Warning: Permanently added '10.128.15.196' (ECDSA) to the list of known hosts. 2019/06/15 12:10:45 parsed 1 programs 2019/06/15 12:10:48 executed programs: 0 syzkaller login: [ 952.403612][ T8993] IPVS: ftp: loaded support on port[0] = 21 [ 952.410344][ T8992] IPVS: ftp: loaded support on port[0] = 21 [ 952.436656][ T8996] IPVS: ftp: loaded support on port[0] = 21 [ 952.458072][ T8998] IPVS: ftp: loaded support on port[0] = 21 [ 952.508917][ T9000] IPVS: ftp: loaded support on port[0] = 21 [ 952.525259][ T9001] IPVS: ftp: loaded support on port[0] = 21 [ 952.753420][ T8992] chnl_net:caif_netlink_parms(): no params data found [ 952.857433][ T9000] chnl_net:caif_netlink_parms(): no params data found [ 952.874090][ T8992] bridge0: port 1(bridge_slave_0) entered blocking state [ 952.882518][ T8992] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.890719][ T8992] device bridge_slave_0 entered promiscuous mode [ 952.903017][ T8996] chnl_net:caif_netlink_parms(): no params data found [ 952.950879][ T8992] bridge0: port 2(bridge_slave_1) entered blocking state [ 952.958000][ T8992] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.965809][ T8992] device bridge_slave_1 entered promiscuous mode [ 953.000984][ T8992] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 953.009729][ T8998] chnl_net:caif_netlink_parms(): no params data found [ 953.049880][ T8992] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 953.116215][ T8992] team0: Port device team_slave_0 added [ 953.126420][ T8992] team0: Port device team_slave_1 added [ 953.155266][ T9000] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.163021][ T9000] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.171077][ T9000] device bridge_slave_0 entered promiscuous mode [ 953.178965][ T9000] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.186045][ T9000] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.194469][ T9000] device bridge_slave_1 entered promiscuous mode [ 953.201518][ T8996] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.209154][ T8996] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.216804][ T8996] device bridge_slave_0 entered promiscuous mode [ 953.227154][ T8996] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.234318][ T8996] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.242504][ T8996] device bridge_slave_1 entered promiscuous mode [ 953.263300][ T8993] chnl_net:caif_netlink_parms(): no params data found [ 953.290833][ T9001] chnl_net:caif_netlink_parms(): no params data found [ 953.382571][ T8992] device hsr_slave_0 entered promiscuous mode [ 953.438986][ T8992] device hsr_slave_1 entered promiscuous mode [ 953.492914][ T8996] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 953.501839][ T8998] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.509411][ T8998] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.517061][ T8998] device bridge_slave_0 entered promiscuous mode [ 953.544624][ T9000] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 953.554606][ T8996] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 953.569901][ T8998] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.576997][ T8998] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.588103][ T8998] device bridge_slave_1 entered promiscuous mode [ 953.615442][ T9000] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 953.639647][ T8996] team0: Port device team_slave_0 added [ 953.653706][ T8993] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.661237][ T8993] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.669430][ T8993] device bridge_slave_0 entered promiscuous mode [ 953.682589][ T8993] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.689724][ T8993] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.697784][ T8993] device bridge_slave_1 entered promiscuous mode [ 953.706434][ T8998] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 953.717196][ T8998] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 953.729633][ T8996] team0: Port device team_slave_1 added [ 953.745088][ T9000] team0: Port device team_slave_0 added [ 953.832477][ T8996] device hsr_slave_0 entered promiscuous mode [ 953.888967][ T8996] device hsr_slave_1 entered promiscuous mode [ 953.937472][ T9001] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.946044][ T9001] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.953966][ T9001] device bridge_slave_0 entered promiscuous mode [ 953.962885][ T9000] team0: Port device team_slave_1 added [ 953.990805][ T9001] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.997916][ T9001] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.005977][ T9001] device bridge_slave_1 entered promiscuous mode [ 954.022193][ T8993] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 954.034081][ T8993] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 954.053165][ T8998] team0: Port device team_slave_0 added [ 954.077581][ T8998] team0: Port device team_slave_1 added [ 954.098217][ T8993] team0: Port device team_slave_0 added [ 954.106781][ T9001] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 954.172147][ T9000] device hsr_slave_0 entered promiscuous mode [ 954.208996][ T9000] device hsr_slave_1 entered promiscuous mode [ 954.260150][ T8993] team0: Port device team_slave_1 added [ 954.274197][ T9001] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 954.351950][ T8998] device hsr_slave_0 entered promiscuous mode [ 954.389206][ T8998] device hsr_slave_1 