Warning: Permanently added '10.128.0.6' (ECDSA) to the list of known hosts. 2019/12/06 10:30:40 parsed 1 programs 2019/12/06 10:30:41 executed programs: 0 syzkaller login: [ 69.140933][ T8931] IPVS: ftp: loaded support on port[0] = 21 [ 69.152007][ T8933] IPVS: ftp: loaded support on port[0] = 21 [ 69.165873][ T8930] IPVS: ftp: loaded support on port[0] = 21 [ 69.174001][ T8937] IPVS: ftp: loaded support on port[0] = 21 [ 69.176743][ T8936] IPVS: ftp: loaded support on port[0] = 21 [ 69.188692][ T8939] IPVS: ftp: loaded support on port[0] = 21 [ 69.482008][ T8939] chnl_net:caif_netlink_parms(): no params data found [ 69.491065][ T8937] chnl_net:caif_netlink_parms(): no params data found [ 69.547403][ T8936] chnl_net:caif_netlink_parms(): no params data found [ 69.566618][ T8933] chnl_net:caif_netlink_parms(): no params data found [ 69.644793][ T8937] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.652795][ T8937] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.660614][ T8937] device bridge_slave_0 entered promiscuous mode [ 69.696195][ T8939] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.703670][ T8939] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.711832][ T8939] device bridge_slave_0 entered promiscuous mode [ 69.719231][ T8937] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.726283][ T8937] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.736283][ T8937] device bridge_slave_1 entered promiscuous mode [ 69.750002][ T8936] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.757071][ T8936] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.764967][ T8936] device bridge_slave_0 entered promiscuous mode [ 69.774914][ T8936] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.782226][ T8936] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.790382][ T8936] device bridge_slave_1 entered promiscuous mode [ 69.797438][ T8931] chnl_net:caif_netlink_parms(): no params data found [ 69.805927][ T8939] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.813129][ T8939] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.820826][ T8939] device bridge_slave_1 entered promiscuous mode [ 69.844362][ T8930] chnl_net:caif_netlink_parms(): no params data found [ 69.896443][ T8939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.913282][ T8937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.926799][ T8936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.936787][ T8933] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.944050][ T8933] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.951967][ T8933] device bridge_slave_0 entered promiscuous mode [ 69.961387][ T8939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.991902][ T8937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.008971][ T8936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.018337][ T8933] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.025371][ T8933] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.033724][ T8933] device bridge_slave_1 entered promiscuous mode [ 70.065022][ T8939] team0: Port device team_slave_0 added [ 70.076517][ T8930] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.087900][ T8930] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.095840][ T8930] device bridge_slave_0 entered promiscuous mode [ 70.110719][ T8931] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.117769][ T8931] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.126054][ T8931] device bridge_slave_0 entered promiscuous mode [ 70.141880][ T8933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.154172][ T8939] team0: Port device team_slave_1 added [ 70.162936][ T8937] team0: Port device team_slave_0 added [ 70.168999][ T8930] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.176053][ T8930] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.184686][ T8930] device bridge_slave_1 entered promiscuous mode [ 70.201357][ T8931] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.210347][ T8931] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.218112][ T8931] device bridge_slave_1 entered promiscuous mode [ 70.226141][ T8933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.244719][ T8937] team0: Port device team_slave_1 added [ 70.257778][ T8936] team0: Port device team_slave_0 added [ 70.284312][ T8930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.296334][ T8936] team0: Port device team_slave_1 added [ 70.350047][ T8939] device hsr_slave_0 entered promiscuous mode [ 70.388338][ T8939] device hsr_slave_1 entered promiscuous mode [ 70.430352][ T8930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.448970][ T8933] team0: Port device team_slave_0 added [ 70.463458][ T8931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.480506][ T8931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.530004][ T8936] device hsr_slave_0 entered promiscuous mode [ 70.578502][ T8936] device hsr_slave_1 entered promiscuous mode [ 70.638283][ T8936] debugfs: Directory 'hsr0' with parent '/' already present! [ 70.647582][ T8933] team0: Port device team_slave_1 added [ 70.662280][ T8930] team0: Port device team_slave_0 added [ 70.698443][ T8931] team0: Port device team_slave_0 added [ 70.717203][ T8930] team0: Port device team_slave_1 added [ 70.762188][ T8937] device hsr_slave_0 entered promiscuous mode [ 70.818466][ T8937] device hsr_slave_1 entered promiscuous mode [ 70.888450][ T8937] debugfs: Directory 'hsr0' with parent '/' already present! [ 70.909158][ T8931] team0: Port device team_slave_1 added [ 70.981747][ T8930] device hsr_slave_0 entered promiscuous mode [ 71.018342][ T8930] device hsr_slave_1 entered promiscuous mode [ 71.058151][ T8930] debugfs: Directory 'hsr0' with parent '/' already present! [ 71.141478][ T8933] device hsr_slave_0 entered promiscuous mode [ 71.178607][ T8933] device hsr_slave_1 entered promiscuous mode [ 71.218215][ T8933] debugfs: Directory 'hsr0' with parent '/' already present! [ 71.242268][ T8939] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.371332][ T8931] device hsr_slave_0 entered promiscuous mode [ 71.418292][ T8931] device hsr_slave_1 entered promiscuous mode [ 71.468209][ T8931] debugfs: Directory 'hsr0' with parent '/' already present! [ 71.476356][ T8939] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.565112][ T8936] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.609898][ T8939] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.683892][ T8936] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.721186][ T8939] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.780475][ T8937] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 71.827931][ T8937] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 71.883944][ T8937] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 71.942476][ T8937] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 72.010537][ T8936] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.063728][ T8936] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.118885][ T8930] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.153866][ T8930] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.214260][ T8930] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.274595][ T8930] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.330159][ T8933] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.390182][ T8931] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.430786][ T8931] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.470586][ T8931] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.541294][ T8931] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.607676][ T8933] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.666012][ T8933] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.733242][ T8933] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.910049][ T8939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.934940][ T8937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.966290][ T8930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.985961][ T8933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.000086][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.009517][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.025811][ T8936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.035751][ T3116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.045585][ T3116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.060114][ T8930] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.074482][ T8939] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.082592][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.091003][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.098903][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.107391][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.117104][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.124314][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.135257][ T8937] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.159479][ T8933] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.166375][ T3116] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.175697][ T3116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.184708][ T3116] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.193164][ T3116] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.200222][ T3116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.208726][ T3116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.217190][ T3116] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.225673][ T3116] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.232751][ T3116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.240368][ T3116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.249123][ T3116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.256784][ T3116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.264693][ T3116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.273766][ T3116] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.282099][ T3116] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.289183][ T3116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.297446][ T3116] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.317367][ T8936] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.333248][ T3116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.345510][ T3116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.353300][ T3116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.361704][ T3116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.370443][ T3116] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.379398][ T3116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.387828][ T3116] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.396409][ T3116] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.403497][ T3116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.411310][ T3116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.420233][ T3116] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.429801][ T3116] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.436846][ T3116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.445455][ T3116] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.453355][ T3116] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.461722][ T3116] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.472079][ T8931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.501287][ T8931] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.509534][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.522892][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.532431][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.541874][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.550501][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.558252][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.565823][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.574606][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.583312][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.592351][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.602552][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.610859][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.620333][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.629551][ T2731] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.636576][ T2731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.665797][ T8930] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.678191][ T8930] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.691570][ T8942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.700727][ T8942] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.710187][ T8942] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.717220][ T8942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.725164][ T8942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.734051][ T8942] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.742545][ T8942] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.749611][ T8942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.757287][ T8942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.767318][ T8942] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.775988][ T8942] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.783094][ T8942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.791111][ T8942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.800870][ T8942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.809474][ T8942] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.817776][ T8942] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.824913][ T8942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.832591][ T8942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.841378][ T8942] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.850117][ T8942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.858800][ T8942] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.867467][ T8942] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.874760][ T8942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.882859][ T8942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.891319][ T8942] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.899748][ T8942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.910590][ T8942] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.919199][ T8942] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.927016][ T8942] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.934836][ T8942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.978664][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.987065][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.998893][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.007151][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.015759][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.024908][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.033542][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.042358][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.051157][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.059941][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.068488][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.076769][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.085080][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.093663][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.102282][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.110778][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.119486][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.129637][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.137442][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.145247][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.161895][ T8939] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.190887][ T8947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.201214][ T8947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.210957][ T8947] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.220072][ T8947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.228628][ T8947] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.236819][ T8947] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.244722][ T8947] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.260187][ T8930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.285238][ T8931] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.295867][ T8931] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.317125][ T8937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.325416][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.333921][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.342264][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.353819][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.362352][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.371219][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.380121][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.389756][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.398420][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.406673][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.415006][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.423656][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.432270][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.441027][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.449610][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.457822][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.466928][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.475145][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.483603][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.499921][ T8936] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.510360][ T8936] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.547784][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.557058][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.589314][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.597579][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.608435][ T8933] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.616125][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.678024][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.685452][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.714767][ T8936] 8021q: adding VLAN 0 to HW filter on device batadv0 2019/12/06 10:30:47 executed programs: 6 [ 74.764509][ T8939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.768968][ T8947] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.814756][ T8947] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.814879][ T8947] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.814985][ T8947] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.822627][ T8931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.906575][ T8933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.908288][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.908424][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.915144][ T9011] ================================================================== [ 75.923340][ T9011] BUG: KASAN: use-after-free in n_tty_receive_buf_common+0x270f/0x2b70 [ 75.923359][ T9011] Read of size 1 at addr ffff8880812c801c by task syz-executor.2/9011 [ 75.923363][ T9011] [ 75.923378][ T9011] CPU: 1 PID: 9011 Comm: syz-executor.2 Not tainted 5.4.0-syzkaller #0 [ 75.923386][ T9011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 75.923391][ T9011] Call Trace: [ 75.923407][ T9011] dump_stack+0x197/0x210 [ 75.923422][ T9011] ? n_tty_receive_buf_common+0x270f/0x2b70 [ 75.923441][ T9011] print_address_description.constprop.0.cold+0xd4/0x30b [ 75.923454][ T9011] ? n_tty_receive_buf_common+0x270f/0x2b70 [ 75.923468][ T9011] ? n_tty_receive_buf_common+0x270f/0x2b70 [ 75.923481][ T9011] __kasan_report.cold+0x1b/0x41 [ 75.923498][ T9011] ? n_tty_receive_buf_common+0x270f/0x2b70 [ 75.923514][ T9011] kasan_report+0x12/0x20 [ 75.923528][ T9011] __asan_report_load1_noabort+0x14/0x20 [ 75.923542][ T9011] n_tty_receive_buf_common+0x270f/0x2b70 [ 75.923554][ T9011] ? __kasan_check_read+0x11/0x20 [ 75.923586][ T9011] n_tty_receive_buf2+0x34/0x40 [ 75.923602][ T9011] tty_ldisc_receive_buf+0xad/0x1c0 [ 75.923613][ T9011] ? add_wait_queue+0x112/0x170 [ 75.923631][ T9011] ? n_tty_receive_buf_common+0x2b70/0x2b70 [ 76.007967][ T9011] paste_selection+0x1ff/0x460 [ 76.007990][ T9011] ? vcs_remove_sysfs+0x60/0x60 [ 76.008006][ T9011] ? lock_downgrade+0x920/0x920 [ 76.008024][ T9011] ? wake_up_q+0x140/0x140 [ 76.008051][ T9011] tioclinux+0x133/0x480 [ 76.008067][ T9011] vt_ioctl+0x1a41/0x26d0 [ 76.008084][ T9011] ? complete_change_console+0x3a0/0x3a0 [ 76.008096][ T9011] ? lock_downgrade+0x920/0x920 [ 76.008114][ T9011] ? rwlock_bug.part.0+0x90/0x90 [ 76.088274][ T9011] ? tomoyo_path_number_perm+0x214/0x520 [ 76.088292][ T9011] ? find_held_lock+0x35/0x130 [ 76.088307][ T9011] ? tomoyo_path_number_perm+0x214/0x520 [ 76.088323][ T9011] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 76.088342][ T9011] ? tty_jobctrl_ioctl+0x50/0xd40 [ 76.088357][ T9011] ? complete_change_console+0x3a0/0x3a0 [ 76.088369][ T9011] tty_ioctl+0xa37/0x14f0 [ 76.088391][ T9011] ? tty_vhangup+0x30/0x30 [ 76.129573][ T9011] ? tomoyo_path_number_perm+0x454/0x520 [ 76.129597][ T9011] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 76.129608][ T9011] ? tomoyo_path_number_perm+0x25e/0x520 [ 76.129624][ T9011] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 76.152863][ T9011] ? tty_vhangup+0x30/0x30 [ 76.157324][ T9011] do_vfs_ioctl+0x977/0x14e0 [ 76.161896][ T9011] ? compat_ioctl_preallocate+0x220/0x220 [ 76.167608][ T9011] ? __fget+0x37f/0x550 [ 76.171758][ T9011] ? ksys_dup3+0x3e0/0x3e0 [ 76.176180][ T9011] ? ns_to_kernel_old_timeval+0x100/0x100 [ 76.181909][ T9011] ? tomoyo_file_ioctl+0x23/0x30 [ 76.186831][ T9011] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 76.193063][ T9011] ? security_file_ioctl+0x8d/0xc0 [ 76.198170][ T9011] ksys_ioctl+0xab/0xd0 [ 76.202305][ T9011] __x64_sys_ioctl+0x73/0xb0 [ 76.206876][ T9011] do_syscall_64+0xfa/0x790 [ 76.211363][ T9011] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 76.217233][ T9011] RIP: 0033:0x45a679 [ 76.221114][ T9011] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 76.240710][ T9011] RSP: 002b:00007fd3ebea6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.249153][ T9011] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a679 [ 76.257108][ T9011] RDX: 0000000020000180 RSI: 000000000000541c RDI: 0000000000000003 [ 76.265082][ T9011] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 76.273048][ T9011] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd3ebea76d4 [ 76.281006][ T9011] R13: 00000000004c5951 R14: 00000000004dbb60 R15: 00000000ffffffff [ 76.288967][ T9011] [ 76.291278][ T9011] Allocated by task 8983: [ 76.295589][ T9011] save_stack+0x23/0x90 [ 76.299734][ T9011] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 76.305369][ T9011] kasan_kmalloc+0x9/0x10 [ 76.309697][ T9011] __kmalloc+0x163/0x770 [ 76.313928][ T9011] set_selection_kernel+0x872/0x13b0 [ 76.319197][ T9011] set_selection_user+0x95/0xd9 [ 76.324129][ T9011] tioclinux+0x11c/0x480 [ 76.328363][ T9011] vt_ioctl+0x1a41/0x26d0 [ 76.332667][ T9011] tty_ioctl+0xa37/0x14f0 [ 76.336983][ T9011] do_vfs_ioctl+0x977/0x14e0 [ 76.341558][ T9011] ksys_ioctl+0xab/0xd0 [ 76.345702][ T9011] __x64_sys_ioctl+0x73/0xb0 [ 76.350288][ T9011] do_syscall_64+0xfa/0x790 [ 76.354788][ T9011] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 76.360664][ T9011] [ 76.362967][ T9011] Freed by task 9007: [ 76.366935][ T9011] save_stack+0x23/0x90 [ 76.371075][ T9011] __kasan_slab_free+0x102/0x150 [ 76.376129][ T9011] kasan_slab_free+0xe/0x10 [ 76.380620][ T9011] kfree+0x10a/0x2c0 [ 76.384511][ T9011] set_selection_kernel+0x88f/0x13b0 [ 76.389781][ T9011] set_selection_user+0x95/0xd9 [ 76.394613][ T9011] tioclinux+0x11c/0x480 [ 76.398843][ T9011] vt_ioctl+0x1a41/0x26d0 [ 76.403155][ T9011] tty_ioctl+0xa37/0x14f0 [ 76.407678][ T9011] do_vfs_ioctl+0x977/0x14e0 [ 76.412253][ T9011] ksys_ioctl+0xab/0xd0 [ 76.416429][ T9011] __x64_sys_ioctl+0x73/0xb0 [ 76.416443][ T9011] do_syscall_64+0xfa/0x790 [ 76.416459][ T9011] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 76.416463][ T9011] [ 76.416472][ T9011] The buggy address belongs to the object at ffff8880812c8000 [ 76.416472][ T9011] which belongs to the cache kmalloc-16k of size 16384 [ 76.416481][ T9011] The buggy address is located 28 bytes inside of [ 76.416481][ T9011] 16384-byte region [ffff8880812c8000, ffff8880812cc000) [ 76.416484][ T9011] The buggy address belongs to the page: [ 76.416495][ T9011] page:ffffea000204b200 refcount:1 mapcount:0 mapping:ffff8880aa402380 index:0x0 compound_mapcount: 0 [ 76.416510][ T9011] raw: 00fffe0000010200 ffffea0002046808 ffffea000204e208 ffff8880aa402380 [ 76.416524][ T9011] raw: 0000000000000000 ffff8880812c8000 0000000100000001 0000000000000000 [ 76.416529][ T9011] page dumped because: kasan: bad access detected [ 76.416533][ T9011] [ 76.416537][ T9011] Memory state around the buggy address: [ 76.416548][ T9011] ffff8880812c7f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 76.416558][ T9011] ffff8880812c7f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 76.416568][ T9011] >ffff8880812c8000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.416572][ T9011] ^ [ 76.416582][ T9011] ffff8880812c8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.416591][ T9011] ffff8880812c8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.416595][ T9011] ================================================================== [ 76.416599][ T9011] Disabling lock debugging due to kernel taint [ 76.433229][ T9011] Kernel panic - not syncing: panic_on_warn set ... [ 76.433248][ T9011] CPU: 1 PID: 9011 Comm: syz-executor.2 Tainted: G B 5.4.0-syzkaller #0 [ 76.433255][ T9011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 76.433260][ T9011] Call Trace: [ 76.433279][ T9011] dump_stack+0x197/0x210 [ 76.433294][ T9011] panic+0x2e3/0x75c [ 76.433307][ T9011] ? add_taint.cold+0x16/0x16 [ 76.433323][ T9011] ? n_tty_receive_buf_common+0x270f/0x2b70 [ 76.433336][ T9011] ? preempt_schedule+0x4b/0x60 [ 76.433351][ T9011] ? ___preempt_schedule+0x16/0x18 [ 76.433366][ T9011] ? trace_hardirqs_on+0x5e/0x240 [ 76.433381][ T9011] ? n_tty_receive_buf_common+0x270f/0x2b70 [ 76.433394][ T9011] end_report+0x47/0x4f [ 76.433406][ T9011] ? n_tty_receive_buf_common+0x270f/0x2b70 [ 76.433418][ T9011] __kasan_report.cold+0xe/0x41 [ 76.433432][ T9011] ? n_tty_receive_buf_common+0x270f/0x2b70 [ 76.433445][ T9011] kasan_report+0x12/0x20 [ 76.433457][ T9011] __asan_report_load1_noabort+0x14/0x20 [ 76.433470][ T9011] n_tty_receive_buf_common+0x270f/0x2b70 [ 76.433481][ T9011] ? __kasan_check_read+0x11/0x20 [ 76.433502][ T9011] n_tty_receive_buf2+0x34/0x40 [ 76.433516][ T9011] tty_ldisc_receive_buf+0xad/0x1c0 [ 76.433527][ T9011] ? add_wait_queue+0x112/0x170 [ 76.433540][ T9011] ? n_tty_receive_buf_common+0x2b70/0x2b70 [ 76.433556][ T9011] paste_selection+0x1ff/0x460 [ 76.433571][ T9011] ? vcs_remove_sysfs+0x60/0x60 [ 76.433584][ T9011] ? lock_downgrade+0x920/0x920 [ 76.433598][ T9011] ? wake_up_q+0x140/0x140 [ 76.433617][ T9011] tioclinux+0x133/0x480 [ 76.433631][ T9011] vt_ioctl+0x1a41/0x26d0 [ 76.433645][ T9011] ? complete_change_console+0x3a0/0x3a0 [ 76.433656][ T9011] ? lock_downgrade+0x920/0x920 [ 76.433669][ T9011] ? rwlock_bug.part.0+0x90/0x90 [ 76.433682][ T9011] ? tomoyo_path_number_perm+0x214/0x520 [ 76.433696][ T9011] ? find_held_lock+0x35/0x130 [ 76.433708][ T9011] ? tomoyo_path_number_perm+0x214/0x520 [ 76.433722][ T9011] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 76.433737][ T9011] ? tty_jobctrl_ioctl+0x50/0xd40 [ 76.433750][ T9011] ? complete_change_console+0x3a0/0x3a0 [ 76.433763][ T9011] tty_ioctl+0xa37/0x14f0 [ 76.433776][ T9011] ? tty_vhangup+0x30/0x30 [ 76.433787][ T9011] ? tomoyo_path_number_perm+0x454/0x520 [ 76.433802][ T9011] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 76.433813][ T9011] ? tomoyo_path_number_perm+0x25e/0x520 [ 76.433826][ T9011] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 76.433847][ T9011] ? tty_vhangup+0x30/0x30 [ 76.433861][ T9011] do_vfs_ioctl+0x977/0x14e0 [ 76.433876][ T9011] ? compat_ioctl_preallocate+0x220/0x220 [ 76.433887][ T9011] ? __fget+0x37f/0x550 [ 76.433902][ T9011] ? ksys_dup3+0x3e0/0x3e0 [ 76.433915][ T9011] ? ns_to_kernel_old_timeval+0x100/0x100 [ 76.433937][ T9011] ? tomoyo_file_ioctl+0x23/0x30 [ 76.433950][ T9011] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 76.433966][ T9011] ? security_file_ioctl+0x8d/0xc0 [ 76.433978][ T9011] ksys_ioctl+0xab/0xd0 [ 76.433991][ T9011] __x64_sys_ioctl+0x73/0xb0 [ 76.434005][ T9011] do_syscall_64+0xfa/0x790 [ 76.434023][ T9011] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 76.434034][ T9011] RIP: 0033:0x45a679 [ 76.434048][ T9011] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 76.434054][ T9011] RSP: 002b:00007fd3ebea6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.434066][ T9011] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a679 [ 76.434074][ T9011] RDX: 0000000020000180 RSI: 000000000000541c RDI: 0000000000000003 [ 76.434081][ T9011] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 76.434089][ T9011] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd3ebea76d4 [ 76.434096][ T9011] R13: 00000000004c5951 R14: 00000000004dbb60 R15: 00000000ffffffff [ 76.435368][ T9011] Kernel Offset: disabled