Warning: Permanently added '10.128.0.130' (ECDSA) to the list of known hosts. 2019/10/04 15:01:28 fuzzer started 2019/10/04 15:01:31 dialing manager at 10.128.0.105:44881 2019/10/04 15:01:31 syscalls: 2523 2019/10/04 15:01:31 code coverage: enabled 2019/10/04 15:01:31 comparison tracing: enabled 2019/10/04 15:01:31 extra coverage: extra coverage is not supported by the kernel 2019/10/04 15:01:31 setuid sandbox: enabled 2019/10/04 15:01:31 namespace sandbox: enabled 2019/10/04 15:01:31 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/04 15:01:31 fault injection: enabled 2019/10/04 15:01:31 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/04 15:01:31 net packet injection: enabled 2019/10/04 15:01:31 net device setup: enabled 2019/10/04 15:01:31 concurrency sanitizer: enabled 15:01:34 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) capget(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) syzkaller login: [ 63.034657][ T7261] IPVS: ftp: loaded support on port[0] = 21 [ 63.121536][ T7261] chnl_net:caif_netlink_parms(): no params data found [ 63.160058][ T7261] bridge0: port 1(bridge_slave_0) entered blocking state 15:01:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000c91000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x15}}, &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x333, &(0x7f000000d000)=""/153}, 0x3e) [ 63.167265][ T7261] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.177852][ T7261] device bridge_slave_0 entered promiscuous mode [ 63.186929][ T7261] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.200282][ T7261] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.220309][ T7261] device bridge_slave_1 entered promiscuous mode [ 63.263708][ T7261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.281629][ T7261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.333157][ T7261] team0: Port device team_slave_0 added [ 63.350965][ T7261] team0: Port device team_slave_1 added 15:01:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xffffffffffffffbe, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="430200000000000008000a00", @ANYRES32=0x6, @ANYBLOB="1800120008000100767469000c00020008000400c0a8ef50"], 0x40}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) [ 63.433260][ T7261] device hsr_slave_0 entered promiscuous mode [ 63.491295][ T7261] device hsr_slave_1 entered promiscuous mode [ 63.587074][ T7261] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.594190][ T7261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.601579][ T7261] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.608659][ T7261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.659344][ T7264] IPVS: ftp: loaded support on port[0] = 21 15:01:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') r3 = socket(0x10, 0x80002, 0x0) sendfile(r3, r2, 0x0, 0xf0d) [ 63.736517][ T7261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.783585][ T7261] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.791138][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.809026][ T3022] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.830880][ T3022] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.852392][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 63.890729][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.899536][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.906672][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.917440][ T7267] IPVS: ftp: loaded support on port[0] = 21 [ 63.950911][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.959572][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.966664][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.033387][ T7269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.043471][ T7271] IPVS: ftp: loaded support on port[0] = 21 [ 64.078710][ T7261] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.089355][ T7261] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.103721][ T7269] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.112757][ T7269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 15:01:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000080)={0x2, 0x0, [{0x1be3b5b9dc782df6, 0xf, &(0x7f0000000000)=""/15}, {0x6000, 0xb0, &(0x7f00000001c0)=""/176}]}) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r3, &(0x7f0000000700), 0x100000000000000d) [ 64.122457][ T7269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.132673][ T7269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.165535][ T7269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.206704][ T7261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.256645][ T7264] chnl_net:caif_netlink_parms(): no params data found [ 64.461572][ T7264] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.468660][ T7264] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.489593][ T7264] device bridge_slave_0 entered promiscuous mode [ 64.511890][ T7267] chnl_net:caif_netlink_parms(): no params data found [ 64.533271][ T7271] chnl_net:caif_netlink_parms(): no params data found [ 64.548432][ T7264] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.557955][ T7264] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.574501][ T7264] device