Warning: Permanently added '10.128.0.80' (ECDSA) to the list of known hosts. 2019/07/31 10:38:23 parsed 1 programs 2019/07/31 10:38:26 executed programs: 0 syzkaller login: [ 98.568321][ T9066] IPVS: ftp: loaded support on port[0] = 21 [ 98.593105][ T9069] IPVS: ftp: loaded support on port[0] = 21 [ 98.604622][ T9070] IPVS: ftp: loaded support on port[0] = 21 [ 98.665419][ T9073] IPVS: ftp: loaded support on port[0] = 21 [ 98.693577][ T9075] IPVS: ftp: loaded support on port[0] = 21 [ 98.696691][ T9076] IPVS: ftp: loaded support on port[0] = 21 [ 98.957292][ T9066] chnl_net:caif_netlink_parms(): no params data found [ 99.048025][ T9069] chnl_net:caif_netlink_parms(): no params data found [ 99.148627][ T9070] chnl_net:caif_netlink_parms(): no params data found [ 99.207801][ T9075] chnl_net:caif_netlink_parms(): no params data found [ 99.223882][ T9076] chnl_net:caif_netlink_parms(): no params data found [ 99.244244][ T9066] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.252021][ T9066] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.259863][ T9066] device bridge_slave_0 entered promiscuous mode [ 99.289745][ T9069] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.297448][ T9069] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.305914][ T9069] device bridge_slave_0 entered promiscuous mode [ 99.314089][ T9073] chnl_net:caif_netlink_parms(): no params data found [ 99.324392][ T9066] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.332060][ T9066] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.339797][ T9066] device bridge_slave_1 entered promiscuous mode [ 99.353454][ T9069] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.361326][ T9069] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.369018][ T9069] device bridge_slave_1 entered promiscuous mode [ 99.444296][ T9070] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.460008][ T9070] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.468057][ T9070] device bridge_slave_0 entered promiscuous mode [ 99.483422][ T9066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.512735][ T9070] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.519825][ T9070] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.528694][ T9070] device bridge_slave_1 entered promiscuous mode [ 99.545372][ T9066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.561705][ T9069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.579470][ T9069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.603319][ T9075] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.610688][ T9075] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.618444][ T9075] device bridge_slave_0 entered promiscuous mode [ 99.633494][ T9076] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.640646][ T9076] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.648381][ T9076] device bridge_slave_0 entered promiscuous mode [ 99.667503][ T9073] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.674807][ T9073] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.683380][ T9073] device bridge_slave_0 entered promiscuous mode [ 99.698330][ T9075] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.705600][ T9075] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.713508][ T9075] device bridge_slave_1 entered promiscuous mode [ 99.727408][ T9076] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.735051][ T9076] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.742979][ T9076] device bridge_slave_1 entered promiscuous mode [ 99.752397][ T9069] team0: Port device team_slave_0 added [ 99.765358][ T9073] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.773824][ T9073] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.781844][ T9073] device bridge_slave_1 entered promiscuous mode [ 99.791012][ T9070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.809673][ T9066] team0: Port device team_slave_0 added [ 99.831035][ T9069] team0: Port device team_slave_1 added [ 99.839801][ T9070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.863687][ T9066] team0: Port device team_slave_1 added [ 99.883921][ T9075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.895064][ T9076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.906649][ T9073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.918407][ T9073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.930349][ T9070] team0: Port device team_slave_0 added [ 99.938284][ T9075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.956453][ T9076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.981786][ T9070] team0: Port device team_slave_1 added [ 100.011291][ T9075] team0: Port device team_slave_0 added [ 100.040038][ T9073] team0: Port device team_slave_0 added [ 100.094006][ T9066] device hsr_slave_0 entered promiscuous mode [ 100.160625][ T9066] device hsr_slave_1 entered promiscuous mode [ 100.246707][ T9075] team0: Port device team_slave_1 added [ 100.261359][ T9073] team0: Port device team_slave_1 added [ 100.322555][ T9069] device hsr_slave_0 entered promiscuous mode [ 100.360785][ T9069] device hsr_slave_1 entered promiscuous mode [ 100.410495][ T9069] debugfs: Directory 'hsr0' with parent '/' already present! [ 100.421203][ T9076] team0: Port device team_slave_0 added [ 100.429165][ T9076] team0: Port device team_slave_1 added [ 100.533542][ T9070] device hsr_slave_0 entered promiscuous mode [ 100.570560][ T9070] device hsr_slave_1 entered promiscuous mode [ 100.620504][ T9070] debugfs: Directory 'hsr0' with parent '/' already present! [ 100.683844][ T9073] device hsr_slave_0 entered promiscuous mode [ 100.721972][ T9073] device hsr_slave_1 entered