[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 28.920843] kauditd_printk_skb: 8 callbacks suppressed [ 28.920854] audit: type=1800 audit(1544592492.610:29): pid=5889 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 28.947821] audit: type=1800 audit(1544592492.610:30): pid=5889 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.35' (ECDSA) to the list of known hosts. 2018/12/12 05:28:20 fuzzer started 2018/12/12 05:28:22 dialing manager at 10.128.0.26:34565 2018/12/12 05:28:22 syscalls: 1 2018/12/12 05:28:22 code coverage: enabled 2018/12/12 05:28:22 comparison tracing: enabled 2018/12/12 05:28:22 setuid sandbox: enabled 2018/12/12 05:28:22 namespace sandbox: enabled 2018/12/12 05:28:22 Android sandbox: /sys/fs/selinux/policy does not exist 2018/12/12 05:28:22 fault injection: enabled 2018/12/12 05:28:22 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/12/12 05:28:22 net packet injection: enabled 2018/12/12 05:28:22 net device setup: enabled 05:31:33 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r1) getsockopt$sock_buf(r2, 0x1, 0x1c, &(0x7f0000000040)=""/201, &(0x7f00000001c0)=0x10) syzkaller login: [ 229.813295] IPVS: ftp: loaded support on port[0] = 21 05:31:33 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast2}, @icmp=@address_request}}}}, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000000)={0x17, 0x1, &(0x7f0000000180)="d4"}) [ 230.065213] IPVS: ftp: loaded support on port[0] = 21 05:31:33 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x7, 0x0, "4877bb1f56d48eb1fa5fac76a792a929a57f6062b013ec6b7a9ee231ea85a1c7f5c8fdf3bcaf6c5bb203dab4011d7c6096609012d3e979295204ae936681b23832f302a5020f3f6af0b1d2fb5a00eb09"}, 0xd8) [ 230.414139] IPVS: ftp: loaded support on port[0] = 21 05:31:34 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0xf00000000000000, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x2b}, @in, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x2e8}}, 0x0) [ 230.961703] IPVS: ftp: loaded support on port[0] = 21 [ 231.463876] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.481746] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.492904] device bridge_slave_0 entered promiscuous mode 05:31:35 executing program 4: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000100)=[{0x0, 0x0, 0x1000}], 0x1) [ 231.579065] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.586504] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.594456] device bridge_slave_1 entered promiscuous mode [ 231.746886] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 231.802406] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.826930] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.847748] device bridge_slave_0 entered promiscuous mode [ 231.852980] IPVS: ftp: loaded support on port[0] = 21 [ 231.941552] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 232.030407] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.036997] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.051960] device bridge_slave_1 entered promiscuous mode [ 232.197664] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 232.241110] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.261502] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.277727] device bridge_slave_0 entered promiscuous mode 05:31:36 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") socket$inet(0x2, 0xa, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000540)="24000000160007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7eb9741a652dd52e2064a072b25a5f4fd10b76ee96773432980f3929df095ca54c4a865ac44b0fb7667a1e5060b8913725013cdfe0a129d6e9ccf56b7dce1e140552c100fb25f09846af3b8da5b5aafa0bfb5db73baa4689abe5afa57f63ecef1b6540a0ac1d", 0x89}], 0x1}, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000900)="a54a1b0ea13eec45f409fe7d274d2ddf21e8f144e05fd365bfd99cdbc332493075c3e6cdaa39f78e667a35995656bb9f8b951a16e4505203d1b4270fb00e8d514e1da3c6f93ef0d8f2a9a5988a249a6a1567e60ea37370f2a6197b762043022bba89b8e2d9fed1ac7991039c3991f182a3274227e1cd674a00b3a000f28b8cc02c2dce9d976165bd477be989e9a3637e92f733d83a98f43e8a858b1ce2541bf9d783a78f7e4f85", 0xa7) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e22}}, 0x10000, 0x66c, 0x8, 0x401, 0x8}, &(0x7f0000000240)=0x98) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000080)=0x2, 0x4) r6 = accept4(r2, &(0x7f0000000000)=@ax25, &(0x7f00000005c0)=0xffffffd6, 0x80000) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f00000001c0)={0x0, @speck128, 0x1, "f4490ab10d37576c"}) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r8 = socket(0xf, 0x80000, 0x2) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f0000000840), &(0x7f00000006c0)) ioctl$FITRIM(r7, 0xc0185879, &(0x7f0000000600)={0x8000, 0xe949bd3, 0x6}) setsockopt$sock_int(r8, 0x1, 0x223, &(0x7f0000000880)=0x1, 0xd4dac782) getsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000a00)={r5, 0x5}, &(0x7f0000000a40)=0x8) ioctl(r4, 0x0, &(0x7f0000000100)="70b82a67e8c2458f65f528013566b62b020464f44fefe9e5f90d8532a3291d7321456e021d1d56a67f44ef4a9ddb47c07caefd15a13fcfc9a5a923b1825965485e02a2bac574fd3aee3e4fc20d08b3c3bbd020c21f700f6c609835e1ce0d95499a0afe31418dd8688af7b198950a8d0143a23f6c26e957049cd8fb27fcd547557887d7875d5da52f76") connect$llc(r7, &(0x7f00000000c0)={0x1a, 0x1, 0x5, 0x5, 0xc93, 0x8, @link_local}, 0x10) sendto(r7, &(0x7f00000003c0)="e9d7e018557653e26b2801a0bf97e554b6a7ba3b95654057f5a7f985b353f570ab53fc50f97a47b7ceb6443a3f8714370e14f0b7571595fb50b7d07f628f2ce19a84e892a3fcc8c041c724b11e6b7596c7fce6c604e0ca7dd436c5b124aafd2597efb46c3ec2bcd789e3e497e553198b21d693025c54ca99dea1c5912c7379d430de7dec2701f0dd8720622e", 0x8c, 0x8000, 0x0, 0x0) [ 232.356055] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 232.386178] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 232.409696] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.424045] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.433520] device bridge_slave_1 entered promiscuous mode [ 232.508365] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 232.560970] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 232.696987] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 232.753361] IPVS: ftp: loaded support on port[0] = 21 [ 232.768980] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 232.913517] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 233.046154] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.061037] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.069063] device bridge_slave_0 entered promiscuous mode [ 233.083761] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 233.110505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 233.133265] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 233.174721] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.191135] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.214024] device bridge_slave_1 entered promiscuous mode [ 233.232277] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 233.268184] team0: Port device team_slave_0 added [ 233.278543] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 233.288363] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 233.322787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 233.359916] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 233.422048] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 233.446865] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 233.454302] team0: Port device team_slave_1 added [ 233.478486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 233.536516] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 233.673682] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 233.688036] team0: Port device team_slave_0 added [ 233.694558] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 233.741352] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 233.825704] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 233.834316] team0: Port device team_slave_1 added [ 233.875432] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 233.895363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 233.921054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 233.972092] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 233.997097] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 234.003981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 234.019596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 234.039812] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 234.057843] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 234.077592] team0: Port device team_slave_0 added [ 234.090420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 234.107936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 234.139786] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 234.156999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 234.177588] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 234.199516] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 234.231298] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 234.243423] team0: Port device