entered promiscuous mode [ 954.463436][ T9001] team0: Port device team_slave_0 added [ 954.485598][ T9001] team0: Port device team_slave_1 added [ 954.530434][ T8993] device hsr_slave_0 entered promiscuous mode [ 954.569058][ T8993] device hsr_slave_1 entered promiscuous mode [ 954.682588][ T9001] device hsr_slave_0 entered promiscuous mode [ 954.738936][ T9001] device hsr_slave_1 entered promiscuous mode [ 954.827830][ T8992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 954.861844][ T9004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 954.870999][ T9004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 954.882992][ T8992] 8021q: adding VLAN 0 to HW filter on device team0 [ 954.921797][ T9004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 954.931249][ T9004] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 954.940901][ T9004] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.948093][ T9004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 954.956850][ T9004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 954.966464][ T9004] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 954.975098][ T9004] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.982200][ T9004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 954.991069][ T9004] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 955.031823][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 955.042173][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 955.051929][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 955.060801][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 955.069563][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 955.086079][ T9003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 955.094820][ T9003] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 955.110302][ T8996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 955.121033][ T8998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 955.133080][ T8992] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 955.143943][ T8992] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 955.161600][ T8993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 955.172585][ T9000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 955.184820][ T9007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 955.193892][ T9007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 955.202768][ T9007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 955.211362][ T9007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 955.241191][ T9007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 955.251856][ T9007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 955.259616][ T9007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 955.271951][ T8993] 8021q: adding VLAN 0 to HW filter on device team0 [ 955.302544][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 955.311718][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 955.321632][ T3486] bridge0: port 1(bridge_slave_0) entered blocking state [ 955.328740][ T3486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 955.336297][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 955.345090][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 955.353197][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 955.361915][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 955.370210][ T3486] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.377253][ T3486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 955.385081][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 955.392702][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 955.401036][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 955.411869][ T9000] 8021q: adding VLAN 0 to HW filter on device team0 [ 955.434133][ T8996] 8021q: adding VLAN 0 to HW filter on device team0 [ 955.443040][ T9007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 955.454091][ T9007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 955.463015][ T9007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 955.471724][ T9007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 955.484215][ T8992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 955.500675][ T8998] 8021q: adding VLAN 0 to HW filter on device team0 [ 955.527193][ T8993] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 955.537877][ T8993] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 955.553837][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 955.562486][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 955.571825][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 955.580499][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 955.589543][ T3700] bridge0: port 1(bridge_slave_0) entered blocking state [ 955.596898][ T3700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 955.604751][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 955.613480][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 955.621980][ T3700] bridge0: port 1(bridge_slave_0) entered blocking state [ 955.629244][ T3700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 955.637042][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 955.646004][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 955.654450][ T3700] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.661524][ T3700] bridge0: port 2(bridge_slave_1) entered forwarding state [ 955.669312][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 