Warning: Permanently added '10.128.0.22' (ECDSA) to the list of known hosts. 2019/11/29 12:58:02 fuzzer started 2019/11/29 12:58:04 dialing manager at 10.128.0.105:40749 2019/11/29 12:58:11 syscalls: 2589 2019/11/29 12:58:11 code coverage: enabled 2019/11/29 12:58:11 comparison tracing: enabled 2019/11/29 12:58:11 extra coverage: extra coverage is not supported by the kernel 2019/11/29 12:58:11 setuid sandbox: enabled 2019/11/29 12:58:11 namespace sandbox: enabled 2019/11/29 12:58:11 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/29 12:58:11 fault injection: enabled 2019/11/29 12:58:11 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/29 12:58:11 net packet injection: enabled 2019/11/29 12:58:11 net device setup: enabled 2019/11/29 12:58:11 concurrency sanitizer: enabled 2019/11/29 12:58:11 devlink PCI setup: PCI device 0000:00:10.0 is not available [ 66.489953][ T7609] KCSAN: could not find function: 'poll_schedule_timeout' 2019/11/29 12:58:19 adding functions to KCSAN blacklist: 'tcp_add_backlog' '__rb_erase_color' 'ext4_nonda_switch' 'watchdog' 'mm_update_next_owner' 'hrtimer_wakeup' 'find_next_bit' 'generic_fillattr' 'add_timer' 'find_get_pages_range_tag' 'copy_process' 'xas_clear_mark' 'list_lru_count_one' 'wbt_wait' 'tick_sched_do_timer' 'blk_mq_dispatch_rq_list' 'blk_mq_get_request' 'snd_timer_pause' 'ext4_free_inode' 'ktime_get_real_seconds' 'vm_area_dup' 'blk_mq_sched_dispatch_requests' 'mod_timer' 'poll_schedule_timeout' 'kauditd_thread' 'run_timer_softirq' 'do_nanosleep' 'taskstats_exit' 'wbt_issue' 'xas_find_marked' 'do_signal_stop' 'tomoyo_supervisor' 'generic_write_end' 'rcu_gp_fqs_check_wake' 'sit_tunnel_xmit' 'lruvec_lru_size' 'snd_seq_check_queue' '__hrtimer_run_queues' 'ext4_has_free_clusters' 'echo_char' 'n_tty_receive_buf_common' 'pipe_poll' 'ep_poll' 'tick_do_update_jiffies64' '__ext4_new_inode' 'audit_log_start' 'tick_nohz_idle_stop_tick' 'process_srcu' 12:59:46 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000300)={0x100000011, @rand_addr, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x15000000000000, 0x485, 0x0, 0x0) 12:59:47 executing program 1: r0 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0xd408, [], @string=&(0x7f0000000280)}}) [ 157.550855][ T7613] IPVS: ftp: loaded support on port[0] = 21 [ 157.667865][ T7613] chnl_net:caif_netlink_parms(): no params data found [ 157.697061][ T7613] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.704147][ T7613] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.712020][ T7613] device bridge_slave_0 entered promiscuous mode [ 157.720179][ T7613] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.727372][ T7613] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.735911][ T7613] device bridge_slave_1 entered promiscuous mode [ 157.753118][ T7613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.755205][ T7616] IPVS: ftp: loaded support on port[0] = 21 [ 157.766864][ T7613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.797354][ T7613] team0: Port device team_slave_0 added [ 157.804133][ T7613] team0: Port device team_slave_1 added 12:59:47 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(r0, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000180)=""/14, 0xe}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00') preadv(r4, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) [ 157.878647][ T7613] device hsr_slave_0 entered promiscuous mode [ 157.935743][ T7613] device hsr_slave_1 entered promiscuous mode [ 158.031215][ T7618] IPVS: ftp: loaded support on port[0] = 21 [ 158.060787][ T7613] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.067884][ T7613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.075307][ T7613] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.082417][ T7613] bridge0: port 1(bridge_slave_0) entered forwarding state 12:59:47 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000480)=ANY=[@ANYBLOB="b702000003440200bfa30000000000000702000000feffff7a0af0ff01ffffff79a4f0ff00000000b7060000ffffffff3d640200000000005502faff03be01000404000001007d60b7030000001000006a0a00fe00000339850000002b000000cf000000000000009500000000000000a81b982de7b0efc5733ed236e4add6de094e0832aaa6912a8b2ce571c45841e41f44ae7c5e84e6e3a94b574d2eb38a748355f0b886bd005362df1d4fdd860db5808942b7de2243533ef6d62a46b3009a54f4fd7db0d4968a384b0f59c7919b899d5fdb68832e986440ff0a7edfa0cb231ccd00"/237], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, &(0x7f0000000100)) [ 158.221705][ T7616] chnl_net:caif_netlink_parms(): no params data found [ 158.350514][ T7613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.416261][ T7616] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.423345][ T7616] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.466088][ T7616] device bridge_slave_0 entered promiscuous mode [ 158.473248][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 158.486257][ T2922] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.525500][ T2922] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.559137][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 158.588431][ T7613] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.601515][ T7616] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.610127][ T7616] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.636264][ T7616] device bridge_slave_1 entered promiscuous mode [ 158.671215][ T7648] IPVS: ftp: loaded support on port[0] = 21 [ 158.688391][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 158.697187][ T2922] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.704218][ T2922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.756599][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 158.785480][ T2922] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.792547][ T2922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.828217][ T7618] chnl_net:caif_netlink_parms(): no params data found [ 158.877928][ T7647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 158.887014][ T7647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 158.916775][ T7647] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 12:59:48 executing program 4: r0 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/560]}, 0x2a8) [ 158.946066][ T7647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 158.976898][ T7647] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 159.021531][ T7613] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 159.056292][ T7613] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 159.100695][ T7616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.126518][ T7616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.166013][ T7647] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 159.197260][ T7647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 159.236802][ T7647] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 159.257042][ T7647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 159.286302][ T7647] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 159.356893][ T7647] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 159.392047][ T7616] team0: Port device team_slave_0 added [ 159.413862][ T7616] team0: Port device team_slave_1 added [ 159.466837][ T7650] IPVS: ftp: loaded support on port[0] = 21 [ 159.499530][ T7618] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.507131][ T7618] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.514879][ T7618] device bridge_slave_0 entered promiscuous mode [ 159.556257][ T7618] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.563320][ T7618] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.591804][ T7618] device bridge_slave_1 entered promiscuous mode 12:59:49 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) shutdown(r0, 0xffffffff) [ 159.627269][ T7613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.644428][ T7647] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 159.659263][ T7647] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 159.717933][ T7616] device hsr_slave_0 entered promiscuous mode [ 159.755529][ T7616] device hsr_slave_1 entered promiscuous mode [ 159.815383][ T7616] debugfs: Directory 'hsr0' with parent '/' already present! [ 159.822990][ T7648] chnl_net:caif_netlink_parms(): no params data found [ 159.845072][ T7618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.875924][ T7663] IPVS: ftp: loaded support on port[0] = 21 [ 159.878711][ T7618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.921924][ T7648] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.929418][ T7648] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.937331][ T7648] device bridge_slave_0 entered promiscuous mode [ 159.983758][ T7648] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.993349][ T7648] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.013719][ T7648] device bridge_slave_1 entered promiscuous mode [ 160.044036][ T7618] team0: Port device team_slave_0 added [ 160.107554][ T7618] team0: Port device team_slave_1 added [ 160.114455][ T7650] chnl_net:caif_netlink_parms(): no params data found [ 160.152746][ T7648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.206775][ C1] hrtimer: interrupt took 41115 ns [ 160.222003][ T7648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 12:59:49 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000300)={0x100000011, @rand_addr, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x15000000000000, 0x485, 0x0, 0x0) [ 160.272684][ T7616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.377423][ T7618] device hsr_slave_0 entered promiscuous mode [ 160.405525][ T7618] device hsr_slave_1 entered promiscuous mode 12:59:49 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000300)={0x100000011, @rand_addr, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x15000000000000, 0x485, 0x0, 0x0) [ 160.445298][ T7618] debugfs: Directory 'hsr0' with parent '/' already present! [ 160.454686][ T7663] chnl_net:caif_netlink_parms(): no params data found [ 160.483348][ T7648] team0: Port device team_slave_0 added [ 160.544601][ T7616] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.575728][ T7648] team0: Port device team_slave_1 added [ 160.609053][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 160.625868][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 160.664074][ T7650] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.671805][ T7650] bridge0: port 1(bridge_slave_0) entered disabled state 12:59:50 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000300)={0x100000011, @rand_addr, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x15000000000000, 0x485, 0x0, 0x0) [ 160.719164][ T7650] device bridge_slave_0 entered promiscuous mode [ 160.801308][ T7650] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.838370][ T7650] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.878278][ T7650] device bridge_slave_1 entered promiscuous mode [ 160.929919][ T7703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 160.945810][ T7703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 160.986475][ T7703] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.993564][ T7703] bridge0: port 1(bridge_slave_0) entered forwarding state 12:59:50 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000300)={0x100000011, @rand_addr, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x15000000000000, 0x485, 0x0, 0x0) [ 161.041140][ T7703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 161.101977][ T7703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 161.165700][ T7703] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.172777][ T7703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.241892][ T7703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 161.278558][ T7703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 12:59:50 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000300)={0x100000011, @rand_addr, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x15000000000000, 0x485, 0x0, 0x0) [ 161.381113][ T7616] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 161.495307][ T7616] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 161.597642][ T7648] device hsr_slave_0 entered promiscuous mode [ 161.648748][ T7648] device hsr_slave_1 entered promiscuous mode [ 161.689339][ T7648] debugfs: Directory 'hsr0' with parent '/' already present! [ 161.704625][ T7703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 161.721307][ T7703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready 12:59:51 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000300)={0x100000011, @rand_addr, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x15000000000000, 0x485, 0x0, 0x0) [ 161.797904][ T7703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 161.858640][ T7703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 161.913642][ T7703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 161.961374][ T7703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 162.015580][ T7703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 162.068187][ T7703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready 12:59:51 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4d304}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r1 = perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000000700000025000000030100009500000000000000"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) getpid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) msync(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000001c0)="f7d1985a4ce45f65042e222c3b636e55d593fba5114d71038a58feeacb701d8693fa870988ac085ab437062c3c64215d8fc990bc151de69fdeb69d128c6b35a6bf34dc68bb5e59745fef0dd8796aa4f5fd3855d5cd137514c4e9949500ca42aa2a8e898676ab898a2f40a87ce27e3a0e", 0x70, r0}, 0x68) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000040)=0x8040800) r3 = socket$kcm(0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000040), 0xab) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000007c0)={0x3, 0x4bc, 0x4c, &(0x7f0000000740)="87c40d9fe740a3a612f7cbbeb631c74c9e3c797e6917f1c26baadd46b21566905770d636a4d68119027ac784c42b8cc687cc5c02ce6b3df6a3ad2ee128afdde2a7b4415499b6cbd80b45efb8"}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000040), 0xab) clone3(&(0x7f0000000540)={0x10000, &(0x7f0000000180), &(0x7f0000000340)=0x0, &(0x7f0000000380), 0x38, 0x0, &(0x7f0000000480)=""/147, 0x93, &(0x7f00000003c0)=""/20}, 0x40) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=r4, 0x12) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) semget$private(0x0, 0x0, 0x0) [ 162.115994][ T7703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 162.188443][ T7663] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.197641][ T7663] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.268741][ T7663] device bridge_slave_0 entered promiscuous mode [ 162.296163][ T7650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.438183][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 162.462870][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 162.515421][ T7663] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.530001][ T7663] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.572335][ T7663] device bridge_slave_1 entered promiscuous mode [ 162.608766][ T7616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.635594][ T7650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.651209][ T7618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.689710][ T7757] ================================================================== [ 