team_slave_1 added [ 234.277183] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 234.288072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 234.296080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 234.335552] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.350571] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.371537] device bridge_slave_0 entered promiscuous mode [ 234.382896] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 234.394128] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 234.414644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 234.437817] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 234.457829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 234.471821] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 234.505735] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.517065] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.526323] device bridge_slave_1 entered promiscuous mode [ 234.538864] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 234.557959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 234.583951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 234.593353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 234.622415] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 234.636498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 234.654989] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 234.699603] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 234.777120] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 234.784855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 234.803365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 234.838761] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 234.852196] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 234.867697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 234.900778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 235.055940] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 235.077691] team0: Port device team_slave_0 added [ 235.229456] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 235.247503] team0: Port device team_slave_1 added [ 235.253932] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.262228] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.279742] device bridge_slave_0 entered promiscuous mode [ 235.303283] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 235.357117] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 235.366287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 235.387558] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 235.410240] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.436232] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.444818] device bridge_slave_1 entered promiscuous mode [ 235.470961] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 235.520071] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 235.607066] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 235.627704] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 235.635255] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 235.647160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 235.703889] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.710458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.717536] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.723952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.739988] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 235.748565] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 235.806435] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 235.827132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 235.835110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 235.879270] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.885652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.892380] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.898788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.907669] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 235.954241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 235.968305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 236.107857] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 236.233422] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 236.252307] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 236.262842] team0: Port device team_slave_0 added [ 236.380290] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 236.390146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 