Warning: Permanently added '10.128.0.205' (ECDSA) to the list of known hosts. 2019/08/12 07:25:06 fuzzer started 2019/08/12 07:25:09 dialing manager at 10.128.0.26:43421 2019/08/12 07:25:10 syscalls: 2487 2019/08/12 07:25:10 code coverage: enabled 2019/08/12 07:25:10 comparison tracing: enabled 2019/08/12 07:25:10 extra coverage: extra coverage is not supported by the kernel 2019/08/12 07:25:10 setuid sandbox: enabled 2019/08/12 07:25:10 namespace sandbox: enabled 2019/08/12 07:25:10 Android sandbox: /sys/fs/selinux/policy does not exist 2019/08/12 07:25:10 fault injection: enabled 2019/08/12 07:25:10 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/08/12 07:25:10 net packet injection: enabled 2019/08/12 07:25:10 net device setup: enabled 07:26:56 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f) splice(r0, 0x0, r2, 0x0, 0x100000000ffe0, 0x0) fcntl$setpipe(r0, 0x407, 0x1000000) 07:26:56 executing program 1: socketpair$unix(0x1, 0x1000000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_settime(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r2, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0x95c8}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x2c0}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) syzkaller login: [ 200.815513][T10713] IPVS: ftp: loaded support on port[0] = 21 [ 200.891993][T10715] IPVS: ftp: loaded support on port[0] = 21 07:26:57 executing program 2: r0 = socket$kcm(0x2, 0x2, 0x73) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x1) [ 201.004516][T10713] chnl_net:caif_netlink_parms(): no params data found [ 201.110842][T10715] chnl_net:caif_netlink_parms(): no params data found [ 201.159649][T10713] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.175937][T10713] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.183949][T10713] device bridge_slave_0 entered promiscuous mode [ 201.204754][T10719] IPVS: ftp: loaded support on port[0] = 21 [ 201.205941][T10713] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.221232][T10713] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.230168][T10713] device bridge_slave_1 entered promiscuous mode [ 201.253399][T10715] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.260658][T10715] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.269651][T10715] device bridge_slave_0 entered promiscuous mode 07:26:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000000000), 0x4) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, 0x0, &(0x7f0000000140)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") [ 201.303952][T10715] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.313540][T10715] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.321530][T10715] device bridge_slave_1 entered promiscuous mode [ 201.334774][T10713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.371478][T10713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.441823][T10715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.481395][T10715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.494979][T10713] team0: Port device team_slave_0 added [ 201.504449][T10719] chnl_net:caif_netlink_parms(): no params data found [ 201.521283][T10713] team0: Port device team_slave_1 added 07:26:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x7a, 0x0, [0xc0000103, 0x0, 0x800000004b564d02], [0xc1]}) [ 201.558099][T10715] team0: Port device team_slave_0 added [ 201.569701][T10715] team0: Port device team_slave_1 added [ 201.640107][T10713] device hsr_slave_0 entered promiscuous mode [ 201.697681][T10713] device hsr_slave_1 entered promiscuous mode [ 201.744087][T10722] IPVS: ftp: loaded support on port[0] = 21 [ 201.767859][T10719] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.775446][T10719] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.793713][T10719] device bridge_slave_0 entered promiscuous mode [ 201.805693][T10719] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.813612][T10719] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.823288][T10719] device bridge_slave_1 entered promiscuous mode [ 201.831446][T10713] bridge0: port 2(bridge_slave_1) entered blocking state 07:26:58 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x200000, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x1000000f8) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-monitor\x00', 0x400940, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') mount$9p_virtio(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) getgid() setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', 0x0, &(0x7f0000000c40)={{}, {}, [{0x2, 0x3}, {0x2, 0x2}], {0x4, 0x7}, [{}, {0x8, 0x2}, {}, {}, {}], {}, {0x20, 0x7}}, 0x5c, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@loopback, @in=@empty}}, {{}, 0x0, @in=@multicast2}}, &(0x7f0000000380)=0xe8) mkdir(&(0x7f00000003c0)='./file0\x00', 0xf7) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) [ 201.838554][T10713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.845962][T10713] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.853557][T10713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.968529][T10715] device hsr_slave_0 entered promiscuous mode [ 202.006339][T10715] device hsr_slave_1 entered promiscuous mode [ 202.066093][T10715] debugfs: Directory 'hsr0' with parent '/' already present! [ 202.081444][T10719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.092283][T10719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.104866][T10724] IPVS: ftp: loaded support on port[0] = 21 [ 202.111551][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.120998][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.122069][T10727] IPVS: ftp: loaded support on port[0] = 21 [ 202.209340][T10719] team0: Port device team_slave_0 added [ 202.216907][T10719] team0: Port device team_slave_1 added [ 202.348340][T10719] device hsr_slave_0 entered promiscuous mode [ 202.386375][T10719] device hsr_slave_1 entered promiscuous mode [ 202.425984][T10719] debugfs: Directory 'hsr0' with parent '/' already present! [ 202.444450][T10722] chnl_net:caif_netlink_parms(): no