Warning: Permanently added '10.128.1.31' (ECDSA) to the list of known hosts. 2019/07/01 20:26:04 parsed 1 programs 2019/07/01 20:26:07 executed programs: 0 syzkaller login: [ 71.808757][ T8790] IPVS: ftp: loaded support on port[0] = 21 [ 71.815233][ T8795] IPVS: ftp: loaded support on port[0] = 21 [ 71.822427][ T8791] IPVS: ftp: loaded support on port[0] = 21 [ 71.827955][ T8794] IPVS: ftp: loaded support on port[0] = 21 [ 71.841780][ T8797] IPVS: ftp: loaded support on port[0] = 21 [ 71.863757][ T8798] IPVS: ftp: loaded support on port[0] = 21 [ 72.206365][ T8794] chnl_net:caif_netlink_parms(): no params data found [ 72.222098][ T8798] chnl_net:caif_netlink_parms(): no params data found [ 72.313261][ T8797] chnl_net:caif_netlink_parms(): no params data found [ 72.327465][ T8790] chnl_net:caif_netlink_parms(): no params data found [ 72.336327][ T8791] chnl_net:caif_netlink_parms(): no params data found [ 72.353719][ T8794] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.361309][ T8794] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.368980][ T8794] device bridge_slave_0 entered promiscuous mode [ 72.415610][ T8794] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.422781][ T8794] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.430421][ T8794] device bridge_slave_1 entered promiscuous mode [ 72.462001][ T8794] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 72.477540][ T8794] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 72.515530][ T8798] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.523161][ T8798] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.531153][ T8798] device bridge_slave_0 entered promiscuous mode [ 72.560230][ T8790] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.569266][ T8790] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.578132][ T8790] device bridge_slave_0 entered promiscuous mode [ 72.592026][ T8798] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.599089][ T8798] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.609237][ T8798] device bridge_slave_1 entered promiscuous mode [ 72.619827][ T8794] team0: Port device team_slave_0 added [ 72.625728][ T8795] chnl_net:caif_netlink_parms(): no params data found [ 72.634412][ T8797] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.642068][ T8797] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.649709][ T8797] device bridge_slave_0 entered promiscuous mode [ 72.657220][ T8790] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.667116][ T8790] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.674892][ T8790] device bridge_slave_1 entered promiscuous mode [ 72.699917][ T8794] team0: Port device team_slave_1 added [ 72.711768][ T8797] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.718834][ T8797] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.727146][ T8797] device bridge_slave_1 entered promiscuous mode [ 72.756490][ T8790] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 72.782802][ T8791] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.789858][ T8791] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.799477][ T8791] device bridge_slave_0 entered promiscuous mode [ 72.808416][ T8798] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 72.819162][ T8790] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 72.848679][ T8791] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.857191][ T8791] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.864903][ T8791] device bridge_slave_1 entered promiscuous mode [ 72.873387][ T8798] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 72.901081][ T8797] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 72.953990][ T8794] device hsr_slave_0 entered promiscuous mode [ 72.991932][ T8794] device hsr_slave_1 entered promiscuous mode [ 73.060163][ T8791] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 73.070174][ T8797] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 73.080103][ T8790] team0: Port device team_slave_0 added [ 73.091456][ T8795] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.098526][ T8795] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.106406][ T8795] device bridge_slave_0 entered promiscuous mode [ 73.115503][ T8791] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 73.149239][ T8790] team0: Port device team_slave_1 added [ 73.156512][ T8798] team0: Port device team_slave_0 added [ 73.165299][ T8795] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.172469][ T8795] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.180054][ T8795] device bridge_slave_1 entered promiscuous mode [ 73.188934][ T8791] team0: Port device team_slave_0 added [ 73.214151][ T8798] team0: Port device team_slave_1 added [ 73.237304][ T8791] team0: Port device team_slave_1 added [ 73.254198][ T8797] team0: Port device team_slave_0 added [ 73.323634][ T8790] device hsr_slave_0 entered promiscuous mode [ 73.360937][ T8790] device hsr_slave_1 entered promiscuous mode [ 73.443770][ T8791] device hsr_slave_0 entered promiscuous mode [ 73.481265][ T8791] device hsr_slave_1 entered promiscuous mode [ 73.522020][ T8797] team0: Port device team_slave_1 added [ 73.529732][ T8795] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 73.542983][ T8795] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 73.623267][ T8797] device hsr_slave_0 entered promiscuous mode [ 73.661014][ T8797] device hsr_slave_1 entered promiscuous mode [ 73.743482][ T8798] device hsr_slave_0 entered promiscuous mode [ 73.780928][ T8798] device hsr_slave_1 entered promiscuous mode [ 73.826753][ T8795] team0: Port device team_slave_0 added [ 73.835893][ T8795] team0: Port device team_slave_1 added [ 73.902531][ T8795] device hsr_slave_0 entered promiscuous mode [ 73.940835][ T8795] device hsr_slave_1 entered promiscuous mode [ 74.077702][ T8794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.124204][ T8794] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.152741][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.161422][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.197839][ T8795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.207734][ T8801] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 74.218754][ T8801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.227694][ T8801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.237287][ T8801] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.244488][ T8801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.253009][ T8801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.262028][ T8801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.270292][ T8801] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.277380][ T8801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.284870][ T8801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.306461][ T8797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.319068][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.327739][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.336508][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.345210][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.354841][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.379092][ T8791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.392224][ T8797] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.411684][ T8790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.429693][ T8794] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.441927][ T8794] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.453392][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.465465][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.473281][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.481186][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.488839][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.498495][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.507728][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.516454][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.525146][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.533638][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.557782][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.566963][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.575615][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.584472][ T2909] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.591584][ T2909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.599163][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.607012][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.614682][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.623362][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.632497][ T2909] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.639645][ T2909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.647299][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.657375][ T8791] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.666779][ T8795] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.682327][ T8790] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.698759][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.708712][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.716618][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.724418][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.733731][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.742380][ T2909] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.749420][ T2909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.757089][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.765956][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.800054][ T8798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.816026][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.828772][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.837540][ T2909] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.844643][ T2909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.852775][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.861741][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.869988][ T2909] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.877157][ T2909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.884726][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.893456][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.902098][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.910404][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.919172][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.927770][ T2909] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.934866][ T2909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.942890][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.951187][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.973335][ T8798] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.991448][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.000165][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.009001][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.018277][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.026883][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.034011][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.041820][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.050268][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.058102][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.066117][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.075196][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.083839][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.095446][ T8806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.104566][ T8806] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.128151][ T8794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.147411][ T8806] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.158753][ T8806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.173586][ T8806] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.183918][ T8806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.192809][ T8806] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.201505][ T8806] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.208545][ T8806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.216120][ T8806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.225171][ T8806] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.233723][ T8806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.242407][ T8806] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.250793][ T8806] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.257829][ T8806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.265698][ T8806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.274492][ T8806] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.283101][ T8806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.291838][ T8806] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.300210][ T8806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.309440][ T8806] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.317838][ T8806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.326501][ T8806] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.335067][ T8806] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.342168][ T8806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.351145][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.359180][ T8806] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.367152][ T8806] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.399108][ T8795] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.409836][ T8795] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.429868][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.447365][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.457828][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.467000][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.476031][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.484892][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.493623][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.502422][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.511013][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.519194][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.528923][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.537062][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.545076][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.553709][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.581969][ T8797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.602207][ T8795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.614240][ T8790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.643615][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.660094][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.668681][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.683079][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.693275][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.702043][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.710117][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.721602][ T8791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.749851][ T8790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.790017][ T8791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.827862][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.852512][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.874816][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.926280][ T8801] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.949379][ T8801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.980319][ T8801] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.990126][ T8801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.998890][ T8801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.007233][ T8801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.015662][ T8801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.027987][ T8798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.105170][ T8798] 8021q: adding VLAN 0 to HW filter on device batadv0 2019/07/01 20:26:12 executed programs: 25 [ 78.284075][ T9103] ================================================================== [ 78.292316][ T9103] BUG: KASAN: use-after-free in sk_psock_unlink+0x3dd/0x4b0 [ 78.299608][ T9103] Read of size 4 at addr ffff88808a1232d8 by task syz-executor.4/9103 [ 78.307756][ T9103] [ 78.310099][ T9103] CPU: 0 PID: 9103 Comm: syz-executor.4 Not tainted 5.2.0-rc7 #46 [ 78.317897][ T9103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 78.327949][ T9103] Call Trace: [ 78.331253][ T9103] dump_stack+0x172/0x1f0 [ 78.335595][ T9103] ? sk_psock_unlink+0x3dd/0x4b0 [ 78.340591][ T9103] ? tcp_check_oom+0x560/0x560 [ 78.345366][ T9103] print_address_description.cold+0x7c/0x20d [ 78.351353][ T9103] ? sk_psock_unlink+0x3dd/0x4b0 [ 78.356297][ T9103] ? sk_psock_unlink+0x3dd/0x4b0 [ 78.361250][ T9103] ? tcp_check_oom+0x560/0x560 [ 78.366112][ T9103] __kasan_report.cold+0x1b/0x40 [ 78.371065][ T9103] ? sk_psock_unlink+0x3dd/0x4b0 [ 78.376016][ T9103] kasan_report+0x12/0x20 [ 78.380357][ T9103] __asan_report_load4_noabort+0x14/0x20 [ 78.385994][ T9103] sk_psock_unlink+0x3dd/0x4b0 [ 78.390765][ T9103] ? sk_psock_link_pop+0x186/0x1f0 [ 78.395867][ T9103] ? tcp_check_oom+0x560/0x560 [ 78.400621][ T9103] tcp_bpf_remove+0x21/0x50 [ 78.405140][ T9103] tcp_bpf_close+0x130/0x390 [ 78.409749][ T9103] inet_release+0xe0/0x1f0 [ 78.414180][ T9103] inet6_release+0x53/0x80 [ 78.418613][ T9103] __sock_release+0xce/0x2a0 [ 78.423222][ T9103] sock_close+0x1b/0x30 [ 78.427388][ T9103] __fput+0x2ff/0x890 [ 78.431383][ T9103] ? __sock_release+0x2a0/0x2a0 [ 78.436241][ T9103] ____fput+0x16/0x20 [ 78.440236][ T9103] task_work_run+0x145/0x1c0 [ 78.444847][ T9103] exit_to_usermode_loop+0x273/0x2c0 [ 78.450147][ T9103] do_syscall_64+0x58e/0x680 [ 78.454756][ T9103] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 78.460659][ T9103] RIP: 0033:0x413201 [ 78.464562][ T9103] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 78.484172][ T9103] RSP: 002b:00007ffc151baae0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 78.492589][ T9103] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000413201 [ 78.492604][ T9103] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 78.492612][ T9103] RBP: 0000000000000000 R08: ffffffffffffffff R09: ffffffffffffffff [ 78.492620][ T9103] R10: 00007ffc151babc0 R11: 0000000000000293 R12: 00000000007610a8 [ 78.492628][ T9103] R13: 0000000000013194 R14: 00000000000131c1 R15: ffffffffffffffff [ 78.492660][ T9103] [ 78.492667][ T9103] Allocated by task 9115: [ 78.492684][ T9103] save_stack+0x23/0x90 [ 78.524665][ T9103] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 78.524678][ T9103] kasan_kmalloc+0x9/0x10 [ 78.524691][ T9103] kmem_cache_alloc_trace+0x151/0x750 [ 78.524704][ T9103] sock_hash_alloc+0x1e3/0x5b0 [ 78.524717][ T9103] __do_sys_bpf+0x730/0x43d0 [ 78.524728][ T9103] __x64_sys_bpf+0x73/0xb0 [ 78.524749][ T9103] do_syscall_64+0xfd/0x680 [ 78.577023][ T9103] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 78.582897][ T9103] [ 78.585222][ T9103] Freed by task 8937: [ 78.589211][ T9103] save_stack+0x23/0x90 [ 78.593375][ T9103] __kasan_slab_free+0x102/0x150 [ 78.598303][ T9103] kasan_slab_free+0xe/0x10 [ 78.602798][ T9103] kfree+0xcf/0x220 [ 78.606602][ T9103] sock_hash_free+0x327/0x4a0 [ 78.611289][ T9103] bpf_map_free_deferred+0xb4/0xe0 [ 78.616401][ T9103] process_one_work+0x989/0x1790 [ 78.621329][ T9103] worker_thread+0x98/0xe40 [ 78.625813][ T9103] kthread+0x354/0x420 [ 78.629875][ T9103] ret_from_fork+0x24/0x30 [ 78.634288][ T9103] [ 78.636624][ T9103] The buggy address belongs to the object at ffff88808a1232c0 [ 78.636624][ T9103] which belongs to the cache kmalloc-512 of size 512 [ 78.650694][ T9103] The buggy address is located 24 bytes inside of [ 78.650694][ T9103] 512-byte region [ffff88808a1232c0, ffff88808a1234c0) [ 78.650700][ T9103] The buggy address belongs to the page: [ 78.650713][ T9103] page:ffffea00022848c0 refcount:1 mapcount:0 mapping:ffff8880aa400940 index:0x0 [ 78.650725][ T9103] flags: 0x1fffc0000000200(slab) [ 78.650742][ T9103] raw: 01fffc0000000200 ffffea0002644d08 ffffea00026ea748 ffff8880aa400940 [ 78.650757][ T9103] raw: 0000000000000000 ffff88808a123040 0000000100000006 0000000000000000 [ 78.650762][ T9103] page dumped because: kasan: bad access detected [ 78.650765][ T9103] [ 78.650769][ T9103] Memory state around the buggy address: [ 78.650780][ T9103] ffff88808a123180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 78.650796][ T9103] ffff88808a123200: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 78.677810][ T3879] kobject: 'loop3' (000000001c2669cd): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 78.678710][ T9103] >ffff88808a123280: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 78.678717][ T9103] ^ [ 78.678728][ T9103] ffff88808a123300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 78.678739][ T9103] ffff88808a123380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 78.678744][ T9103] ================================================================== [ 78.678749][ T9103] Disabling lock debugging due to kernel taint [ 78.680265][ T9103] Kernel panic - not syncing: panic_on_warn set ... [ 78.713545][ T3879] kobject: 'loop2' (000000004b267dae): kobject_uevent_env [ 78.715216][ T9103] CPU: 0 PID: 9103 Comm: syz-executor.4 Tainted: G B 5.2.0-rc7 #46 [ 78.715223][ T9103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 78.715228][ T9103] Call Trace: [ 78.715253][ T9103] dump_stack+0x172/0x1f0 [ 78.735705][ T3879] kobject: 'loop2' (000000004b267dae): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 78.741525][ T9103] ? tcp_check_oom+0x560/0x560 [ 78.741541][ T9103] panic+0x2cb/0x744 [ 78.741555][ T9103] ? __warn_printk+0xf3/0xf3 [ 78.741568][ T9103] ? sk_psock_unlink+0x3dd/0x4b0 [ 78.741580][ T9103] ? tcp_check_oom+0x560/0x560 [ 78.741595][ T9103] ? preempt_schedule+0x4b/0x60 [ 78.741610][ T9103] ? ___preempt_schedule+0x16/0x18 [ 78.741632][ T9103] ? trace_hardirqs_on+0x5e/0x220 [ 78.763200][ T3879] kobject: 'loop0' (00000000df61426c): kobject_uevent_env [ 78.764758][ T9103] ? sk_psock_unlink+0x3dd/0x4b0 [ 78.764780][ T9103] ? tcp_check_oom+0x560/0x560 [ 78.775772][ T3879] kobject: 'loop0' (00000000df61426c): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 78.780883][ T9103] end_report+0x47/0x4f [ 78.780898][ T9103] ? sk_psock_unlink+0x3dd/0x4b0 [ 78.780910][ T9103] __kasan_report.cold+0xe/0x40 [ 78.780922][ T9103] ? sk_psock_unlink+0x3dd/0x4b0 [ 78.780941][ T9103] kasan_report+0x12/0x20 [ 78.883684][ T3879] kobject: 'loop1' (00000000892dec28): kobject_uevent_env [ 78.887954][ T9103] __asan_report_load4_noabort+0x14/0x20 [ 78.897694][ T3879] kobject: 'loop1' (00000000892dec28): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 78.904920][ T9103] sk_psock_unlink+0x3dd/0x4b0 [ 78.904934][ T9103] ? sk_psock_link_pop+0x186/0x1f0 [ 78.904948][ T9103] ? tcp_check_oom+0x560/0x560 [ 78.904961][ T9103] tcp_bpf_remove+0x21/0x50 [ 78.904973][ T9103] tcp_bpf_close+0x130/0x390 [ 78.904994][ T9103] inet_release+0xe0/0x1f0 [ 78.978990][ T9103] inet6_release+0x53/0x80 [ 78.983395][ T9103] __sock_release+0xce/0x2a0 [ 78.987996][ T9103] sock_close+0x1b/0x30 [ 78.992147][ T9103] __fput+0x2ff/0x890 [ 78.996123][ T9103] ? __sock_release+0x2a0/0x2a0 [ 79.000959][ T9103] ____fput+0x16/0x20 [ 79.004926][ T9103] task_work_run+0x145/0x1c0 [ 79.009504][ T9103] exit_to_usermode_loop+0x273/0x2c0 [ 79.014772][ T9103] do_syscall_64+0x58e/0x680 [ 79.019456][ T9103] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 79.025330][ T9103] RIP: 0033:0x413201 [ 79.029205][ T9103] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 79.048795][ T9103] RSP: 002b:00007ffc151baae0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 79.057236][ T9103] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000413201 [ 79.065216][ T9103] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 79.073200][ T9103] RBP: 0000000000000000 R08: ffffffffffffffff R09: ffffffffffffffff [ 79.081177][ T9103] R10: 00007ffc151babc0 R11: 0000000000000293 R12: 00000000007610a8 [ 79.089134][ T9103] R13: 0000000000013194 R14: 00000000000131c1 R15: ffffffffffffffff [ 79.098018][ T9103] Kernel Offset: disabled [ 79.102355][ T9103] Rebooting in 86400 seconds..