236.406262] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 236.420654] team0: Port device team_slave_1 added [ 236.431244] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.437674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.444444] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.450852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.493915] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 236.509643] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 236.543601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 236.558223] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 236.648152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 236.764383] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 236.772023] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 236.787745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 236.866291] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 236.885308] team0: Port device team_slave_0 added [ 236.917056] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 236.925201] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 236.937467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 236.967219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 237.015149] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 237.030974] team0: Port device team_slave_1 added [ 237.170687] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 237.186676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 237.197580] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 237.319605] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 237.326498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 237.335185] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 237.481656] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.488087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.494741] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.501202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.511523] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 237.525084] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 237.541326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 237.558216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 237.672539] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 237.691855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 237.707569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 237.986873] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 238.441695] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.448126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.454837] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.461265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.481823] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 238.997021] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 239.185535] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.191969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.198684] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.205045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.253982] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 240.077744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 241.177550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.249868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.637719] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 241.659656] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 241.833123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.045255] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 242.052334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 242.067458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 242.207578] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 242.215150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 242.224528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 242.369904] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 242.555366] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.611697] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.730395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.890272] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 242.896457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 242.907498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 243.241921] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 243.394523] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.578517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.811526] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 243.823028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 243.842997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 244.017727] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 244.264718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.374212] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.469836] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 244.476058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 244.493349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 244.767479] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 244.940781] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.168983] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 245.175234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 245.187439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 05:31:49 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x20000000}) [ 245.685487] 8021q: adding VLAN 0 to HW filter on device team0 05:31:49 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fstat(r0, 0x0) 05:31:49 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='cgroup\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = openat$cgroup_procs(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) preadv(r1, &(0x7f00000005c0)=[{&(0x7f0000000180)=""/216, 0xd8}], 0x1, 0x0) 05:31:49 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000a42000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket(0x0, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f44000/0x4000)=nil, 0x50707c, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) r1 = socket$packet(0x11, 0x4000000000000003, 0x300) poll(&(0x7f0000000080)=[{r1}], 0x1, 0xb7) close(r1) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000c0a000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000200)='A', 0x1, 0xfffffffffffffffd, 0x0, 0x0) 05:31:49 executing program 0: ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fstat(r0, &(0x7f00000008c0)) 05:31:49 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f00000000c0)=0x1, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x10000000004e25}, 0x1c) recvmsg(r1, &(0x7f0000000400)={&(0x7f0000000000)=@nl=@proc, 0x80, 0x0}, 0x2000) 05:31:49 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000340)) 05:31:50 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000340)) [ 246.476897] list_add corruption. prev->next should be next (ffffffff8a1dca60), but was ffff8881d893e6f0. (prev=ffff8881d8b6bd70). [ 246.489194] ------------[ cut here ]------------ [ 246.493964] kernel BUG at lib/list_debug.c:28! [ 246.498612] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 246.503986] CPU: 0 PID: 7559 Comm: syz-executor5 Not tainted 4.20.0-rc6-next-20181210+ #164 [ 246.512598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 246.522077] RIP: 0010:__list_add_valid.cold.2+0x23/0x2a [ 246.527462] Code: e8 00 1f d2 fd 0f 0b 48 89 d9 48 c7 c7 20 e6 80 88 e8 ef 1e d2 fd 0f 0b 48 89 f1 48 c7 c7 a0 e6 80 88 48 89 de e8 db 1e d2 fd <0f> 0b 90 90 90 90 90 55 48 89 e5 41 57 41 56 49 be 00 00 00 00 00 [ 246.530090] kobject: 'loop0' (00000000ad38b4fb): kobject_uevent_env [ 246.546370] RSP: 0018:ffff8881dac06dc0 EFLAGS: 00010286 [ 246.546381] RAX: 0000000000000075 RBX: ffffffff8a1dca60 RCX: 0000000000000000 [ 246.546389] RDX: 0000000000000000 RSI: ffffffff816621c5 RDI: 0000000000000005 [ 246.546397] RBP: ffff8881dac06dd8 R08: ffff888185f70500 R09: ffffed103b585020 [ 246.546405] R10: ffffed103b585020 R11: ffff8881dac28107 R12: ffff8881c2052730 [ 246.546420] R13: ffff8881c20524c0 R14: ffffffff8a1dc820 R15: ffffffff8a1dcab0 [ 246.555047] kobject: 'loop0' (00000000ad38b4fb): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 246.558185] FS: 0000000001566940(0000) GS:ffff8881dac00000(0000) knlGS:0000000000000000 [ 246.558194] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 246.558202] CR2: 000000000063f210 CR3: 00000001b8ddf000 CR4: 00000000001406f0 [ 246.558213] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 246.558220] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 246.558224] Call Trace: [ 246.558229] [ 246.558282] ___neigh_create+0x14b7/0x2600 [ 246.558307] ? neigh_remove_one+0x5a0/0x5a0 [ 246.558351] ? print_usage_bug+0xc0/0xc0 [ 246.558369] ? graph_lock+0x270/0x270 [ 246.661155] ? find_held_lock+0x36/0x1c0 [ 246.665321] ? ipv6_chk_mcast_addr+0x350/0x940 [ 246.669925] ? lock_downgrade+0x900/0x900 [ 