params data found [ 202.550900][T10713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.564460][T10722] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.572252][T10722] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.580744][T10722] device bridge_slave_0 entered promiscuous mode [ 202.613541][T10713] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.627999][T10722] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.636169][T10722] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.650299][T10722] device bridge_slave_1 entered promiscuous mode [ 202.680474][ T3152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 202.688434][ T3152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 202.698935][T10724] chnl_net:caif_netlink_parms(): no params data found [ 202.715525][T10722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.752187][T10722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.761556][T10727] chnl_net:caif_netlink_parms(): no params data found [ 202.771748][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 202.780562][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 202.789186][ T2987] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.796236][ T2987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.836937][T10724] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.844069][T10724] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.853307][T10724] device bridge_slave_0 entered promiscuous mode [ 202.867703][T10722] team0: Port device team_slave_0 added [ 202.879051][T10715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.889211][T10724] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.896363][T10724] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.904353][T10724] device bridge_slave_1 entered promiscuous mode [ 202.929489][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 202.938157][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 202.948256][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.955322][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.964410][T10722] team0: Port device team_slave_1 added [ 202.982174][T10724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.992926][T10724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.018942][T10715] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.050902][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 203.059263][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 203.067449][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 203.076023][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 203.084432][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 203.093316][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 203.102083][T10727] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.109484][T10727] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.117639][T10727] device bridge_slave_0 entered promiscuous mode [ 203.148193][T10719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.199089][T10722] device hsr_slave_0 entered promiscuous mode [ 203.246197][T10722] device hsr_slave_1 entered promiscuous mode [ 203.295977][T10722] debugfs: Directory 'hsr0' with parent '/' already present! [ 203.303694][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 203.311747][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 203.320502][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 203.328934][ T2987] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.336034][ T2987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.343748][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 203.352488][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 203.360762][ T2987] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.367862][ T2987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.375391][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 203.384035][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 203.392727][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 203.401253][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 203.409733][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 203.418261][T10727] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.425339][T10727] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.433863][T10727] device bridge_slave_1 entered promiscuous mode [ 203.451765][T10724] team0: Port device team_slave_0 added [ 203.464855][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 203.472796][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 203.481346][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 203.494440][T10713] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 203.506763][T10713] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 203.517820][T10727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.528964][T10727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.539121][T10724] team0: Port device team_slave_1 added [ 203.553300][T10719] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.561614][T10725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 203.571082][T10725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 203.580500][T10725] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 203.589051][T10725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 203.597983][T10725] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 203.612741][T10715] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 203.623318][T10715] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 203.655681][T10725] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 203.664501][T10725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 203.675936][T10725] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 203.684314][T10725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 203.692923][T10725] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 203.701564][T10725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 203.709831][T10725] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 203.718014][T10725] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 