Warning: Permanently added '10.128.10.14' (ECDSA) to the list of known hosts. 2019/12/12 02:50:37 fuzzer started 2019/12/12 02:50:39 dialing manager at 10.128.0.26:42497 2019/12/12 02:50:39 syscalls: 2701 2019/12/12 02:50:39 code coverage: enabled 2019/12/12 02:50:39 comparison tracing: enabled 2019/12/12 02:50:39 extra coverage: enabled 2019/12/12 02:50:39 setuid sandbox: enabled 2019/12/12 02:50:39 namespace sandbox: enabled 2019/12/12 02:50:39 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/12 02:50:39 fault injection: enabled 2019/12/12 02:50:39 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/12 02:50:39 net packet injection: enabled 2019/12/12 02:50:39 net device setup: enabled 2019/12/12 02:50:39 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/12 02:50:39 devlink PCI setup: PCI device 0000:00:10.0 is not available 02:52:34 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000600)={{0x0, 0x2, 0x51, 0x0, 0x3f, 0x2b}}) mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 02:52:35 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f0000003a40)={0xa, 0x0, 0x0, @rand_addr="43adae045ba425540566c44f7867f246"}, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4080}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000058) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x40c2, 0x0) preadv(r0, &(0x7f0000002800)=[{&(0x7f0000000800)=""/4096, 0xfc1}, {&(0x7f0000001800)=""/4096, 0x1000}], 0x332, 0x0) open(0x0, 0x0, 0x0) getresuid(&(0x7f00000000c0), 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {0x1, 0x2}, [{}, {}, {0x2, 0x0, r1}], {}, [{}], {0x10, 0x9}, {0x20, 0x2}}, 0x44, 0x2) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x0) openat$random(0xffffffffffffff9c, 0x0, 0x28400, 0x0) syzkaller login: [ 186.986135][ T8948] IPVS: ftp: loaded support on port[0] = 21 [ 187.188115][ T8948] chnl_net:caif_netlink_parms(): no params data found [ 187.188629][ T8950] IPVS: ftp: loaded support on port[0] = 21 02:52:35 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) [ 187.270216][ T8948] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.304865][ T8948] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.313113][ T8948] device bridge_slave_0 entered promiscuous mode [ 187.336806][ T8948] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.345762][ T8948] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.354235][ T8948] device bridge_slave_1 entered promiscuous mode [ 187.430519][ T8948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.460444][ T8948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.478923][ T8950] chnl_net:caif_netlink_parms(): no params data found [ 187.525486][ T8948] team0: Port device team_slave_0 added [ 187.551236][ T8948] team0: Port device team_slave_1 added [ 187.574066][ T8950] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.581201][ T8950] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.606032][ T8950] device bridge_slave_0 entered promiscuous mode [ 187.615159][ T8950] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.622264][ T8950] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.630813][ T8950] device bridge_slave_1 entered promiscuous mode 02:52:35 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x4000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x68}}) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c004c00000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 187.669827][ T8954] IPVS: ftp: loaded support on port[0] = 21 [ 187.777605][ T8948] device hsr_slave_0 entered promiscuous mode [ 187.834717][ T8948] device hsr_slave_1 entered promiscuous mode [ 187.887393][ T8950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.916741][ T8956] IPVS: ftp: loaded support on port[0] = 21 02:52:36 executing program 4: creat(0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = gettid() rename(0x0, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) open(0x0, 0x0, 0x0) faccessat(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000044000)) setpgid(0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) tkill(r0, 0x1000000000016) [ 187.943603][ T8950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.028685][ T8948] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 188.101033][ T8950] team0: Port device team_slave_0 added [ 188.127217][ T8948] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 188.178039][ T8950] team0: Port device team_slave_1 added [ 188.210953][ T8958] IPVS: ftp: loaded support on port[0] = 21 02:52:36 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) mkdir(0x0, 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000640)=""/142, 0x8e}, {&(0x7f0000000700)=""/203, 0xcb}, {0x0}], 0x3, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000600)={{0x2, 0x2, 0x51, 0x1, 0x3f, 0x2b}}) mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) pipe(&(0x7f0000000100)) [ 188.232606][ T8948] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 188.308032][ T8948] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 188.435852][ T8950] device hsr_slave_0 entered promiscuous mode [ 188.474168][ T8950] device hsr_slave_1 entered promiscuous mode [ 188.513918][ T8950] debugfs: Directory 'hsr0' with parent '/' already present! [ 188.577039][ T8961] IPVS: ftp: loaded support on port[0] = 21 [ 188.660165][ T8954] chnl_net:caif_netlink_parms(): no params data found [ 188.758637][ T8956] chnl_net:caif_netlink_parms(): no params data found [ 188.777812][ T8950] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 188.837255][ T8954] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.845024][ T8954] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.852699][ T8954] device bridge_slave_0 entered promiscuous mode [ 188.863044][ T8954] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.871083][ T8954] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.878845][ T8954] device bridge_slave_1 entered promiscuous mode [ 