246.674082] ? check_preemption_disabled+0x48/0x280 [ 246.679161] ? kasan_check_read+0x11/0x20 [ 246.683385] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 246.688682] ? lock_acquire+0x1ed/0x520 [ 246.692743] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 246.698309] ? check_preemption_disabled+0x48/0x280 [ 246.703338] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 246.708912] ? rcu_pm_notify+0xc0/0xc0 [ 246.712822] __neigh_create+0x30/0x40 [ 246.716676] ip6_finish_output2+0xa64/0x2940 [ 246.721124] ? irq_exit+0x17f/0x1c0 [ 246.724795] ? find_held_lock+0x36/0x1c0 [ 246.728862] ? ip6_forward_finish+0x560/0x560 [ 246.733363] ? ip6_mtu+0x39c/0x520 [ 246.736923] ? lock_downgrade+0x900/0x900 [ 246.741075] ? check_preemption_disabled+0x48/0x280 [ 246.746094] ? kasan_check_read+0x11/0x20 [ 246.750253] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 246.755540] ? rcu_read_unlock_special+0x370/0x370 [ 246.760483] ? ip6_mtu+0x160/0x520 [ 246.764031] ? find_match+0x10a0/0x10a0 [ 246.768030] ? kasan_check_read+0x11/0x20 [ 246.772187] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 246.777478] ip6_finish_output+0x58c/0xc60 [ 246.781723] ? ip6_finish_output+0x58c/0xc60 [ 246.786194] ip6_output+0x232/0x9d0 [ 246.789830] ? ip6_finish_output+0xc60/0xc60 [ 246.794247] ? ip6_fragment+0x38b0/0x38b0 [ 246.798404] ? ip6_mtu_from_fib6+0x770/0x770 [ 246.802888] mld_sendpack+0xad5/0xfa0 [ 246.806691] ? nf_hook.constprop.40+0x860/0x860 [ 246.811395] ? _raw_read_unlock_bh+0x30/0x40 [ 246.815849] ? trace_hardirqs_off_caller+0x310/0x310 [ 246.820991] ? __local_bh_enable_ip+0x160/0x260 [ 246.825680] mld_ifc_timer_expire+0x447/0x8a0 [ 246.830258] call_timer_fn+0x272/0x920 [ 246.834160] ? mld_dad_timer_expire+0x1b0/0x1b0 [ 246.838863] ? process_timeout+0x40/0x40 [ 246.842936] ? mark_held_locks+0xc7/0x130 [ 246.847089] ? _raw_spin_unlock_irq+0x27/0x80 [ 246.851589] ? _raw_spin_unlock_irq+0x27/0x80 [ 246.852477] kobject: 'loop2' (000000008d97b115): kobject_uevent_env [ 246.856092] ? mld_dad_timer_expire+0x1b0/0x1b0 [ 246.867151] ? lockdep_hardirqs_on+0x296/0x5b0 [ 246.871756] ? trace_hardirqs_on+0xbd/0x310 [ 246.876094] ? kasan_check_read+0x11/0x20 [ 246.880248] ? __run_timers+0x7da/0xc70 [ 246.880293] kobject: 'loop2' (000000008d97b115): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 246.884229] ? trace_hardirqs_off_caller+0x310/0x310 [ 246.884251] ? mld_dad_timer_expire+0x1b0/0x1b0 [ 246.903436] __run_timers+0x7e5/0xc70 [ 246.907271] ? timer_fixup_init+0x70/0x70 [ 246.911429] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 246.916469] ? graph_lock+0x270/0x270 [ 246.920280] ? print_usage_bug+0xc0/0xc0 [ 246.924352] ? hrtimer_update_softirq_timer+0xa0/0xa0 [ 246.929560] ? find_held_lock+0x36/0x1c0 [ 246.933650] ? graph_lock+0x270/0x270 [ 246.937484] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 246.943029] ? check_preemption_disabled+0x48/0x280 [ 246.948056] ? __lock_is_held+0xb5/0x140 [ 246.952164] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 246.957737] ? check_preemption_disabled+0x48/0x280 [ 246.962765] run_timer_softirq+0x52/0xb0 [ 246.966848] ? rcu_read_lock_sched_held+0x14f/0x180 [ 246.971900] __do_softirq+0x308/0xb7e [ 246.975714] ? ktime_get_raw_ts64+0x4d0/0x4d0 [ 246.980216] ? lock_downgrade+0x900/0x900 [ 246.984377] ? __irqentry_text_end+0x1f9658/0x1f9658 [ 246.989571] ? pvclock_read_flags+0x160/0x160 [ 246.994129] ? lapic_next_event+0x5a/0x90 [ 246.998300] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 247.003845] ? kvm_clock_read+0x18/0x30 [ 247.007827] ? kvm_sched_clock_read+0x9/0x20 [ 247.012247] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 247.017796] ? check_preemption_disabled+0x48/0x280 [ 247.022833] irq_exit+0x17f/0x1c0 [ 247.026294] smp_apic_timer_interrupt+0x1cb/0x760 [ 247.031148] ? smp_reschedule_interrupt+0x109/0x650 [ 247.036196] ? smp_call_function_single_interrupt+0x650/0x650 [ 247.038163] kobject: 'loop3' (00000000dd3e2321): kobject_uevent_env [ 247.042100] ? interrupt_entry+0xb5/0xc0 [ 247.052581] ? trace_hardirqs_off_caller+0xbb/0x310 [ 247.057604] ? trace_hardirqs_off_caller+0xbb/0x310 [ 247.061785] kobject: 'loop3' (00000000dd3e2321): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 247.062650] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 247.076904] ? trace_hardirqs_on_caller+0x310/0x310 [ 247.081929] ? trace_hardirqs_on_caller+0x310/0x310 [ 247.087025] ? task_prio+0x50/0x50 [ 247.090591] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 247.092546] kobject: 'loop2' (000000008d97b115): kobject_uevent_env [ 247.096134] ? check_preemption_disabled+0x48/0x280 [ 247.096151] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 247.096179] apic_timer_interrupt+0xf/0x20 [ 247.116643] [ 247.118604] kobject: 'loop2' (000000008d97b115): fill_kobj_path: path = '/devices/virtual/block/loop2' 05:31:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = inotify_init() dup3(r0, r1, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 05:31:50 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0xf00000000000000, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x2b}, @in, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x2e8}}, 0x0) [ 247.118895] RIP: 0010:PageHuge+0x9c/0x2b0 [ 247.132465] Code: 8b 04 25 28 00 00 00 48 89 45 d0 31 c0 e8 ec 1f c1 ff 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 0f 85 c2 01 00 00 4d 8b 65 00 31 ff <49> c1 ec 10 41 83 e4 01 4c 89 e6 e8 f4 20 c1 ff 4d 85 e4 0f 84 12 [ 247.151388] RSP: 0018:ffff888186f9ea00 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 247.159098] RAX: 1ffffd4000e2fb28 RBX: 1ffff11030df3d41 RCX: 1ffff11030df3d34 [ 247.166371] RDX: 0000000000000000 RSI: ffffffff81bed824 RDI: 0000000000000000 [ 247.167557] kobject: 'loop3' (00000000dd3e2321): kobject_uevent_env [ 247.173645] RBP: ffff888186f9ead0 R08: ffffed103b585b60 R09: ffffed103b585b5f [ 247.173654] R10: ffffed103b585b5f R11: ffff8881dac2dafb R12: 02fffc0000000000 [ 247.173663] R13: ffffea000717d940 R14: ffff888186f9eaa8 R15: 0000000000000000 [ 247.173684] ? PageHuge+0x84/0x2b0 [ 247.199107] kobject: 'loop3' (00000000dd3e2321): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 247.201910] ? vma_kernel_pagesize+0xb0/0xb0 [ 247.201977] ? mem_cgroup_hierarchy_write+0x230/0x230 [ 247.202022] page_remove_rmap+0x85d/0x1a30 [ 247.228800] ? page_add_file_rmap+0x1470/0x1470 [ 247.233486] ? __lock_is_held+0xb5/0x140 [ 247.237575] ? rcu_read_lock_sched_held+0x14f/0x180 [ 247.242649] ? __alloc_pages_nodemask+0xb9c/0xec0 [ 247.247535] ? graph_lock+0x270/0x270 [ 247.251347] ? __alloc_pages_slowpath+0x2e00/0x2e00 [ 247.256409] ? retint_kernel+0x2d/0x2d [ 247.260389] ? graph_lock+0x270/0x270 [ 247.264209] ? find_held_lock+0x36/0x1c0 [ 247.268295] ? kasan_check_read+0x11/0x20 [ 247.270936] kobject: 'loop3' (00000000dd3e2321): kobject_uevent_env [ 247.272505] ? page_mapcount+0x3b5/0x5d0 [ 247.272524] ? fault_around_bytes_set+0x90/0x90 [ 247.281557] kobject: 'loop3' (00000000dd3e2321): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 247.283018] ? lock_downgrade+0x900/0x900 [ 247.283051] ? kasan_check_write+0x14/0x20 [ 247.283117] ? do_raw_spin_lock+0x14f/0x350 [ 247.309872] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 247.314911] ? _vm_normal_page+0x161/0x3c0 [ 247.319163] ? __pte_alloc_kernel+0x210/0x210 [ 247.323685] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 247.328743] ? __tlb_remove_page_size+0x187/0x500 [ 247.333599] unmap_page_range+0x11c7/0x2930 [ 247.337967] ? vm_normal_page_pmd+0x510/0x510 [ 247.342514] ? lock_release+0xa00/0xa00 [ 247.346495] ? perf_trace_sched_process_exec+0x860/0x860 [ 247.351971] ? __lock_acquire+0x62f/0x4c20 [ 247.356216] ? __lock_acquire+0x62f/0x4c20 [ 247.360479] ? print_usage_bug+0xc0/0xc0 [ 247.364596] ? graph_lock+0x270/0x270 [ 247.368428] ? __mutex_lock+0x85e/0x16f0 [ 247.372499] ? mark_held_locks+0x130/0x130 [ 247.376999] ? uprobe_clear_state+0xb4/0x390 [ 247.381423] ? rcu_read_unlock_special+0x370/0x370 [ 247.386368] ? graph_lock+0x270/0x270 [ 247.390207] ? print_usage_bug+0xc0/0xc0 [ 247.394275] ? find_held_lock+0x36/0x1c0 [ 247.398345] ? find_held_lock+0x36/0x1c0 [ 247.402417] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 247.408009] ? uprobe_munmap+0x14c/0x450 [ 247.412102] ? uprobe_mmap+0x1130/0x1130 [ 247.416183] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 247.421311] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 247.426421] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 247.431045] ? pagevec_lru_move_fn+0x259/0x350 [ 247.435635] ? trace_hardirqs_off_caller+0x310/0x310 [ 247.440748] unmap_single_vma+0x19b/0x310 [ 247.442417] kobject: 'loop4' (0000000068bfe3ba): kobject_uevent_env [ 247.444909] unmap_vmas+0x252/0x3d0 [ 247.454929] ? zap_vma_ptes+0x110/0x110 [ 247.456915] kobject: 'loop4' (0000000068bfe3ba): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 247.458922] ? perf_trace_mm_lru_insertion+0x1490/0x1490 [ 247.458969] ? kasan_check_write+0x14/0x20 [ 247.458985] exit_mmap+0x2be/0x590 [ 247.481635] ? __ia32_sys_munmap+0x80/0x80 [ 247.485886] ? mutex_unlock+0xd/0x10 [ 