203.729566][T10727] team0: Port device team_slave_0 added [ 203.737520][T10727] team0: Port device team_slave_1 added [ 203.828746][T10724] device hsr_slave_0 entered promiscuous mode [ 203.856561][T10724] device hsr_slave_1 entered promiscuous mode [ 203.896094][T10724] debugfs: Directory 'hsr0' with parent '/' already present! [ 203.904764][T10725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 203.913553][T10725] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 203.922456][T10725] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.929735][T10725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.937782][T10725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 203.946576][T10725] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 203.954973][T10725] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.962094][T10725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.969829][T10725] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 203.986017][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 204.058848][T10727] device hsr_slave_0 entered promiscuous mode [ 204.096377][T10727] device hsr_slave_1 entered promiscuous mode [ 204.135969][T10727] debugfs: Directory 'hsr0' with parent '/' already present! [ 204.165202][T10713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.173988][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 204.183992][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 204.193609][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 204.202443][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 204.210977][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 204.219339][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 204.227954][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 204.236361][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 204.247964][T10715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.263827][T10719] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 204.276492][T10719] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 204.299873][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 204.308734][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 204.348214][T10719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.401757][T10722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.445464][T10724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.503862][T10722] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.533181][T10727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.541283][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 204.550962][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 204.566746][T10724] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.581570][T10727] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.589653][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 204.599635][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 204.608153][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 204.621207][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 07:27:00 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x1000000f8) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x400940, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) getgid() setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', 0x0, &(0x7f0000000c40)={{}, {}, [{0x2, 0x3}, {0x2, 0x2}], {0x4, 0x7}, [{}, {0x8, 0x2}, {}, {}, {}], {}, {0x20, 0x7}}, 0x5c, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000380)) lchown(&(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0xf7) r1 = open(0x0, 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) [ 204.676680][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 204.695087][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 204.721785][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.728985][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.764832][ C1] hrtimer: interrupt took 37090 ns [ 204.778187][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 204.796875][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 204.811521][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.818773][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.828549][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 204.837584][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 204.848446][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 204.857365][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 204.867652][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.874768][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.882822][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 204.892184][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 204.901546][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.908661][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.917476][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 07:27:01 executing program 2: r0 = socket$inet6(0xa, 0x802, 0x73) sendmmsg$inet6(r0, &(0x7f0000001700)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c, 0x0}}], 0x1, 0x0) [ 204.919951][T10770] overlayfs: filesystem on './file0' not supported as upperdir [ 204.926697][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 204.942397][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.949524][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.964066][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 07:27:01 executing program 1: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/424], 0x18}}], 0x1, 0x0) [ 204.973169][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 204.981888][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 204.991063][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.998226][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.058747][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 205.075275][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 07:27:01 