188.906179][ T8950] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 189.025314][ T8956] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.032394][ T8956] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.040962][ T8956] device bridge_slave_0 entered promiscuous mode [ 189.048963][ T8950] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 189.105875][ T8950] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 189.167013][ T8954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.176831][ T8956] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.184622][ T8956] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.192320][ T8956] device bridge_slave_1 entered promiscuous mode [ 189.209059][ T8958] chnl_net:caif_netlink_parms(): no params data found [ 189.226571][ T8954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.256874][ T8948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.270596][ T8956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.282432][ T8956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.367933][ T8954] team0: Port device team_slave_0 added [ 189.385536][ T8956] team0: Port device team_slave_0 added [ 189.394030][ T8956] team0: Port device team_slave_1 added [ 189.412368][ T8958] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.419727][ T8958] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.427499][ T8958] device bridge_slave_0 entered promiscuous mode [ 189.438589][ T8958] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.445726][ T8958] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.453597][ T8958] device bridge_slave_1 entered promiscuous mode [ 189.462276][ T8954] team0: Port device team_slave_1 added [ 189.526006][ T8956] device hsr_slave_0 entered promiscuous mode [ 189.574313][ T8956] device hsr_slave_1 entered promiscuous mode [ 189.614640][ T8956] debugfs: Directory 'hsr0' with parent '/' already present! [ 189.622448][ T8961] chnl_net:caif_netlink_parms(): no params data found [ 189.658847][ T8948] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.678346][ T2728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 189.687771][ T2728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 189.700084][ T8958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.757618][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 189.766895][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 189.775686][ T3217] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.782957][ T3217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.792688][ T8958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.847272][ T8954] device hsr_slave_0 entered promiscuous mode [ 189.894323][ T8954] device hsr_slave_1 entered promiscuous mode [ 189.953906][ T8954] debugfs: Directory 'hsr0' with parent '/' already present! [ 189.961990][ T8961] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.969713][ T8961] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.978216][ T8961] device bridge_slave_0 entered promiscuous mode [ 189.989696][ T8961] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.998260][ T8961] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.006859][ T8961] device bridge_slave_1 entered promiscuous mode [ 190.016754][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 190.071048][ T8958] team0: Port device team_slave_0 added [ 190.098197][ T2728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 190.107537][ T2728] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 190.116266][ T2728] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.123306][ T2728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.134848][ T8961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.147705][ T8961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.159340][ T8958] team0: Port device team_slave_1 added [ 190.168745][ T8956] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 190.226534][ T8956] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 190.281289][ T8956] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 190.406956][ T8958] device hsr_slave_0 entered promiscuous mode [ 190.444117][ T8958] device hsr_slave_1 entered promiscuous mode [ 190.483858][ T8958] debugfs: Directory 'hsr0' with parent '/' already present! [ 190.496132][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 190.516151][ T8956] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 190.587461][ T8961] team0: Port device team_slave_0 added [ 190.598682][ T8954] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 190.675672][ T2728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 190.684548][ T2728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 190.693332][ T2728] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 190.701917][ T2728] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 190.712129][ T8961] team0: Port device team_slave_1 added [ 190.725396][ T8954] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 190.776595][ T8954] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 190.818027][ T8954] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 190.909017][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 190.918463][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 190.950296][ T8950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.959085][ T8958] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 190.992883][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 191.001888][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 191.010675][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 191.019188][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 191.028231][ T8948] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 191.041606][ T8958] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 191.098278][ T8958] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 191.219156][ T8961] device hsr_slave_0 entered promiscuous mode [ 191.264072][ T8961] device hsr_slave_1 entered promiscuous mode [ 191.314027][ T8961] debugfs: Directory 'hsr0' with parent '/' already present! [ 191.341569][ T8958] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 191.392631][ T2728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 191.400571][ T2728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 191.411438][ T8950] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.440326][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 191.450178][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 191.460436][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.467542][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.476721][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 191.517983][ T8961] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 191.550645][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 191.559754][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 191.568220][ T3217] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.575285][ T3217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.582995][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 191.590933][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 191.606912][ T8948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.614775][ T8961] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 191.668314][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 191.676923][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 191.685904][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 191.695537][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 191.704221][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 191.726862][ T8961] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 191.765731][ T8961] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 191.825271][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 191.839778][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 191.849462][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 191.862413][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 191.902290][ T8956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.922474][ T8950] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 191.941415][ T8950] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 191.947750][ T8970] overlayfs: failed to resolve './file1': -2 [ 191.950751][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 191.965032][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 191.966621][ C0] hrtimer: interrupt took 41776 ns 02:52:40 executing program 0: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x1000000, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x4, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x4, {{0xa, 0x4e24, 0x0, @mcast2}}, {{0xa, 0x4e21, 0xcf3, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}, 0x222, 0xfffffffffffffffe, 0x4000000, 0x4edc516ff787aa77, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(r2, 0x9) r3 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x8001, 0x1c9200) ioctl$SG_GET_SG_TABLESIZE(r3, 0x227f, &(0x7f0000000180)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) r4 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a80019f007000000000000008b3dc0113f8ada27d6d59d47cafb1a044f5e523a9c8726405ca560a84e8e39a7ff2c60823219eb93c0a2344a790e8bd5485a7eee2921bf13e962897936dc6267b9f29db82c44e04cee2d7f2d840d18ca9a9e1109e26940dbb986b42e526d20a5d5833f87dc6eebcf94d8c02f7cad677edbf4582e3e016befcc286281d7c35bafefff6ebfd3b3ea226e06f8962b387e6922c09e6c285a6af5f8e0ed9e16cf19e68b066173da010aeaf7b138c1738b55c8e56ee4e9295ffc2aac5d4322831b141776b9afd374682e1387f13d7b91d23b8371317c019dda2a37ead84a5aefe20676ab3bdabfec2c161250373d74889e3c5a553c91e0c3d4b2bc6bdac411f401f12e3f70f1061f0c50f9f545ae9c18f2b22f48ee7fa9b0db404c657cc4b0d76442c3abaa43986c0a49b5623f4264108baa50cffaa2fc4c5053544150efb309706d"], 0x1}}, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000005c0)={[], 0x6, 0x9, 0x200}) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) shutdown(0xffffffffffffffff, 0x1) [ 191.996685][ T8956] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.011629][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 192.029203][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 192.077227][ T8954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.100737][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 192.113706][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 192.122449][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.129535][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.143469][ T8958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.171094][ T2728] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 192.179560][ T2728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 192.188844][ T2728] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 192.197724][ T2728] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.204817][ T2728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.213884][ T2728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 192.221475][ T2728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 192.243895][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 192.253021][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 192.261607][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 192.270403][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 192.279603][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 192.289027][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 192.300061][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 192.314192][ T8954] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.333096][ T8956] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 192.345386][ T8956] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 192.374511][ T8950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.385869][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 