247.489627] ? __might_sleep+0x95/0x190 [ 247.493652] mmput+0x247/0x610 [ 247.496851] ? lock_downgrade+0x900/0x900 [ 247.501012] ? set_mm_exe_file+0x200/0x200 [ 247.505248] ? kasan_check_write+0x14/0x20 [ 247.509484] ? up_read+0x225/0x2c0 [ 247.513023] ? do_raw_spin_trylock+0x270/0x270 [ 247.517603] ? up_read_non_owner+0x100/0x100 [ 247.522025] ? __down_interruptible+0x700/0x700 [ 247.526734] flush_old_exec+0xb91/0x21a0 [ 247.530824] ? ext4_file_read_iter+0x193/0x3c0 [ 247.535413] ? copy_strings_kernel+0x110/0x110 [ 247.540003] ? check_preemption_disabled+0x48/0x280 [ 247.545073] ? fsnotify_first_mark+0x350/0x350 [ 247.549668] ? __fsnotify_parent+0xcc/0x430 [ 247.553988] ? fsnotify+0xef0/0xef0 [ 247.557651] ? rw_verify_area+0x118/0x360 [ 247.561802] ? vfs_read+0x1ce/0x3e0 [ 247.565452] ? kernel_read+0xab/0x120 [ 247.569292] ? load_elf_phdrs+0x1cd/0x260 [ 247.573447] ? writenote+0x3d0/0x3d0 [ 247.577160] ? kernel_read+0xab/0x120 [ 247.580972] load_elf_binary+0xa39/0x5620 [ 247.585118] ? find_held_lock+0x36/0x1c0 [ 247.589193] ? notesize.isra.5+0x80/0x80 [ 247.593274] ? lock_downgrade+0x900/0x900 [ 247.597431] ? kasan_check_write+0x14/0x20 [ 247.601667] search_binary_handler+0x17d/0x570 [ 247.606260] __do_execve_file.isra.35+0x178c/0x2760 [ 247.611303] ? prepare_bprm_creds+0x120/0x120 [ 247.615819] ? __do_page_fault+0x65c/0xd70 [ 247.620052] ? __do_page_fault+0x402/0xd70 [ 247.624284] ? retint_kernel+0x2d/0x2d [ 247.628235] ? strncpy_from_user+0x191/0x5a0 [ 247.632680] ? strncpy_from_user+0x1a7/0x5a0 [ 247.637087] ? strncpy_from_user+0x1aa/0x5a0 [ 247.641492] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 247.647025] ? strncpy_from_user+0x411/0x5a0 [ 247.651435] ? digsig_verify+0x1530/0x1530 [ 247.655671] ? kmem_cache_alloc+0x33f/0x730 [ 247.660035] ? do_syscall_64+0x9a/0x820 [ 247.664006] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 247.668587] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 247.674126] ? getname_flags+0x26e/0x590 [ 247.678196] ? trace_hardirqs_off_caller+0x310/0x310 [ 247.683297] __x64_sys_execve+0x8f/0xc0 [ 247.687275] do_syscall_64+0x1b9/0x820 [ 247.691185] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 247.696550] ? syscall_return_slowpath+0x5e0/0x5e0 [ 247.701476] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 247.706333] ? trace_hardirqs_on_caller+0x310/0x310 [ 247.711380] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 247.716392] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 247.721930] ? prepare_exit_to_usermode+0x291/0x3b0 [ 247.726949] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 247.731794] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 247.736977] RIP: 0033:0x455f07 [ 247.740178] Code: Bad RIP value. [ 247.743535] RSP: 002b:00007ffd1c9d74a8 EFLAGS: 00000207 ORIG_RAX: 000000000000003b [ 247.751236] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000455f07 [ 247.758498] RDX: 00007ffd1c9d7ba8 RSI: 00007ffd1c9d74e0 RDI: 00000000004dca5b [ 247.765763] RBP: 00007ffd1c9d7660 R08: 0000000000000000 R09: 0000000000000039 [ 247.773042] R10: 0000000000000008 R11: 0000000000000207 R12: 00007ffd1c9d78d8 [ 247.780309] R13: 00007ffd1c9d7808 R14: 0000000000000000 R15: 0000000000000000 [ 247.787591] Modules linked in: [ 247.790829] ---[ end trace 963f310cad6fd94e ]--- [ 247.795596] RIP: 0010:__list_add_valid.cold.2+0x23/0x2a [ 247.801012] Code: e8 00 1f d2 fd 0f 0b 48 89 d9 48 c7 c7 20 e6 80 88 e8 ef 1e d2 fd 0f 0b 48 89 f1 48 c7 c7 a0 e6 80 88 48 89 de e8 db 1e d2 fd <0f> 0b 90 90 90 90 90 55 48 89 e5 41 57 41 56 49 be 00 00 00 00 00 [ 247.819939] RSP: 0018:ffff8881dac06dc0 EFLAGS: 00010286 [ 247.825322] RAX: 0000000000000075 RBX: ffffffff8a1dca60 RCX: 0000000000000000 [ 247.832612] RDX: 0000000000000000 RSI: ffffffff816621c5 RDI: 0000000000000005 [ 247.839917] RBP: ffff8881dac06dd8 R08: ffff888185f70500 R09: ffffed103b585020 [ 247.847232] R10: ffffed103b585020 R11: ffff8881dac28107 R12: ffff8881c2052730 [ 247.854525] R13: ffff8881c20524c0 R14: ffffffff8a1dc820 R15: ffffffff8a1dcab0 [ 247.861812] FS: 0000000001566940(0000) GS:ffff8881dac00000(0000) knlGS:0000000000000000 [ 247.870086] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 247.875957] CR2: 0000000000455edd CR3: 00000001b8ddf000 CR4: 00000000001406f0 [ 247.883256] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 247.890585] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 247.897914] Kernel panic - not syncing: Fatal exception in interrupt [ 247.905369] Kernel Offset: disabled [ 247.909009] Rebooting in 86400 seconds..