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)="b862ff29048cbd4442be1528bebb0a051694a0f638b73a436574d57b19b4edf98d08aa566a402ebb71b52b9f7e61ce3a7fd59ad044a2894fcbe5a95625f75c112a11718d852dea7b7927b5c40201dd8cd76a5527cf48bce36d65f0f542aedbd455748f34049d3a2ac2af26c306a696c730db6906d644a1de023b35758782a79e096eba2e8ff88c5967df6fc721ac8ee2790f978ba2286b2c7524971b77bfb33f49e591b836ba67c4d4f1bd03fbe4bca994ef975173bf8a2ce6317af37ac52c1ae986e1e273c170d8", 0xc8}, {&(0x7f0000000240)="cfd811681144c2068ca85f7299459f34bfe93f99d18d5f8c1e8fbc6c3519cea7053fdde87e726ff4234f148cd5bbaa6e83c38e185cf9628b7e", 0x39}], 0x2}, 0x1b773066401795bb) readv(r1, &(0x7f00000007c0)=[{&(0x7f0000001d80)=""/4096, 0x20011b6f}], 0x1) 07:27:01 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f) splice(r0, 0x0, r2, 0x0, 0x100000000ffe0, 0x0) fcntl$setpipe(r0, 0x407, 0x1000000) [ 205.105524][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 205.148991][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 205.150853][T10776] ================================================================== [ 205.165043][T10776] BUG: KASAN: null-ptr-deref in rxrpc_unuse_local+0x23/0x70 [ 205.172281][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 205.172331][T10776] Write of size 4 at addr 0000000000000010 by task syz-executor.1/10776 [ 205.188525][T10776] [ 205.190864][T10776] CPU: 0 PID: 10776 Comm: syz-executor.1 Not tainted 5.3.0-rc3-next-20190809 #63 [ 205.192381][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 205.199970][T10776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 205.199991][T10776] Call Trace: [ 205.200022][T10776] dump_stack+0x172/0x1f0 [ 205.200036][T10776] ? rxrpc_unuse_local+0x23/0x70 [ 205.200046][T10776] ? rxrpc_unuse_local+0x23/0x70 [ 205.200070][T10776] __kasan_report.cold+0x5/0x36 [ 205.200087][T10776] ? _raw_read_unlock_irqrestore+0xd1/0xe0 [ 205.200097][T10776] ? rxrpc_unuse_local+0x23/0x70 [ 205.200112][T10776] kasan_report+0x12/0x17 [ 205.200126][T10776] check_memory_region+0x134/0x1a0 [ 205.200140][T10776] __kasan_check_write+0x14/0x20 [ 205.200151][T10776] rxrpc_unuse_local+0x23/0x70 [ 205.200185][T10776] rxrpc_release+0x47d/0x840 [ 205.214729][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 205.218074][T10776] __sock_release+0xce/0x280 [ 205.218089][T10776] sock_close+0x1e/0x30 [ 205.218103][T10776] __fput+0x2ff/0x890 [ 205.218117][T10776] ? __sock_release+0x280/0x280 [ 205.218129][T10776] ____fput+0x16/0x20 [ 205.218145][T10776] task_work_run+0x145/0x1c0 [ 205.218167][T10776] exit_to_usermode_loop+0x316/0x380 [ 205.218181][T10776] do_syscall_64+0x65f/0x760 [ 205.218199][T10776] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 205.218209][T10776] RIP: 0033:0x413511 [ 205.218224][T10776] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 205.218230][T10776] RSP: 002b:00007ffc0bffd860 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 205.218242][T10776] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000413511 [ 205.218249][T10776] RDX: 0000000000000000 RSI: 0000000000000081 RDI: 0000000000000003 [ 205.218256][T10776] RBP: 0000000000000000 R08: 00000000007603f8 R09: ffffffffffffffff [ 205.218263][T10776] R10: 00007ffc0bffd930 R11: 0000000000000293 R12: 000000000075bf20 [ 205.218279][T10776] R13: 0000000000000004 R14: 0000000000760400 R15: ffffffffffffffff [ 205.228576][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 205.230814][T10776] ================================================================== [ 205.234383][T10776] Kernel panic - not syncing: panic_on_warn set ... [ 205.249379][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 205.251335][T10776] CPU: 0 PID: 10776 Comm: syz-executor.1 Tainted: G B 5.3.0-rc3-next-20190809 #63 [ 205.251343][T10776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 205.251348][T10776] Call Trace: [ 205.251375][T10776] dump_stack+0x172/0x1f0 [ 205.269777][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 205.270483][T10776] panic+0x2dc/0x755 [ 205.270497][T10776] ? add_taint.cold+0x16/0x16 [ 205.270517][T10776] ? rxrpc_unuse_local+0x23/0x70 [ 205.276486][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 205.282996][T10776] ? preempt_schedule+0x4b/0x60 [ 205.283012][T10776] ? ___preempt_schedule+0x16/0x20 [ 205.283038][T10776] ? trace_hardirqs_on+0x5e/0x240 [ 205.293175][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 205.296748][T10776] ? rxrpc_unuse_local+0x23/0x70 [ 205.296764][T10776] end_report+0x47/0x4f [ 205.296775][T10776] ? rxrpc_unuse_local+0x23/0x70 [ 205.296786][T10776] __kasan_report.cold+0xe/0x36 [ 205.296801][T10776] ? _raw_read_unlock_irqrestore+0xd1/0xe0 [ 205.296810][T10776] ? rxrpc_unuse_local+0x23/0x70 [ 205.296823][T10776] kasan_report+0x12/0x17 [ 205.296835][T10776] check_memory_region+0x134/0x1a0 [ 205.296847][T10776] __kasan_check_write+0x14/0x20 [ 205.296858][T10776] rxrpc_unuse_local+0x23/0x70 [ 205.296872][T10776] rxrpc_release+0x47d/0x840 [ 205.296887][T10776] __sock_release+0xce/0x280 [ 205.296902][T10776] sock_close+0x1e/0x30 [ 205.296915][T10776] __fput+0x2ff/0x890 [ 205.296928][T10776] ? __sock_release+0x280/0x280 [ 205.296940][T10776] ____fput+0x16/0x20 [ 205.296955][T10776] task_work_run+0x145/0x1c0 [ 205.296971][T10776] exit_to_usermode_loop+0x316/0x380 [ 205.296985][T10776] do_syscall_64+0x65f/0x760 [ 205.297000][T10776] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 205.297011][T10776] RIP: 0033:0x413511 [ 205.297034][T10776] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 205.302696][ T3156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 205.306052][T10776] RSP: 002b:00007ffc0bffd860 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 205.306065][T10776] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000413511 [ 205.306073][T10776] RDX: 0000000000000000 RSI: 0000000000000081 RDI: 0000000000000003 [ 205.306080][T10776] RBP: 0000000000000000 R08: 00000000007603f8 R09: ffffffffffffffff [ 205.306086][T10776] R10: 00007ffc0bffd930 R11: 0000000000000293 R12: 000000000075bf20 [ 205.306092][T10776] R13: 0000000000000004 R14: 0000000000760400 R15: ffffffffffffffff [ 205.307368][T10776] Kernel Offset: disabled [ 205.703256][T10776] Rebooting in 86400 seconds..