready [ 38.273333] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready [ 38.284223] IPVS: Creating netns size=2688 id=3 [ 38.289175] IPVS: ftp: loaded support on port[0] = 21 [ 38.294945] chnl_net:caif_netlink_parms(): no params data found [ 38.306815] IPVS: Creating netns size=2688 id=4 [ 38.311694] IPVS: ftp: loaded support on port[0] = 21 [ 38.327132] IPVS: Creating netns size=2688 id=5 [ 38.332985] IPVS: ftp: loaded support on port[0] = 21 [ 38.337568] chnl_net:caif_netlink_parms(): no params data found [ 38.347673] device bridge_slave_0 entered promiscuous mode [ 38.348389] device bridge_slave_1 entered promiscuous mode [ 38.350858] IPv6: ADDRCONF(NETDEV_UP): bond_slave_0: link is not ready [ 38.351226] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 38.374970] IPv6: ADDRCONF(NETDEV_UP): bond_slave_1: link is not ready [ 38.382748] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 38.397088] device bridge_slave_0 entered promiscuous mode [ 38.404968] device bridge_slave_1 entered promiscuous mode [ 38.415552] IPVS: Creating netns size=2688 id=6 [ 38.420269] IPVS: ftp: loaded support on port[0] = 21 [ 38.428878] IPv6: ADDRCONF(NETDEV_UP): bond_slave_0: link is not ready [ 38.435832] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 38.444366] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 38.453156] chnl_net:caif_netlink_parms(): no params data found [ 38.462363] IPv6: ADDRCONF(NETDEV_UP): bond_slave_1: link is not ready [ 38.469349] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 38.479018] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 38.489297] chnl_net:caif_netlink_parms(): no params data found [ 38.499857] IPVS: Creating netns size=2688 id=7 [ 38.505104] IPVS: ftp: loaded support on port[0] = 21 [ 38.509680] chnl_net:caif_netlink_parms(): no params data found [ 38.520892] device bridge_slave_0 entered promiscuous mode [ 38.531386] device bridge_slave_1 entered promiscuous mode [ 38.537960] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 38.549858] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 38.556972] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 38.566236] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 38.576344] device bridge_slave_0 entered promiscuous mode [ 38.586434] IPv6: ADDRCONF(NETDEV_UP): bond_slave_0: link is not ready [ 38.593912] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 38.602234] device bridge_slave_1 entered promiscuous mode [ 38.610913] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 38.617903] IPv6: ADDRCONF(NETDEV_UP): bond_slave_1: link is not ready [ 38.624685] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 38.636403] IPv6: ADDRCONF(NETDEV_UP): bond_slave_0: link is not ready [ 38.643215] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 38.650884] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 38.658630] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 38.667481] device bridge_slave_0 entered promiscuous mode [ 38.673363] IPv6: ADDRCONF(NETDEV_UP): bond_slave_1: link is not ready [ 38.680218] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 38.688072] chnl_net:caif_netlink_parms(): no params data found [ 38.696511] device bridge_slave_1 entered promiscuous mode [ 38.706145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.712835] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.719352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.725954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.739814] IPv6: ADDRCONF(NETDEV_UP): bond_slave_0: link is not ready [ 38.747158] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 38.755026] IPv6: ADDRCONF(NETDEV_UP): bond_slave_1: link is not ready [ 38.762077] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 38.770042] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.776567] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.785401] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 38.796646] device bridge_slave_0 entered promiscuous mode [ 38.802794] device bridge_slave_1 entered promiscuous mode [ 38.811826] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 38.819024] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 38.827870] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 38.837403] IPv6: ADDRCONF(NETDEV_UP): bond_slave_0: link is not ready [ 38.844317] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 38.857262] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 38.864306] IPv6: ADDRCONF(NETDEV_UP): bond_slave_1: link is not ready [ 38.871292] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 38.883467] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 38.890527] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 38.897546] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 38.909549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.916100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.922603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.929103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.936153] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 38.942911] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 38.949802] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 38.956595] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 38.963579] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 38.970679] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.977698] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.985228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.991928] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 39.000591] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 39.009336] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 39.016166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.023955] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 39.031106] cfg80211: Exceeded CRDA call max attempts. Not calling CRDA [ 39.038417] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 39.047356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.054770] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 39.065165] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 39.073090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.084024] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 39.093095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.103422] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 39.111366] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 39.118188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.125877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.132404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.139546] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.147096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.153628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.160950] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 