955.677842][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 955.686318][ T3700] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.693430][ T3700] bridge0: port 2(bridge_slave_1) entered forwarding state [ 955.702571][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 955.711170][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 955.720084][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 955.728380][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 955.736861][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 955.745292][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 955.754361][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 955.762421][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 955.770530][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 955.778900][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 955.806038][ T9004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 955.815352][ T9004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 955.826924][ T9004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 955.835677][ T9004] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 955.845046][ T9004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 955.853627][ T9004] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 955.861936][ T9004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 955.871307][ T9004] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 955.879719][ T9004] bridge0: port 1(bridge_slave_0) entered blocking state [ 955.886769][ T9004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 955.894574][ T9004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 955.903210][ T9004] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 955.912020][ T9004] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.919158][ T9004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 955.926693][ T9004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 955.937196][ T9004] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 955.945043][ T9004] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 955.961971][ T9001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 955.979312][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 955.988926][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 955.997707][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 956.006489][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 956.015143][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 956.024505][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 956.046685][ T8993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 956.067041][ T8996] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 956.079866][ T8996] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 956.097041][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 956.106501][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 956.114931][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 956.123232][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 956.131909][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 956.141279][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 956.150045][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 956.159089][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 956.167673][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 956.176627][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 956.187971][ T9001] 8021q: adding VLAN 0 to HW filter on device team0 [ 956.205669][ T8998] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 956.219232][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 956.244683][ T9003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 956.267821][ T9003] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 956.276921][ T9003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 956.289725][ T9003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 956.299764][ T9003] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 956.334284][ T8996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 956.356851][ T9003] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 956.395529][ T9003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 956.405303][ T9003] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 956.414567][ T9003] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.421839][ T9003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 956.440508][ T9003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 956.451338][ T9003] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 956.460120][ T9003] bridge0: port 2(bridge_slave_1) entered blocking state [ 956.467288][ T9003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 956.481104][ T9003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 956.494597][ T9003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 956.503626][ T9003] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 956.512477][ T9003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 956.520940][ T9003] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 956.529338][ T9003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 956.537657][ T9003] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 956.547564][ T9003] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 956.556425][ T9003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 956.571682][ T8998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 956.591776][ T9000] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 956.710240][ T9014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 956.724683][ T9014] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 956.794771][ T9014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 956.807180][ T9014] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 956.823601][ T9014] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 956.853230][ T9001] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 956.867246][ T9001] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 956.899016][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 956.908094][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 956.926453][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 956.935409][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 956.944244][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 956.974468][ T9001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 957.061449][ T9000] 8021q: adding VLAN 0 to HW filter on device batadv0 2019/06/15 12:10:53 executed programs: 21 2019/06/15 12:10:58 executed programs: 248 2019/06/15 12:11:03 executed programs: 451 2019/06/15 12:11:08 executed programs: 664 2019/06/15 12:11:13 executed programs: 887 2019/06/15 12:11:18 executed programs: 1101 2019/06/15 12:11:23 executed programs: 1308 2019/06/15 12:11:28 executed programs: 1520 2019/06/15 12:11:33 executed programs: 1722 2019/06/15 12:11:38 executed programs: 1924 2019/06/15 12:11:43 executed programs: 2129 2019/06/15 12:11:48 executed programs: 2329 2019/06/15 12:11:53 executed programs: 2527 2019/06/15 12:11:58 executed programs: 2717 2019/06/15 12:12:03 executed programs: 2906 2019/06/15 12:12:08 executed programs: 3096 2019/06/15 12:12:13 executed programs: 3298 2019/06/15 12:12:18 executed programs: 3487 2019/06/15 12:12:23 executed programs: 3670 2019/06/15 12:12:28 executed programs: 3863 2019/06/15 12:12:33 executed programs: 4049 2019/06/15 12:12:38 executed programs: 4230 2019/06/15 12:12:43 executed programs: 4431 2019/06/15 12:12:48 executed programs: 4628 [ 1076.139062][T17064] ================================================================== [ 1076.147532][T17064] BUG: KASAN: use-after-free in sk_psock_unlink+0x3dd/0x4b0 [ 1076.154846][T17064] Read of size 4 at addr ffff8880992d5d18 by task syz-executor.2/17064 [ 1076.163091][T17064] [ 1076.165438][T17064] CPU: 0 PID: 17064 Comm: syz-executor.2 Not tainted 5.2.0-rc3+ #52 [ 1076.173490][T17064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1076.183581][T17064] Call Trace: [ 1076.186937][T17064] dump_stack+0x172/0x1f0 [ 1076.191283][T17064] ? sk_psock_unlink+0x3dd/0x4b0 [ 1076.196306][T17064] ? tcp_check_oom+0x560/0x560 [ 1076.201110][T17064] print_address_description.cold+0x7c/0x20d [ 1076.207103][T17064] ? sk_psock_unlink+0x3dd/0x4b0 [ 1076.212050][T17064] ? sk_psock_unlink+0x3dd/0x4b0 [ 1076.217000][T17064] ? tcp_check_oom+0x560/0x560 [ 1076.221780][T17064] __kasan_report.cold+0x1b/0x40 [ 1076.226746][T17064] ? sk_psock_unlink+0x3dd/0x4b0 [ 1076.231708][T17064] kasan_report+0x12/0x20 [ 1076.236055][T17064] __asan_report_load4_noabort+0x14/0x20 [ 1076.236080][T17064] sk_psock_unlink+0x3dd/0x4b0 [ 1076.236104][T17064] ? sk_psock_link_pop+0x186/0x1f0 [ 1076.236119][T17064] ? tcp_check_oom+0x560/0x560 [ 1076.236195][T17064] tcp_bpf_remove+0x21/0x50 [ 1076.261083][T17064] tcp_bpf_close+0x130/0x390 [ 1076.261170][T17064] tls_sk_proto_close+0x18a/0x770 [ 1076.261191][T17064] ? tcp_bpf_stream_read+0x270/0x270 [ 1076.276110][T17064] ? tls_push_sg+0x680/0x680 [ 1076.280783][T17064] ? ip_mc_drop_socket+0x211/0x270 [ 1076.285983][T17064] inet_release+0xe0/0x1f0 [ 1076.290479][T17064] inet6_release+0x53/0x80 [ 1076.295255][T17064] __sock_release+0xce/0x2a0 [ 1076.302084][T17064] sock_close+0x1b/0x30 [ 1076.308611][T17064] __fput+0x2ff/0x890 [ 1076.308629][T17064] ? __sock_release+0x2a0/0x2a0 [ 1076.308644][T17064] ____fput+0x16/0x20 [ 1076.308665][T17064] task_work_run+0x145/0x1c0 [ 1076.321192][T17064] exit_to_usermode_loop+0x273/0x2c0 [ 1076.321210][T17064] do_syscall_64+0x58e/0x680 [ 1076.321276][T17064] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1076.321297][T17064] RIP: 0033:0x412f90 [ 1076.358640][T17064] Code: 01 f0 ff ff 0f 83 30 1b 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d fd 32 66 00 00 75 14 b8 03 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff [ 1076.378351][T17064] RSP: 002b:00007fff9bf06e38 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1076.386823][T17064] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000412f90 [ 1076.395000][T17064] RDX: 0000001b2da20000 RSI: 0000000000000000 RDI: 0000000000000005 [ 1076.403074][T17064] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffffffffffff [ 1076.411153][T17064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000761178 [ 1076.419918][T17064] R13: 0000000000000005 R14: 0000000000000000 R15: 000000000075bf2c [ 1076.419940][T17064] [ 1076.419948][T17064] Allocated by task 17064: [ 1076.419966][T17064] save_stack+0x23/0x90 [ 1076.419989][T17064] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1076.444535][T17064] kasan_kmalloc+0x9/0x10 [ 1076.448886][T17064] kmem_cache_alloc_trace+0x151/0x750 [ 1076.448898][T17064] sock_map_alloc+0x1b9/0x3f0 [ 1076.448909][T17064] __do_sys_bpf+0x730/0x43d0 [ 1076.448919][T17064] __x64_sys_bpf+0x73/0xb0 [ 1076.448932][T17064] do_syscall_64+0xfd/0x680 [ 1076.448946][T17064] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1076.448950][T17064] [ 