promiscuous mode [ 100.790426][ T9073] debugfs: Directory 'hsr0' with parent '/' already present! [ 100.872440][ T9076] device hsr_slave_0 entered promiscuous mode [ 100.940854][ T9076] device hsr_slave_1 entered promiscuous mode [ 101.010308][ T9076] debugfs: Directory 'hsr0' with parent '/' already present! [ 101.074660][ T9075] device hsr_slave_0 entered promiscuous mode [ 101.120769][ T9075] device hsr_slave_1 entered promiscuous mode [ 101.190328][ T9075] debugfs: Directory 'hsr0' with parent '/' already present! [ 101.385256][ T9066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.417236][ T9075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.434373][ T9073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.466710][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 101.476434][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.488352][ T9066] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.506773][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 101.517795][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.537907][ T9073] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.549656][ T9069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.558887][ T9079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 101.568367][ T9079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 101.577607][ T9079] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.584862][ T9079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.593871][ T9079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 101.602143][ T9079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.612958][ T9075] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.633880][ T9079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 101.642155][ T9079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 101.651096][ T9079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 101.659450][ T9079] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.666557][ T9079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.675116][ T9079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 101.697440][ T9070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.708049][ T9076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.728638][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 101.738255][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 101.748182][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.755299][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.763280][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 101.772395][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 101.780894][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.787934][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.795610][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 101.805080][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 101.813018][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.821396][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 101.829890][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 101.838346][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.845429][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.853515][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 101.861758][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 101.881968][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 101.894371][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 101.902945][ T3511] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.910016][ T3511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.918364][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 101.927257][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 101.935286][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.953317][ T9076] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.974620][ T9069] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.985731][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 101.995629][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 102.005355][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 102.013966][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 102.023116][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 102.031623][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 102.040670][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 102.049003][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 102.057407][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.065773][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 102.092194][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 102.105468][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 102.114086][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 102.123433][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 102.131903][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 102.140366][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 102.148589][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 102.157194][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 102.165958][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 102.174587][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 102.184155][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 102.192200][ T3511] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 102.202740][ T9066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 102.213896][ T9070] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.223131][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 102.232961][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 