39.168004] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.175247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.183863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.191521] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 39.199041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.205914] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 39.212420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.219207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.226735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.233231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.240019] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.247565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.254839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.261565] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.270390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.280554] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 39.288927] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 39.299121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.310244] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 39.319459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.327019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.333563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.340676] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.348352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.355409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.362937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.369475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.376298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.384075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.390886] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 39.402496] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 39.410059] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 39.416772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.424133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.430702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.437610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.444939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.451475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.459836] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.466834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.474615] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 39.481977] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.491022] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.498551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.505067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.512016] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.519234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.528742] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 39.535727] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.543084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.549612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.557616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.567592] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 39.576422] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 39.583749] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 39.593420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.602373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.608915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.615973] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.623430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.630153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.637312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.645881] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.653008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.667034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.674174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.233443] general protection fault: 0000 [#1] PREEMPT SMP [ 41.240045] Modules linked in: [ 41.243496] CPU: 1 PID: 6723 Comm: syz-executor.2 Not tainted 4.1.0-syzkaller #0 [ 41.251456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 41.261171] task: ffff8800ad060950 ti: ffff8800aaa40000 task.ti: ffff8800aaa40000 [ 41.269040] RIP: 0010:[] [] __lock_acquire+0x2db/0x1c70 [ 41.277881] RSP: 0000:ffff8800aaa43b18 EFLAGS: 00010086 [ 41.283401] RAX: 0000000000000000 RBX: dead4ead00000000 RCX: 0000000000000000 [ 41.291003] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 41.298946] RBP: ffff8800aaa43bd8 R08: 0000000000000001 R09: 0000000000000000 [ 41.306432] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000001 [ 41.313695] R13: 0000000000000000 R14: ffff8800ab788028 R15: ffff8800ad060950 [ 41.321299] FS: 00000000026ea940(0063) GS:ffff88012c100000(0000) knlGS:0000000000000000 [ 41.329968] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.336317] CR2: 000056458fa550b8 CR3: 00000000ad2c9000 CR4: 00000000001407e0 [ 41.343646] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 41.351398] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 41.358805] Stack: [ 41.360963] 0000000000000001 ffff8800ad0611e0 ffff8800aaa43b38 ffffffff811e162d [ 41.369190] ffff8800aaa43c08 ffffffff00000000 0000000000000000 ffff880000000000 [ 41.377241] ffff8800b649a8b8 ffffffff83d7e6c0 ffff8800ad0611e0 ffffffff00000000 [ 41.385673] Call Trace: [ 41.390752] [] ? debug_lockdep_rcu_enabled+0x1d/0x20 [ 41.397754] [] lock_acquire+0xe6/0x310 [ 41.403522] [] ? work_busy+0x120/0x120 [ 41.409464] [] flush_work+0x3a/0x320 [ 41.415181] [] ? work_busy+0x120/0x120 [ 41.421081] [] ? mark_held_locks+0x75/0xc0 [ 41.427305] [] ? __cancel_work_timer+0xbd/0x210 [ 41.433849] [] __cancel_work_timer+0xda/0x210 [ 41.440195] [] ? console_unlock+0x1e2/0x570 [ 41.446162] [] cancel_work_sync+0xb/0x10 [ 41.451861] [] release_tty+0x8a/0x120 [ 41.457298] [] tty_release+0x3ea/0x570 [ 41.463043] [] ? ___might_sleep+0x205/0x270 [ 41.469409] [] __fput+0xed/0x250 [ 41.474604] [] ____fput+0x9/0x10 [ 41.479629] [] task_work_run+0xc4/0xf0 [ 41.485451] [] do_notify_resume+0x68/0x70 [ 41.491362] [] int_signal+0x12/0x17 [ 41.497056] Code: 49 81 3e 40 29 64 83 b8 00 00 00 00 44 0f 44 e0 41 83 fd 01 0f 87 aa fd ff ff 44 89 e8 49 8b 5c c6 08 48 85 db 0f 84 99 fd ff ff ff 83 98 01 00 00 8b 05 10 6c 11 03 41 8b 8f 60 08 00 00 85 [ 41.527026] RIP [] __lock_acquire+0x2db/0x1c70 [ 41.533807] RSP [ 41.537570] ---[ end trace 6fa09b6099d840b9 ]--- [ 41.542308] Kernel panic - not syncing: Fatal exception [ 41.549388] Kernel Offset: disabled