162.697852][ T7757] BUG: KCSAN: data-race in generic_permission / task_dump_owner [ 162.705474][ T7757] [ 162.707812][ T7757] read to 0xffff8881294c704c of 4 bytes by task 7753 on cpu 0: [ 162.715381][ T7757] generic_permission+0x65/0x3d0 [ 162.720330][ T7757] proc_pid_permission+0xea/0x1c0 [ 162.723903][ T7703] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 162.725357][ T7757] inode_permission+0x241/0x3c0 [ 162.725373][ T7757] link_path_walk.part.0+0x622/0xa90 [ 162.725395][ T7757] path_openat+0x14f/0x36e0 [ 162.732854][ T7703] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 162.737512][ T7757] do_filp_open+0x11e/0x1b0 [ 162.737526][ T7757] do_sys_open+0x3b3/0x4f0 [ 162.737550][ T7757] __x64_sys_open+0x55/0x70 [ 162.768053][ T7757] do_syscall_64+0xcc/0x370 [ 162.772563][ T7757] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 162.778464][ T7757] [ 162.780796][ T7757] write to 0xffff8881294c704c of 4 bytes by task 7757 on cpu 1: [ 162.788432][ T7757] task_dump_owner+0x237/0x260 [ 162.793200][ T7757] pid_update_inode+0x3c/0x70 [ 162.797873][ T7757] pid_revalidate+0x91/0xd0 [ 162.802373][ T7757] lookup_fast+0x6f2/0x700 [ 162.806793][ T7757] walk_component+0x6d/0xe70 [ 162.811380][ T7757] link_path_walk.part.0+0x5d3/0xa90 [ 162.816667][ T7757] path_openat+0x14f/0x36e0 [ 162.821174][ T7757] do_filp_open+0x11e/0x1b0 [ 162.825693][ T7757] do_sys_open+0x3b3/0x4f0 [ 162.830114][ T7757] __x64_sys_open+0x55/0x70 [ 162.830817][ T7618] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.834687][ T7757] do_syscall_64+0xcc/0x370 [ 162.845769][ T7757] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 162.851653][ T7757] [ 162.854057][ T7757] Reported by Kernel Concurrency Sanitizer on: [ 162.860225][ T7757] CPU: 1 PID: 7757 Comm: ps Not tainted 5.4.0-syzkaller #0 [ 162.867416][ T7757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 162.877465][ T7757] ================================================================== [ 162.885521][ T7757] Kernel panic - not syncing: panic_on_warn set ... [ 162.892109][ T7757] CPU: 1 PID: 7757 Comm: ps Not tainted 5.4.0-syzkaller #0 [ 162.899309][ T7757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 162.909363][ T7757] Call Trace: [ 162.912658][ T7757] dump_stack+0x11d/0x181 [ 162.916999][ T7757] panic+0x210/0x640 [ 162.920906][ T7757] ? vprintk_func+0x8d/0x140 [ 162.925507][ T7757] kcsan_report.cold+0xc/0xd [ 162.927798][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 162.930107][ T7757] kcsan_setup_watchpoint+0x3fe/0x460 [ 162.942669][ T7757] __tsan_unaligned_write4+0xc4/0x100 [ 162.945944][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 162.948046][ T7757] task_dump_owner+0x237/0x260 [ 162.959964][ T7757] ? __rcu_read_unlock+0x66/0x3c0 [ 162.964992][ T7757] pid_update_inode+0x3c/0x70 [ 162.969666][ T7757] pid_revalidate+0x91/0xd0 [ 162.974169][ T7757] lookup_fast+0x6f2/0x700 [ 162.978592][ T7757] walk_component+0x6d/0xe70 [ 162.983185][ T7757] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 162.986535][ T7650] team0: Port device team_slave_0 added [ 162.989479][ T7757] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 162.996294][ T7663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.001238][ T7757] ? security_inode_permission+0xa5/0xc0 [ 163.015932][ T7757] ? inode_permission+0xa0/0x3c0 [ 163.020871][ T7757] link_path_walk.part.0+0x5d3/0xa90 [ 163.026166][ T7757] path_openat+0x14f/0x36e0 [ 163.030672][ T7757] ? proc_pid_status+0xee1/0x1000 [ 163.035703][ T7757] ? __read_once_size.constprop.0+0x12/0x20 [ 163.041594][ T7757] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 163.047842][ T7757] ? __virt_addr_valid+0x126/0x190 [ 163.052955][ T7757] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 163.059195][ T7757] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 163.065435][ T7757] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 163.071329][ T7757] ? __read_once_size+0x41/0xe0 [ 163.076183][ T7757] do_filp_open+0x11e/0x1b0 [ 163.080687][ T7757] ? __alloc_fd+0x2ef/0x3b0 [ 163.085206][ T7757] do_sys_open+0x3b3/0x4f0 [ 163.089655][ T7757] __x64_sys_open+0x55/0x70 [ 163.094164][ T7757] do_syscall_64+0xcc/0x370 [ 163.098670][ T7757] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 163.104565][ T7757] RIP: 0033:0x7f54a5c57120 [ 163.108982][ T7757] Code: 48 8b 15 1b 4d 2b 00 f7 d8 64 89 02 83 c8 ff c3 90 90 90 90 90 90 90 90 90 90 83 3d d5 a4 2b 00 00 75 10 b8 02 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 5e 8c 01 00 48 89 04 24 [ 163.128581][ T7757] RSP: 002b:00007ffd25d59258 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 163.136992][ T7757] RAX: ffffffffffffffda RBX: 0000000000616760 RCX: 00007f54a5c57120 [ 163.144961][ T7757] RDX: 00007ffd25d59290 RSI: 0000000000000000 RDI: 00007ffd25d59280 [ 163.152930][ T7757] RBP: 0000000000020000 R08: 0000000000000000 R09: 00007f54a5f1f55f [ 163.160899][ T7757] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000023ca220 [ 163.168871][ T7757] R13: 0000000000000020 R14: 00007f54a630c010 R15: 0000000000000000 [ 163.178287][ T7757] Kernel Offset: disabled [ 163.182639][ T7757] Rebooting in 86400 seconds..