Warning: Permanently added '10.128.0.187' (ECDSA) to the list of known hosts. 2019/11/18 00:23:19 fuzzer started 2019/11/18 00:23:21 dialing manager at 10.128.0.105:33487 2019/11/18 00:23:21 syscalls: 2566 2019/11/18 00:23:21 code coverage: enabled 2019/11/18 00:23:21 comparison tracing: enabled 2019/11/18 00:23:21 extra coverage: extra coverage is not supported by the kernel 2019/11/18 00:23:21 setuid sandbox: enabled 2019/11/18 00:23:21 namespace sandbox: enabled 2019/11/18 00:23:21 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/18 00:23:21 fault injection: enabled 2019/11/18 00:23:21 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/18 00:23:21 net packet injection: enabled 2019/11/18 00:23:21 net device setup: enabled 2019/11/18 00:23:21 concurrency sanitizer: enabled 2019/11/18 00:23:21 devlink PCI setup: PCI device 0000:00:10.0 is not available syzkaller login: [ 64.053996][ T7694] KCSAN: could not find function: 'poll_schedule_timeout' 2019/11/18 00:23:35 adding functions to KCSAN blacklist: 'dd_has_work' 'wbt_issue' 'inet_send_prepare' '__hrtimer_run_queues' 'ep_poll' 'ext4_free_inode' 'run_timer_softirq' 'wbt_done' 'sctp_assoc_migrate' 'ext4_writepages' 'futex_wait_queue_me' 'ktime_get_seconds' 'relay_switch_subbuf' 'vm_area_dup' 'blk_mq_run_hw_queue' 'tcp_add_backlog' 'do_exit' 'ext4_free_inodes_count' 'fprop_fraction_percpu' 'filemap_map_pages' 'generic_write_end' 'timer_clear_idle' 'blk_stat_add' '__dev_queue_xmit' '__delete_from_page_cache' 'netlink_overrun' 'do_signal_stop' 'rcu_gp_fqs_check_wake' 'tick_do_update_jiffies64' 'tick_sched_do_timer' 'add_timer' 'lruvec_lru_size' 'ktime_get_real_seconds' 'xas_find_marked' 'ext4_da_write_end' 'find_next_bit' 'do_nanosleep' 'yama_ptracer_del' 'audit_log_start' 'rcu_gp_fqs_loop' 'ip_tunnel_xmit' '__add_to_page_cache_locked' 'ondemand_readahead' 'poll_schedule_timeout' 'find_group_orlov' 'p9_poll_workfn' 'commit_echoes' 'shmem_add_to_page_cache' '__ext4_new_inode' 'blk_mq_get_request' '__snd_rawmidi_transmit_ack' 'snd_ctl_notify' 'queue_access_lock' 'blk_mq_sched_dispatch_requests' 'copy_process' 'generic_fillattr' 'balance_dirty_pages' 'snd_seq_prioq_cell_out' 'pid_update_inode' 'get_signal' 'ext4_has_free_clusters' 'pipe_poll' 'blk_mq_dispatch_rq_list' 'taskstats_exit' 'do_syslog' 'xas_clear_mark' 'inode_sync_complete' 'shmem_getpage_gfp' 'generic_file_read_iter' 'fsnotify' 'mod_timer' 'n_tty_receive_buf_common' 'mem_cgroup_select_victim_node' '__mark_inode_dirty' '__process_echoes' 'process_srcu' 'mm_update_next_owner' 'snd_seq_check_queue' 'tomoyo_supervisor' 'tick_nohz_idle_stop_tick' 'page_counter_try_charge' 'ext4_nonda_switch' 'delete_from_page_cache_batch' 'ext4_mark_iloc_dirty' 'find_get_pages_range_tag' 'echo_char' 'kauditd_thread' 'list_lru_count_one' 'pipe_wait' 00:27:59 executing program 0: r0 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f00000007c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') 00:28:00 executing program 1: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x5382, &(0x7f0000000240)) [ 335.025429][ T7697] IPVS: ftp: loaded support on port[0] = 21 [ 335.134623][ T7697] chnl_net:caif_netlink_parms(): no params data found [ 335.179660][ T7697] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.187470][ T7697] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.195821][ T7697] device bridge_slave_0 entered promiscuous mode [ 335.204761][ T7697] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.212812][ T7697] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.220677][ T7697] device bridge_slave_1 entered promiscuous mode [ 335.237806][ T7700] IPVS: ftp: loaded support on port[0] = 21 [ 335.239904][ T7697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.254884][ T7697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.291395][ T7697] team0: Port device team_slave_0 added [ 335.309238][ T7697] team0: Port device team_slave_1 added 00:28:00 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40000) fcntl$setstatus(r0, 0x4, 0x567110d19a5b657) [ 335.390941][ T7697] device hsr_slave_0 entered promiscuous mode [ 335.460008][ T7697] device hsr_slave_1 entered promiscuous mode [ 335.544877][ T7704] IPVS: ftp: loaded support on port[0] = 21 [ 335.548725][ T7700] chnl_net:caif_netlink_parms(): no params data found [ 335.708307][ T7697] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.715419][ T7697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.722764][ T7697] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.729830][ T7697] bridge0: port 1(bridge_slave_0) entered forwarding state 00:28:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) socket(0x840000000002, 0x3, 0x200000000000ff) timerfd_create(0x0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) socket$inet(0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0) [ 335.823115][ T7700] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.831997][ T7700] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.866954][ T7700] device bridge_slave_0 entered promiscuous mode [ 335.984695][ T7700] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.028612][ T7700] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.036302][ T7700] device bridge_slave_1 entered promiscuous mode [ 336.131831][ T2974] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.148937][ T2974] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.231712][ T7697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.248906][ T7704] chnl_net:caif_netlink_parms(): no params data found [ 336.259242][ T7700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.275441][ T7732] IPVS: ftp: loaded support on port[0] = 21 [ 336.300728][ T7697] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.309070][ T7700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.349153][ T7701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 336.357138][ T7701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 336.466956][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 336.477662][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 336.509018][ T7727] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.516157][ T7727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.549181][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 336.580594][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 336.609207][ T7727] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.616432][ T7727] bridge0: port 2(bridge_slave_1) entered forwarding state 00:28:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000280)) ioprio_get$uid(0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) [ 336.659207][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 336.689461][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 336.719072][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 336.759465][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 336.797018][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 336.823257][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 336.871208][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 336.889448][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 336.909991][ T7700] team0: Port device team_slave_0 added [ 336.940689][ T7700] team0: Port device team_slave_1 added [ 337.004872][ T7734] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 337.031365][ T7704] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.038473][ T7704] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.069539][ T7704] device bridge_slave_0 entered promiscuous mode [ 337.077958][ T7704] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.098644][ T7704] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.119539][ T7704] device bridge_slave_1 entered promiscuous mode 00:28:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_get$uid(0x3, 0x0) [ 337.210868][ T7700] device hsr_slave_0 entered promiscuous mode [ 337.239026][ T7700] device hsr_slave_1 entered promiscuous mode [ 337.288643][ T7700] debugfs: Directory 'hsr0' with parent '/' already present! [ 337.296995][ T7701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 337.305903][ T7701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 337.333860][ T7747] IPVS: ftp: loaded support on port[0] = 21 [ 337.347621][ T7742] IPVS: ftp: loaded support on port[0] = 21 [ 337.355478][ T7697] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 337.402107][ T7704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.502708][ T7704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.586497][ T7732] chnl_net:caif_netlink_parms(): no params data found [ 337.650506][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 337.657971][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 337.681214][ T7697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.726740][ T7704] team0: Port device team_slave_0 added [ 337.779952][ T7700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.800710][ T7704] team0: Port device team_slave_1 added [ 337.848785][ T7747] chnl_net:caif_netlink_parms(): no params data found [ 337.896536][ T7700] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.931594][ T7732] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.939513][ T7732] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.968721][ T7732] device bridge_slave_0 entered promiscuous mode [ 338.026122][ T7743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 338.041665][ T7743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 338.111281][ T7704] device hsr_slave_0 entered promiscuous mode [ 338.151694][ T7704] device hsr_slave_1 entered promiscuous mode [ 338.191418][ T7704] debugfs: Directory 'hsr0' with parent '/' already present! [ 338.228710][ T7732] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.242325][ T7732] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.261327][ T7732] device bridge_slave_1 entered promiscuous mode [ 338.295382][ T7742] chnl_net:caif_netlink_parms(): no params data found [ 338.324489][ T7769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 338.339112][ T7769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 338.371668][ T7769] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.378756][ T7769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.419135][ T7769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 338.449702][ T7769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 338.481229][ T7769] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.488309][ T7769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.531492][ T7769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 338.550020][ T7769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 338.579723][ T7769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 338.592400][ T7769] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 338.619889][ T7769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 338.639413][ T7769] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 338.698218][ T7700] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 338.722440][ T7700] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 338.809434][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 338.830763][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 338.859584][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 338.877915][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 338.892617][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 338.901745][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 00:28:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 338.914866][ T7732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.003150][ T7775] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 339.031135][ T7732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.071524][ T7700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.101610][ T7747] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.112752][ T7747] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.122828][ T7747] device bridge_slave_0 entered promiscuous mode [ 339.133551][ T7742] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.141796][ T7742] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.165710][ T7742] device bridge_slave_0 entered promiscuous mode [ 339.182932][ T7807] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 339.212174][ T7807] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 339.238822][ T7807] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 339.267467][ T7775] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 339.288874][ T7775] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 339.312757][ T7747] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.325404][ T7747] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.352034][ T7747] device bridge_slave_1 entered promiscuous