192.393362][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 192.401572][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 192.414524][ T8977] list_del corruption. prev->next should be ffff888092069c70, but was ffff888092069dd0 [ 192.416772][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 192.425042][ T8977] ------------[ cut here ]------------ [ 192.433225][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 192.437768][ T8977] kernel BUG at lib/list_debug.c:51! [ 192.437828][ T8977] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 192.437844][ T8977] CPU: 0 PID: 8977 Comm: syz-executor.0 Not tainted 5.5.0-rc1-next-20191211-syzkaller #0 [ 192.437857][ T8977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 192.448877][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 192.450918][ T8977] RIP: 0010:__list_del_entry_valid.cold+0xf/0x4f [ 192.457482][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 192.466718][ T8977] Code: e8 c9 00 cb fd 0f 0b 48 89 f1 48 c7 c7 c0 10 70 88 4c 89 e6 e8 b5 00 cb fd 0f 0b 4c 89 f6 48 c7 c7 60 12 70 88 e8 a4 00 cb fd <0f> 0b 4c 89 ea 4c 89 f6 48 c7 c7 a0 11 70 88 e8 90 00 cb fd 0f 0b [ 192.466725][ T8977] RSP: 0018:ffffc90002617968 EFLAGS: 00010286 [ 192.466736][ T8977] RAX: 0000000000000054 RBX: ffff8882199fa1a0 RCX: 0000000000000000 [ 192.466743][ T8977] RDX: 0000000000000000 RSI: ffffffff815e8576 RDI: fffff520004c2f1f [ 192.466751][ T8977] RBP: ffffc90002617980 R08: 0000000000000054 R09: fffffbfff165a7a6 [ 192.466759][ T8977] R10: fffffbfff165a7a5 R11: ffffffff8b2d3d2f R12: ffff888092069b10 [ 192.466767][ T8977] R13: ffff888092069dd0 R14: ffff888092069c70 R15: ffff888092069c70 [ 192.466782][ T8977] FS: 00007f8e38b79700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 192.479620][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 192.484531][ T8977] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 192.484539][ T8977] CR2: 0000001b32f26000 CR3: 0000000093e79000 CR4: 00000000001406f0 [ 192.484553][ T8977] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 192.484567][ T8977] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 192.496458][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 192.498049][ T8977] Call Trace: [ 192.620326][ T8977] __dentry_kill+0x1fd/0x600 [ 192.624898][ T8977] ? dput+0x38/0xe10 [ 192.628774][ T8977] ? dput+0x38/0xe10 [ 192.632647][ T8977] dput+0x62f/0xe10 [ 192.636442][ T8977] simple_recursive_removal+0x5bc/0x6d0 [ 192.641969][ T8977] ? debugfs_rename+0x7f0/0x7f0 [ 192.646800][ T8977] ? mntput+0x74/0xa0 [ 192.650761][ T8977] debugfs_remove+0x5e/0x80 [ 192.655254][ T8977] blk_trace_free+0x38/0x140 [ 192.659835][ T8977] __blk_trace_remove+0x78/0xa0 [ 192.664662][ T8977] blk_trace_ioctl+0x239/0x300 [ 192.669406][ T8977] ? blk_add_trace_rq_remap+0x3b0/0x3b0 [ 192.674938][ T8977] ? lock_downgrade+0x920/0x920 [ 192.679776][ T8977] ? lockdep_hardirqs_on+0x421/0x5e0 [ 192.685061][ T8977] blkdev_ioctl+0x126/0x1df0 [ 192.689661][ T8977] ? blkpg_ioctl+0xa90/0xa90 [ 192.694260][ T8977] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 192.700077][ T8977] block_ioctl+0xee/0x130 [ 192.704409][ T8977] ? blkdev_fallocate+0x410/0x410 [ 192.709435][ T8977] do_vfs_ioctl+0x977/0x14e0 [ 192.714032][ T8977] ? compat_ioctl_preallocate+0x220/0x220 [ 192.719751][ T8977] ? __fget+0x37f/0x550 [ 192.723919][ T8977] ? ksys_dup3+0x3e0/0x3e0 [ 192.728348][ T8977] ? ns_to_kernel_old_timeval+0x100/0x100 [ 192.734074][ T8977] ? tomoyo_file_ioctl+0x23/0x30 [ 192.739020][ T8977] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 192.745260][ T8977] ? security_file_ioctl+0x8d/0xc0 [ 192.750352][ T8977] ksys_ioctl+0xab/0xd0 [ 192.754498][ T8977] __x64_sys_ioctl+0x73/0xb0 [ 192.759089][ T8977] do_syscall_64+0xfa/0x790 [ 192.763573][ T8977] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 192.769462][ T8977] RIP: 0033:0x45a909 [ 192.773337][ T8977] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 192.792920][ T8977] RSP: 002b:00007f8e38b78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 192.801310][ T8977] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a909 [ 192.809274][ T8977] RDX: 0000000000000000 RSI: 0000000000001276 RDI: 000000000000000b [ 192.817228][ T8977] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 192.825288][ T8977] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8e38b796d4 [ 192.833243][ T8977] R13: 00000000004c2314 R14: 00000000004d7430 R15: 00000000ffffffff [ 192.841203][ T8977] Modules linked in: [ 192.845152][ T8977] ---[ end trace 168372f1a8576a44 ]--- [ 192.850612][ T8977] RIP: 0010:__list_del_entry_valid.cold+0xf/0x4f [ 192.856959][ T8977] Code: e8 c9 00 cb fd 0f 0b 48 89 f1 48 c7 c7 c0 10 70 88 4c 89 e6 e8 b5 00 cb fd 0f 0b 4c 89 f6 48 c7 c7 60 12 70 88 e8 a4 00 cb fd <0f> 0b 4c 89 ea 4c 89 f6 48 c7 c7 a0 11 70 88 e8 90 00 cb fd 0f 0b [ 192.876579][ T8977] RSP: 0018:ffffc90002617968 EFLAGS: 00010286 [ 192.882622][ T8977] RAX: 0000000000000054 RBX: ffff8882199fa1a0 RCX: 0000000000000000 [ 192.890601][ T8977] RDX: 0000000000000000 RSI: ffffffff815e8576 RDI: fffff520004c2f1f [ 192.898579][ T8977] RBP: ffffc90002617980 R08: 0000000000000054 R09: fffffbfff165a7a6 [ 192.906555][ T8977] R10: fffffbfff165a7a5 R11: ffffffff8b2d3d2f R12: ffff888092069b10 [ 192.914547][ T8977] R13: ffff888092069dd0 R14: ffff888092069c70 R15: ffff888092069c70 [ 192.922518][ T8977] FS: 00007f8e38b79700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 192.931468][ T8977] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 192.938080][ T8977] CR2: 0000001b32f26000 CR3: 0000000093e79000 CR4: 00000000001406f0 [ 192.946670][ T8977] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 192.954663][ T8977] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 192.962646][ T8977] Kernel panic - not syncing: Fatal exception [ 192.970056][ T8977] Kernel Offset: disabled [ 192.974381][ T8977] Rebooting in 86400 seconds..