1076.448957][T17064] Freed by task 9007: [ 1076.448975][T17064] save_stack+0x23/0x90 [ 1076.478821][T17064] __kasan_slab_free+0x102/0x150 [ 1076.478833][T17064] kasan_slab_free+0xe/0x10 [ 1076.478843][T17064] kfree+0xcf/0x220 [ 1076.478855][T17064] sock_map_free+0x22a/0x310 [ 1076.478876][T17064] bpf_map_free_deferred+0xb4/0xe0 [ 1076.512493][T17064] process_one_work+0x989/0x1790 [ 1076.512505][T17064] worker_thread+0x98/0xe40 [ 1076.512516][T17064] kthread+0x354/0x420 [ 1076.512529][T17064] ret_from_fork+0x24/0x30 [ 1076.512534][T17064] [ 1076.512553][T17064] The buggy address belongs to the object at ffff8880992d5d00 [ 1076.512553][T17064] which belongs to the cache kmalloc-512 of size 512 [ 1076.547112][T17064] The buggy address is located 24 bytes inside of [ 1076.547112][T17064] 512-byte region [ffff8880992d5d00, ffff8880992d5f00) [ 1076.560389][T17064] The buggy address belongs to the page: [ 1076.566128][T17064] page:ffffea000264b540 refcount:1 mapcount:0 mapping:ffff8880aa400940 index:0x0 [ 1076.575270][T17064] flags: 0x1fffc0000000200(slab) [ 1076.580240][T17064] raw: 01fffc0000000200 ffffea0002612f48 ffffea00026647c8 ffff8880aa400940 [ 1076.588847][T17064] raw: 0000000000000000 ffff8880992d5080 0000000100000006 0000000000000000 [ 1076.597613][T17064] page dumped because: kasan: bad access detected [ 1076.604211][T17064] [ 1076.606545][T17064] Memory state around the buggy address: [ 1076.612196][T17064] ffff8880992d5c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1076.620402][T17064] ffff8880992d5c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1076.628482][T17064] >ffff8880992d5d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1076.636641][T17064] ^ [ 1076.641507][T17064] ffff8880992d5d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1076.649585][T17064] ffff8880992d5e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1076.657746][T17064] ================================================================== [ 1076.657765][T17064] Disabling lock debugging due to kernel taint [ 1076.673652][T17064] Kernel panic - not syncing: panic_on_warn set ... [ 1076.680471][T17064] CPU: 0 PID: 17064 Comm: syz-executor.2 Tainted: G B 5.2.0-rc3+ #52 [ 1076.690193][T17064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1076.700392][T17064] Call Trace: [ 1076.703785][T17064] dump_stack+0x172/0x1f0 [ 1076.707782][ T3880] kobject: 'loop5' (000000005a1e6b47): kobject_uevent_env [ 1076.709096][T17064] ? tcp_check_oom+0x560/0x560 [ 1076.709111][T17064] panic+0x2cb/0x744 [ 1076.709125][T17064] ? __warn_printk+0xf3/0xf3 [ 1076.709146][T17064] ? sk_psock_unlink+0x3dd/0x4b0 [ 1076.736077][T17064] ? tcp_check_oom+0x560/0x560 [ 1076.738030][ T3880] kobject: 'loop5' (000000005a1e6b47): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1076.741442][T17064] ? preempt_schedule+0x4b/0x60 [ 1076.741468][T17064] ? ___preempt_schedule+0x16/0x18 [ 1076.768678][ T3880] kobject: 'loop4' (000000002b6f66ef): kobject_uevent_env [ 1076.769461][T17064] ? trace_hardirqs_on+0x5e/0x220 [ 1076.778017][ T3880] kobject: 'loop4' (000000002b6f66ef): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1076.782456][T17064] ? sk_psock_unlink+0x3dd/0x4b0 [ 1076.782470][T17064] ? tcp_check_oom+0x560/0x560 [ 1076.782482][T17064] end_report+0x47/0x4f [ 1076.782493][T17064] ? sk_psock_unlink+0x3dd/0x4b0 [ 1076.782504][T17064] __kasan_report.cold+0xe/0x40 [ 1076.782525][T17064] ? sk_psock_unlink+0x3dd/0x4b0 [ 1076.821854][T17064] kasan_report+0x12/0x20 [ 1076.826207][T17064] __asan_report_load4_noabort+0x14/0x20 [ 1076.831861][T17064] sk_psock_unlink+0x3dd/0x4b0 [ 1076.836637][T17064] ? sk_psock_link_pop+0x186/0x1f0 [ 1076.841746][T17064] ? tcp_check_oom+0x560/0x560 [ 1076.846503][T17064] tcp_bpf_remove+0x21/0x50 [ 1076.851081][T17064] tcp_bpf_close+0x130/0x390 [ 1076.855674][T17064] tls_sk_proto_close+0x18a/0x770 [ 1076.860697][T17064] ? tcp_bpf_stream_read+0x270/0x270 [ 1076.865995][T17064] ? tls_push_sg+0x680/0x680 [ 1076.870587][T17064] ? ip_mc_drop_socket+0x211/0x270 [ 1076.875750][T17064] inet_release+0xe0/0x1f0 [ 1076.880223][T17064] inet6_release+0x53/0x80 [ 1076.884637][T17064] __sock_release+0xce/0x2a0 [ 1076.889234][T17064] sock_close+0x1b/0x30 [ 1076.893391][T17064] __fput+0x2ff/0x890 [ 1076.897380][T17064] ? __sock_release+0x2a0/0x2a0 [ 1076.902237][T17064] ____fput+0x16/0x20 [ 1076.906211][T17064] task_work_run+0x145/0x1c0 [ 1076.910817][T17064] exit_to_usermode_loop+0x273/0x2c0 [ 1076.916122][T17064] do_syscall_64+0x58e/0x680 [ 1076.920721][T17064] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1076.926605][T17064] RIP: 0033:0x412f90 [ 1076.930489][T17064] Code: 01 f0 ff ff 0f 83 30 1b 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d fd 32 66 00 00 75 14 b8 03 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff [ 1076.950080][T17064] RSP: 002b:00007fff9bf06e38 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1076.958498][T17064] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000412f90 [ 1076.966476][T17064] RDX: 0000001b2da20000 RSI: 0000000000000000 RDI: 0000000000000005 [ 1076.974459][T17064] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffffffffffff [ 1076.982422][T17064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000761178 [ 1076.990564][T17064] R13: 0000000000000005 R14: 0000000000000000 R15: 000000000075bf2c [ 1076.999656][T17064] Kernel Offset: disabled [ 1077.004366][T17064] Rebooting in 86400 seconds..