mode [ 339.389409][ T7742] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.404840][ T7742] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.431697][ T7742] device bridge_slave_1 entered promiscuous mode [ 339.465987][ T7807] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 339.511514][ T7807] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 339.539232][ T7807] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 339.577856][ T7732] team0: Port device team_slave_0 added [ 339.610235][ T7732] team0: Port device team_slave_1 added [ 339.660069][ T7747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 00:28:04 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000000400)={{0x108, 0x0, 0x0, 0x24a, 0x0, 0x0, 0x0, 0x0, 0x5}, "", [[]]}, 0x120) [ 339.724251][ T7742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.799146][ T7704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.808771][ T7747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.841299][ T7732] device hsr_slave_0 entered promiscuous mode [ 339.878969][ T7732] device hsr_slave_1 entered promiscuous mode 00:28:05 executing program 0: r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") write(r0, &(0x7f0000000280)="2400000020002551075c0165ff0ffc020a00000000100f0007e1000c080017001600f000", 0x24) [ 339.928587][ T7732] debugfs: Directory 'hsr0' with parent '/' already present! [ 339.952755][ T7742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.002675][ T7704] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.063833][ T7743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 340.084117][ T7743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 340.115858][ T7747] team0: Port device team_slave_0 added [ 340.159785][ T7742] team0: Port device team_slave_0 added [ 340.166392][ T7797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 340.186118][ T7797] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 340.227801][ T7797] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.234925][ T7797] bridge0: port 1(bridge_slave_0) entered forwarding state 00:28:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000356000)=0x1, 0x36d) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x200, 0x4) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) [ 340.291938][ T7797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 340.337551][ T7797] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 340.374795][ T7797] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.381906][ T7797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.441554][ T7797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 340.479071][ T7797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 340.508109][ T7797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 340.538963][ T7797] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 340.566049][ T7747] team0: Port device team_slave_1 added [ 340.599666][ T7742] team0: Port device team_slave_1 added [ 340.607089][ T7743] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 340.630972][ T7743] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 340.675246][ T7704] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 340.715336][ T7704] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network 00:28:06 executing program 0: r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000280)="2400000020002551075c0165ff0ffc020a00000000100f0007e1000c080017001600f000", 0x24) [ 340.892917][ T7743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 340.911464][ T7743] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 340.953369][ T7743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 341.001146][ T7743] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 341.041251][ T7743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 341.078206][ T7743] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 341.112049][ T7743] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 341.144487][ T7704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.200996][ T7747] device hsr_slave_0 entered promiscuous mode 00:28:06 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') [ 341.252385][ T7747] device hsr_slave_1 entered promiscuous mode [ 341.311644][ T7747] debugfs: Directory 'hsr0' with parent '/' already present! [ 341.424491][ T7742] device hsr_slave_0 entered promiscuous mode 00:28:06 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@empty, @in6=@mcast1}, {@in6=@rand_addr="dd37514e9e68be47ed58ef35b9f243fd", 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) [ 341.502260][ T7742] device hsr_slave_1 entered promiscuous mode [ 341.551694][ T7742] debugfs: Directory 'hsr0' with parent '/' already present! [ 341.586239][ T7775] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 341.602443][ T7775] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 00:28:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) [ 341.817544][ T7732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.983609][ T7775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 341.992763][ T7775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 342.115965][ T7747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.191072][ T7732] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.204052][ T7775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 342.216352][ T7775] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 342.289132][ T7775] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.296264][ T7775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.394249][ T7747] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.463931][ T7743] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 342.472403][ T7743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 342.522636][ T7743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 342.557255][ T7743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 342.607745][ T7743] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 342.658229][ T7743] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.665354][ T7743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.732182][ T7743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 342.779911][ T7743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 342.819929][ T7743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 342.879509][ T7743] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 342.919633][ T7743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 342.968806][ T7743] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 343.018407][ T7743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 343.058717][ T7743] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 343.070210][ T7742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.129243][ T7775] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 343.137763][ T7775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 343.202479][ T7775] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 343.256106][ T7775] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.263282][ T7775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.322258][ T7775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 343.374975][ T7775] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 343.419200][ T7775] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.426491][ T7775] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.495102][ T7775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 343.536075][ T7775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 343.576636][ T7775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 343.632435][ T7775] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 343.662691][ T7742] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.693834][ T7732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 343.729224][ T7797] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 343.742522][ T7797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 343.793149][ T7797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 343.835596][ T7797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready 00:28:09 executing program 1: syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') [ 343.888615][ T7797] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 343.897597][ T7797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 344.039296][ T7797] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 344.093784][ T7747] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 344.168607][ T7747] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 344.247941][ T7732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.333416][ T7742] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 344.418591][ T7742] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 344.508886][ T7743] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 344.517483][ T7743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 344.610531][ T7743] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 344.668985][ T7743] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.676517][ T7743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.759245][ T7743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 344.768072][ T7743] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 344.858988][ T7743] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.867325][ T7743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.948971][ T7917] ================================================================== [ 344.957568][ T7917] BUG: KCSAN: data-race in inode_permission / inode_permission [ 344.965484][ T7917] [ 344.967812][ T7917] read to 0xffff8880b5121d6a of 2 bytes by task 7902 on cpu 0: [ 344.975862][ T7917] inode_permission+0x4e/0x3c0 [ 344.980682][ T7917] may_open.isra.0+0x144/0x250 [ 344.985907][ T7917] path_openat+0xf05/0x36e0 [ 344.990952][ T7917] do_filp_open+0x11e/0x1b0 [ 344.995555][ T7917] do_sys_open+0x3b3/0x4f0 [ 345.000069][ T7917] __x64_sys_open+0x55/0x70 [ 345.004578][ T7917] do_syscall_64+0xcc/0x370 [ 345.009304][ T7917] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 345.015282][ T7917] [ 345.017616][ T7917] write to 0xffff8880b5121d6a of 2 bytes by task 7917 on cpu 1: [ 345.025392][ T7917] inode_permission+0x3a1/0x3c0 [ 345.030693][ T7917] may_open.isra.0+0x144/0x250 [ 345.035689][ T7917] path_openat+0xf05/0x36e0 [ 345.040408][ T7917] do_filp_open+0x11e/0x1b0 [ 345.045168][ T7917] do_sys_open+0x3b3/0x4f0 [ 345.049674][ T7917] __x64_sys_open+0x55/0x70 [ 345.054184][ T7917] do_syscall_64+0xcc/0x370 [ 345.058939][ T7917] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 345.064954][ T7917] [ 345.067331][ T7917] Reported by Kernel Concurrency Sanitizer on: [ 345.073797][ T7917] CPU: 1 PID: 7917 Comm: ps Not tainted 5.4.0-rc7+ #0 [ 345.080636][ T7917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 345.090867][ T7917] ================================================================== [ 345.099017][ T7917] Kernel panic - not syncing: panic_on_warn set ... [ 345.105711][ T7917] CPU: 1 PID: 7917 Comm: ps Not tainted 5.4.0-rc7+ #0 [ 345.112686][ T7917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 345.122906][ T7917] Call Trace: [ 345.126721][ T7917] dump_stack+0x11d/0x181 [ 345.131081][ T7917] panic+0x210/0x640 [ 345.135080][ T7917] ? vprintk_func+0x8d/0x140 [ 345.139901][ T7917] kcsan_report.cold+0xc/0xd [ 345.144872][ T7917] kcsan_setup_watchpoint+0x3fe/0x460 [ 345.150545][ T7917] __tsan_unaligned_write2+0xc4/0x100 [ 345.155931][ T7917] inode_permission+0x3a1/0x3c0 [ 345.161019][ T7917] may_open.isra.0+0x144/0x250 [ 345.165837][ T7917] path_openat+0xf05/0x36e0 [ 345.170445][ T7917] do_filp_open+0x11e/0x1b0 [ 345.175383][ T7917] ? __alloc_fd+0x2ef/0x3b0 [ 345.179915][ T7917] do_sys_open+0x3b3/0x4f0 [ 345.184491][ T7917] __x64_sys_open+0x55/0x70 [ 345.189234][ T7917] do_syscall_64+0xcc/0x370 [ 345.193837][ T7917] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 345.199854][ T7917] RIP: 0033:0x7f9614613120 [ 345.204317][ T7917] Code: 48 8b 15 1b 4d 2b 00 f7 d8 64 89 02 83 c8 ff c3 90 90 90 90 90 90 90 90 90 90 83 3d d5 a4 2b 00 00 75 10 b8 02 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 5e 8c 01 00 48 89 04 24 [ 345.224346][ T7917] RSP: 002b:00007ffdf079cb48 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 345.232883][ T7917] RAX: ffffffffffffffda RBX: 0000000000616760 RCX: 00007f9614613120 [ 345.241035][ T7917] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f9614ae1d00 [ 345.249191][ T7917] RBP: 0000000000001000 R08: 0000000000000000 R09: 00007f96148db57b [ 345.257481][ T7917] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9614ae0d00 [ 345.266533][ T7917] R13: 0000000000000020 R14: 0000000000000005 R15: 0000000000000000 [ 345.275907][ T7917] Kernel Offset: disabled [ 345.280462][ T7917] Rebooting in 86400 seconds..