102.241529][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.248551][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.266977][ T9075] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 102.278438][ T9075] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 102.314365][ T9084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 102.326687][ T9084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 102.335813][ T9084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 102.345152][ T9084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 102.353963][ T9084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 102.363192][ T9084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 102.371587][ T9084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 102.379710][ T9084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 102.388134][ T9084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 102.396487][ T9084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 102.404998][ T9084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 102.413325][ T9084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 102.422234][ T9084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 102.430777][ T9084] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.437846][ T9084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.445630][ T9084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 102.454194][ T9084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 102.463268][ T9084] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.470380][ T9084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.478353][ T9084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 102.486989][ T9084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 102.495635][ T9084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 102.504102][ T9084] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.511202][ T9084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.518738][ T9084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 102.530568][ T9073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 102.571254][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 102.578839][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 102.593449][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 102.602692][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 102.612155][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 102.620742][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 102.629256][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 102.638096][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 102.647011][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 102.655485][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.662549][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.670041][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 102.678758][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 102.687401][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.694530][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.702225][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 102.711247][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 102.719820][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 102.728488][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 102.736882][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 102.745582][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 102.773469][ T9075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.783461][ T9066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.819513][ T9073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.828286][ T9084] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 102.837287][ T9084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 102.847200][ T9084] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 102.868350][ T9084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 102.877955][ T9084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 102.886980][ T9084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 102.895810][ T9084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 102.904878][ T9084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 102.913565][ T9084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 102.922789][ T9084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 102.931244][ T9084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 102.939521][ T9084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 102.962403][ T9069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 102.972156][ T9084] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 102.980747][ T9084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 102.989268][ T9084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 102.997997][ T9084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 103.007609][ T9084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 103.016493][ T9084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 103.025390][ T9084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 103.034210][ T9084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 103.043317][ T9084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 103.054538][ T9076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 103.071676][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 103.116613][ T9069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.143283][ T9070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.157794][ T9076] 8021q: adding VLAN 0 to HW filter on device batadv0 2019/07/31 10:38:31 executed programs: 9 [ 105.230609][ T9245] ================================================================== [ 105.238772][ T9245] BUG: KASAN: use-after-free in __lock_acquire+0x3b78/0x4c30 [ 105.246149][ T9245] Read of size 8 at addr ffff8880a85fb6b8 by task syz-executor.3/9245 [ 105.254291][ T9245] [ 105.256638][ T9245] CPU: 1 PID: 9245 Comm: syz-executor.3 Not tainted 5.2.0+ #97 [ 105.264216][ T9245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 105.274293][ T9245] Call Trace: [ 105.277711][ T9245] dump_stack+0x172/0x1f0 [ 105.282064][ T9245] ? __lock_acquire+0x3b78/0x4c30 [ 105.287125][ T9245] print_address_description.cold+0xd4/0x306 [ 105.293124][ T9245] ? __lock_acquire+0x3b78/0x4c30 [ 105.298175][ T9245] ? __lock_acquire+0x3b78/0x4c30 [ 105.303226][ T9245] __kasan_report.cold+0x1b/0x36 [ 105.308213][ T9245] ? __lock_acquire+0x3b78/0x4c30 [ 105.313252][ T9245] kasan_report+0x12/0x17 [ 105.317594][ T9245] __asan_report_load8_noabort+0x14/0x20 [ 105.323242][ T9245] __lock_acquire+0x3b78/0x4c30 [ 105.328114][ T9245] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 105.333590][ T9245] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 105.339072][ T9245] ? lockdep_hardirqs_on+0x418/0x5d0 [ 105.344372][ T9245] ? retint_kernel+0x2b/0x2b [ 105.348975][ T9245] ? trace_hardirqs_on_caller+0x6a/0x240 [ 105.354626][ T9245] ? mark_held_locks+0xf0/0xf0 [ 105.359421][ T9245] ? preempt_schedule_irq+0xf3/0x160 [ 105.364721][ T9245] ? retint_kernel+0x2b/0x2b [ 105.369337][ T9245] lock_acquire+0x190/0x410 [ 105.373903][ T9245] ? sk_psock_unlink+0x250/0x4b0 [ 105.378854][ T9245] _raw_spin_lock_bh+0x33/0x50 [ 105.383620][ T9245] ? sk_psock_unlink+0x250/0x4b0 [ 105.383633][ T9245] sk_psock_unlink+0x250/0x4b0 [ 105.383658][ T9245] ? sk_psock_link_pop+0x186/0x1f0 [ 105.383689][ T9245] ? tcp_check_oom+0x560/0x560 [ 105.383706][ T9245] tcp_bpf_remove+0x21/0x50 [ 105.383717][ T9245] tcp_bpf_close+0x130/0x390 [ 105.383731][ T9245] tls_sk_proto_close+0x2f8/0x6b0 [ 105.383758][ T9245] ? __sock_release+0x89/0x280 [ 105.383768][ T9245] ? tcp_bpf_recvmsg+0xa70/0xa70 [ 105.417490][ T9245] ? wait_on_pending_writer+0x420/0x420 [ 105.417506][ T9245] ? ip_mc_drop_socket+0x211/0x270 [ 105.417521][ T9245] ? down_write+0xdf/0x150 [ 105.417535][ T9245] inet_release+0xed/0x200 [ 105.417573][ T9245] inet6_release+0x53/0x80 [ 105.417594][ T9245] __sock_release+0xce/0x280 [ 105.428073][ T9245] sock_close+0x1e/0x30 [ 105.428089][ T9245] __fput+0x2ff/0x890 [ 105.428103][ T9245] ? __sock_release+0x280/0x280 [ 105.428116][ T9245] ____fput+0x16/0x20 [ 105.428129][ T9245] task_work_run+0x145/0x1c0 [ 105.428147][ T9245] exit_to_usermode_loop+0x316/0x380 [ 105.428167][ T9245] do_syscall_64+0x5a9/0x6a0 [ 105.436447][ T3901] kobject: 'loop1' (00000000a9a51132): kobject_uevent_env [ 105.438816][ T9245] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 105.438828][ T9245] RIP: 0033:0x4134f0 [ 105.438843][ T9245] Code: 01 f0 ff ff 0f 83 30 1b 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d 9d 2d 66 00 00 75 14 b8 03 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff [ 105.438850][ T9245] RSP: 002b:00007fffd1bda858 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 105.438862][ T9245] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 00000000004134f0 [ 105.438870][ T9245] RDX: 0000001b32720000 RSI: 0000000000000000 RDI: 0000000000000005 [ 105.438876][ T9245] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffffffffffff [ 105.438883][ T9245] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000075bf20 [ 105.438899][ T9245] R13: 0000000000000005 R14: 0000000000761178 R15: ffffffffffffffff [ 105.444360][ T3901] kobject: 'loop1' (00000000a9a51132): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 105.447726][ T9245] [ 105.447736][ T9245] Allocated by task 9245: [ 105.447754][ T9245] save_stack+0x23/0x90 [ 105.447766][ T9245] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 105.447776][ T9245] kasan_kmalloc+0x9/0x10 [ 105.447787][ T9245] kmem_cache_alloc_trace+0x158/0x790 [ 105.447801][ T9245] sock_map_alloc+0x1bb/0x3a0 [ 105.447814][ T9245] __do_sys_bpf+0x475/0x42f0 [ 105.447825][ T9245] __x64_sys_bpf+0x73/0xb0 [ 105.447846][ T9245] do_syscall_64+0xfd/0x6a0 [ 105.455078][ T3901] kobject: 'loop5' (0000000087886a17): kobject_uevent_env [ 105.456864][ T9245] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 105.456868][ T9245] [ 105.456874][ T9245] Freed by task 9085: [ 105.456887][ T9245] save_stack+0x23/0x90 [ 105.456899][ T9245] __kasan_slab_free+0x102/0x150 [ 105.456909][ T9245] kasan_slab_free+0xe/0x10 [ 105.456919][ T9245] kfree+0x10a/0x2c0 [ 105.456932][ T9245] sock_map_free+0x22a/0x310 [ 105.456954][ T9245] bpf_map_free_deferred+0xb3/0x100 [ 105.461970][ T3901] kobject: 'loop5' (0000000087886a17): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 105.465074][ T9245] process_one_work+0x9af/0x1740 [ 105.465086][ T9245] worker_thread+0x98/0xe40 [ 105.465097][ T9245] kthread+0x361/0x430 [ 105.465108][ T9245] ret_from_fork+0x24/0x30 [ 105.465112][ T9245] [ 105.465123][ T9245] The buggy address belongs to the object at ffff8880a85fb580 [ 105.465123][ T9245] which belongs to the cache kmalloc-512 of size 512 [ 105.465134][ T9245] The buggy address is located 312 bytes inside of [ 105.465134][ T9245] 512-byte region [ffff8880a85fb580, ffff8880a85fb780) [ 105.465138][ T9245] The buggy address belongs to the page: [ 105.465149][ T9245] page:ffffea0002a17ec0 refcount:1 mapcount:0 mapping:ffff8880aa400a80 index:0x0 [ 105.472848][ T3901] kobject: 'loop0' (000000008fe08940): kobject_uevent_env [ 105.473977][ T9245] flags: 0x1fffc0000000200(slab) [ 105.473996][ T9245] raw: 01fffc0000000200 ffffea0002a2a4c8 ffffea0002a1aec8 ffff8880aa400a80 [ 105.474012][ T9245] raw: 0000000000000000 ffff8880a85fb080 0000000100000006 0000000000000000 [ 105.474017][ T9245] page dumped because: kasan: bad access detected [ 105.474020][ T9245] [ 105.474024][ T9245] Memory state around the buggy address: [ 105.474034][ T9245] ffff8880a85fb580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 105.474048][ T9245] ffff8880a85fb600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 105.478786][ T3901] kobject: 'loop0' (000000008fe08940): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 105.483900][ T9245] >ffff8880a85fb680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 105.483905][ T9245] ^ [ 105.483913][ T9245] ffff8880a85fb700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 105.483922][ T9245] ffff8880a85fb780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 105.483926][ T9245] ================================================================== [ 105.483930][ T9245] Disabling lock debugging due to kernel taint [ 105.483938][ T9245] Kernel panic - not syncing: panic_on_warn set ... [ 105.483952][ T9245] CPU: 1 PID: 9245 Comm: syz-executor.3 Tainted: G B 5.2.0+ #97 [ 105.483959][ T9245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 105.483963][ T9245] Call Trace: [ 105.483984][ T9245] dump_stack+0x172/0x1f0 [ 105.484005][ T9245] panic+0x2dc/0x755 [ 105.492451][ T3901] kobject: 'loop5' (0000000087886a17): kobject_uevent_env [ 105.495790][ T9245] ? add_taint.cold+0x16/0x16 [ 105.495808][ T9245] ? __lock_acquire+0x3b78/0x4c30 [ 105.495831][ T9245] ? trace_hardirqs_off+0x62/0x240 [ 105.502196][ T3901] kobject: 'loop5' (0000000087886a17): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 105.505602][ T9245] ? trace_hardirqs_off+0x59/0x240 [ 105.505620][ T9245] ? __lock_acquire+0x3b78/0x4c30 [ 105.505634][ T9245] end_report+0x47/0x4f [ 105.505653][ T9245] ? __lock_acquire+0x3b78/0x4c30 [ 105.527696][ T3901] kobject: 'loop1' (00000000a9a51132): kobject_uevent_env [ 105.534037][ T9245] __kasan_report.cold+0xe/0x36 [ 105.534055][ T9245] ? __lock_acquire+0x3b78/0x4c30 [ 105.534068][ T9245] kasan_report+0x12/0x17 [ 105.534081][ T9245] __asan_report_load8_noabort+0x14/0x20 [ 105.534093][ T9245] __lock_acquire+0x3b78/0x4c30 [ 105.534108][ T9245] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 105.534129][ T9245] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 105.542795][ T3901] kobject: 'loop1' (00000000a9a51132): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 105.550184][ T9245] ? lockdep_hardirqs_on+0x418/0x5d0 [ 105.550197][ T9245] ? retint_kernel+0x2b/0x2b [ 105.550212][ T9245] ? trace_hardirqs_on_caller+0x6a/0x240 [ 105.550226][ T9245] ? mark_held_locks+0xf0/0xf0 [ 105.550240][ T9245] ? preempt_schedule_irq+0xf3/0x160 [ 105.550249][ T9245] ? retint_kernel+0x2b/0x2b [ 105.550264][ T9245] lock_acquire+0x190/0x410 [ 105.550288][ T9245] ? sk_psock_unlink+0x250/0x4b0 [ 105.561481][ T3901] kobject: 'loop0' (000000008fe08940): kobject_uevent_env [ 105.566822][ T9245] _raw_spin_lock_bh+0x33/0x50 [ 105.566838][ T9245] ? sk_psock_unlink+0x250/0x4b0 [ 105.566858][ T9245] sk_psock_unlink+0x250/0x4b0 [ 105.574983][ T3901] kobject: 'loop0' (000000008fe08940): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 105.585046][ T9245] ? sk_psock_link_pop+0x186/0x1f0 [ 105.585061][ T9245] ? tcp_check_oom+0x560/0x560 [ 105.585073][ T9245] tcp_bpf_remove+0x21/0x50 [ 105.585084][ T9245] tcp_bpf_close+0x130/0x390 [ 105.585097][ T9245] tls_sk_proto_close+0x2f8/0x6b0 [ 105.585109][ T9245] ? __sock_release+0x89/0x280 [ 105.585128][ T9245] ? tcp_bpf_recvmsg+0xa70/0xa70 [ 105.589649][ T3901] kobject: 'loop1' (00000000a9a51132): kobject_uevent_env [ 105.591766][ T9245] ? wait_on_pending_writer+0x420/0x420 [ 105.591783][ T9245] ? ip_mc_drop_socket+0x211/0x270 [ 105.591797][ T9245] ? down_write+0xdf/0x150 [ 105.591810][ T9245] inet_release+0xed/0x200 [ 105.591830][ T9245] inet6_release+0x53/0x80 [ 105.596973][ T3901] kobject: 'loop1' (00000000a9a51132): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 105.601588][ T9245] __sock_release+0xce/0x280 [ 105.601602][ T9245] sock_close+0x1e/0x30 [ 105.601615][ T9245] __fput+0x2ff/0x890 [ 105.601628][ T9245] ? __sock_release+0x280/0x280 [ 105.601640][ T9245] ____fput+0x16/0x20 [ 105.601658][ T9245] task_work_run+0x145/0x1c0 [ 105.615651][ T3901] kobject: 'loop4' (00000000a0a885d3): kobject_uevent_env [ 105.615995][ T9245] exit_to_usermode_loop+0x316/0x380 [ 105.616012][ T9245] do_syscall_64+0x5a9/0x6a0 [ 105.616033][ T9245] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 105.623096][ T3901] kobject: 'loop4' (00000000a0a885d3): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 105.625097][ T9245] RIP: 0033:0x4134f0 [ 105.625113][ T9245] Code: 01 f0 ff ff 0f 83 30 1b 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d 9d 2d 66 00 00 75 14 b8 03 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff [ 105.625119][ T9245] RSP: 002b:00007fffd1bda858 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 105.625138][ T9245] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 00000000004134f0 [ 105.749060][ T3901] kobject: 'loop2' (0000000076d1d9af): kobject_uevent_env [ 105.755925][ T9245] RDX: 0000001b32720000 RSI: 0000000000000000 RDI: 0000000000000005 [ 105.755932][ T9245] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffffffffffff [ 105.755938][ T9245] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000075bf20 [ 105.755945][ T9245] R13: 0000000000000005 R14: 0000000000761178 R15: ffffffffffffffff [ 105.761984][ T9245] Kernel Offset: disabled [ 106.292751][ T9245] Rebooting in 86400 seconds..