bridge_slave_1 entered promiscuous mode 15:01:35 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) capget(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) [ 64.681310][ T7264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.707985][ T7267] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.712641][ T7286] IPVS: ftp: loaded support on port[0] = 21 15:01:36 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) r1 = dup(r0) ioctl$UI_SET_PHYS(r1, 0xc06855c8, &(0x7f0000000000)='syz1\x00') [ 64.730322][ T7267] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.738220][ T7267] device bridge_slave_0 entered promiscuous mode [ 64.755295][ T7264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.766767][ T7271] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.775854][ T7271] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.788834][ T7271] device bridge_slave_0 entered promiscuous mode [ 64.799844][ T7267] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.820312][ T7267] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.828275][ T7267] device bridge_slave_1 entered promiscuous mode 15:01:36 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) capget(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) [ 64.865395][ T7271] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.878960][ T7271] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.888432][ T7271] device bridge_slave_1 entered promiscuous mode [ 64.956713][ T7267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.969325][ T7264] team0: Port device team_slave_0 added [ 64.979696][ T7264] team0: Port device team_slave_1 added [ 64.995324][ T7271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.005887][ T7267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 15:01:36 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) capget(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) [ 65.048114][ T7271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.123029][ T7264] device hsr_slave_0 entered promiscuous mode [ 65.151533][ T7264] device hsr_slave_1 entered promiscuous mode [ 65.200300][ T7264] debugfs: Directory 'hsr0' with parent '/' already present! [ 65.227509][ T7271] team0: Port device team_slave_0 added 15:01:36 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x0) ioctl$int_out(r0, 0xa000005382, &(0x7f0000fd3ffc)) [ 65.255898][ T7267] team0: Port device team_slave_0 added [ 65.268131][ T7295] IPVS: ftp: loaded support on port[0] = 21 [ 65.278994][ T7267] team0: Port device team_slave_1 added [ 65.294629][ T7271] team0: Port device team_slave_1 added 15:01:36 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x0) ioctl$int_out(r0, 0xa000005382, &(0x7f0000fd3ffc)) 15:01:36 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x0) ioctl$int_out(r0, 0xa000005382, &(0x7f0000fd3ffc)) 15:01:36 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x0) ioctl$int_out(r0, 0xa000005382, &(0x7f0000fd3ffc)) [ 65.483026][ T7271] device hsr_slave_0 entered promiscuous mode [ 65.543495][ T7271] device hsr_slave_1 entered promiscuous mode [ 65.562968][ T7271] debugfs: Directory 'hsr0' with parent '/' already present! [ 65.633205][ T7267] device hsr_slave_0 entered promiscuous mode [ 65.660637][ T7267] device hsr_slave_1 entered promiscuous mode [ 65.700279][ T7267] debugfs: Directory 'hsr0' with parent '/' already present! [ 65.713703][ T7264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.728322][ T7286] chnl_net:caif_netlink_parms(): no params data found [ 65.746038][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.754266][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.776104][ T7264] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.812880][ T7286] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.819999][ T7286] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.827930][ T7286] device bridge_slave_0 entered promiscuous mode [ 65.836580][ T7286] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.843932][ T7286] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.851751][ T7286] device bridge_slave_1 entered promiscuous mode [ 65.899365][ T7295] chnl_net:caif_netlink_parms(): no params data found [ 65.934728][ T7272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.944220][ T7272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.952876][ T7272] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.959905][ T7272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.968671][ T7272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.979469][ T7286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.996840][ T7286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.038903][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.047722][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.057125][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.064205][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.079243][ T7267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.095178][ T7295] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.102700][ T7295] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.111585][ T7295] device bridge_slave_0 entered promiscuous mode [ 66.119005][ T7295] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.126527][ T7295] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.134958][ T7295] device bridge_slave_1 entered promiscuous mode [ 66.142132][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.151959][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.159802][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.172435][ T7267] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.184564][ T7286] team0: Port device team_slave_0 added [ 66.191595][ T7286] team0: Port device team_slave_1 added [ 66.214889][ T7295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.225827][ T7272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.234670][ T7272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.243196][ T7272] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.250271][ T7272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.258182][ T7272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.267040][ T7272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.275800][ T7272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.284247][ T7272] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.291299][ T7272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.299447][ T7272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.313554][ T7264] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.324157][ T7264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.343977][ T7295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.354947][ T7271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.362231][ T7266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.372145][ T7266] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.380948][ T7266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.389491][ T7266] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.398341][ T7266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.406906][ T7266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.415670][ T7266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.424207][ T7266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.432868][ T7266] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.441519][ T7266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.533417][ T7286] device hsr_slave_0 entered promiscuous mode [ 66.610812][ T7286] device hsr_slave_1 entered promiscuous mode [ 66.650301][ T7286] debugfs: Directory 'hsr0' with parent '/' already present! [ 66.659780][ T7269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.668550][ T7269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.678103][ T7269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.685818][ T7269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.701870][ T7271] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.709651][ T7295] team0: Port device team_slave_0 added [ 66.722835][ T7295] team0: Port device team_slave_1 added [ 66.729887][ T7269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.738499][ T7269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.747182][ T7269] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.761623][ T7264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.787347][ T7272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.796053][ T7272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.804883][ T7272] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.811960][ T7272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.819827][ T7272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.829158][ T7272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.837618][ T7272] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.844678][ T7272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.853359][ T7272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.861345][ T7272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.869859][ T7272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.912716][ T7295] device hsr_slave_0 entered promiscuous mode [ 66.950620][ T7295] device hsr_slave_1 entered promiscuous mode [ 67.000338][ T7295] debugfs: Directory 'hsr0' with parent '/' already present! [ 67.019365][ T7271] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.034527][ T7271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.049384][ T7266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.058414][ T7266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.067146][ T7266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.075588][ T7266] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.084203][ T7266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.092923][ T7266] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.101448][ T7266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.109543][ T7266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.118061][ T7266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.126345][ T7266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.134644][ T7266] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.142714][ T7266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.172211][ T7267] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.182993][ T7267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.216338][ T7271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.226694][ T7272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.235910][ T7272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.246984][ T7272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.263403][ T7272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.279566][ T7286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.296843][ T7267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.306047][ T7272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.345484][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.353437][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.370600][ T7286] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.419009][ T7295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.457512][ T7266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 15:01:38 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x0) ioctl$int_out(r0, 0xa000005382, &(0x7f0000fd3ffc)) [ 67.472175][ T7266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.488900][ T7266] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.496003][ T7266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.511367][ T7266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.528146][ T7266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.546282][ T7266] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.553404][ T7266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.562176][ T7266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.577415][ T7295] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.590170][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.604812][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.631368][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.639376][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.664786][ T7286] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.707058][ T7286] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.790212][ C0] ================================================================== [ 67.798392][ C0] BUG: KCSAN: data-race in __hrtimer_run_queues / hrtimer_active [ 67.806083][ C0] [ 67.808392][ C0] read to 0xffff88812be1d818 of 8 bytes by interrupt on cpu 1: [ 67.815920][ C0] hrtimer_active+0x84/0x1a0 [ 67.820488][ C0] task_tick_fair+0x4c/0x920 [ 67.825072][ C0] scheduler_tick+0x5c/0xe0 [ 67.829562][ C0] update_process_times+0x5f/0x80 [ 67.834596][ C0] tick_sched_handle+0x75/0x100 [ 67.839444][ C0] tick_sched_timer+0x58/0xe0 [ 67.844122][ C0] __hrtimer_run_queues+0x288/0x600 [ 67.849317][ C0] hrtimer_interrupt+0x22a/0x480 [ 67.854234][ C0] smp_apic_timer_interrupt+0xdc/0x280 [ 67.859671][ C0] apic_timer_interrupt+0xf/0x20 [ 67.864608][ C0] __kcsan_check_watchpoint+0xbb/0x180 [ 67.870049][ C0] __tsan_read8+0x15/0x30 [ 67.874379][ C0] nf_ct_iterate_cleanup+0x1d0/0x2e0 [ 67.879662][ C0] nf_ct_iterate_cleanup_net+0xe2/0xf0 [ 67.885092][ C0] [ 67.887405][ C0] write to 0xffff88812be1d818 of 8 bytes by interrupt on cpu 0: [ 67.895034][ C0] __hrtimer_run_queues+0x1f2/0x600 [ 67.900219][ C0] hrtimer_interrupt+0x22a/0x480 [ 67.905152][ C0] smp_apic_timer_interrupt+0xdc/0x280 [ 67.910586][ C0] apic_timer_interrupt+0xf/0x20 [ 67.915504][ C0] __kcsan_check_watchpoint+0xa9/0x180 [ 67.920958][ C0] __tsan_read8+0x15/0x30 [ 67.925277][ C0] tomoyo_compare_name_union+0x26/0xa0 [ 67.930759][ C0] tomoyo_check_path2_acl+0x81/0xb0 [ 67.935956][ C0] tomoyo_check_acl+0xf6/0x270 [ 67.940696][ C0] tomoyo_path2_perm+0x3d3/0x4c0 [ 67.945624][ C0] tomoyo_path_rename+0x95/0xd0 [ 67.950634][ C0] security_path_rename+0x17e/0x1e0 [ 67.955821][ C0] do_renameat2+0x6ea/0xa50 [ 67.960297][ C0] [ 67.962602][ C0] Reported by Kernel Concurrency Sanitizer on: [ 67.968752][ C0] CPU: 0 PID: 7227 Comm: udevd Not tainted 5.3.0+ #0 [ 67.975420][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.985548][ C0] ================================================================== [ 67.993690][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 68.000265][ C0] CPU: 0 PID: 7227 Comm: udevd Not tainted 5.3.0+ #0 [ 68.006933][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 68.016981][ C0] Call Trace: [ 68.020264][ C0] [ 68.023124][ C0] dump_stack+0xf5/0x159 [ 68.027349][ C0] panic+0x209/0x639 [ 68.031847][ C0] ? vprintk_func+0x8d/0x140 [ 68.036431][ C0] kcsan_report.cold+0x57/0xeb [ 68.041695][ C0] __kcsan_setup_watchpoint+0x342/0x500 [ 68.047224][ C0] __tsan_write8+0x32/0x40 [ 68.051976][ C0] __hrtimer_run_queues+0x1f2/0x600 [ 68.057278][ C0] ? ktime_get_update_offsets_now+0x28f/0x2f0 [ 68.063338][ C0] hrtimer_interrupt+0x22a/0x480 [ 68.068262][ C0] smp_apic_timer_interrupt+0xdc/0x280 [ 68.073729][ C0] ? smp_reschedule_interrupt+0x71/0x1d0 [ 68.079346][ C0] apic_timer_interrupt+0xf/0x20 [ 68.084261][ C0] [ 68.087187][ C0] RIP: 0010:__kcsan_check_watchpoint+0xa9/0x180 [ 68.093410][ C0] Code: 48 89 c2 49 0f af c2 89 d3 48 c1 e8 21 8d 04 40 29 c3 8d 44 1e ff 41 89 c3 41 c1 fb 1f 41 c1 eb 1a 44 01 d8 83 e0 3f 44 29 d8 <48> 98 4c 8d 1c c5 20 2c 04 86 48 8b 04 c5 20 2c 04 86 48 83 f8 01 [ 68.113011][ C0] RSP: 0018:ffffc900016abaf0 EFLAGS: 00000202 ORIG_RAX: ffffffffffffff13 [ 68.121406][ C0] RAX: 0000000000000010 RBX: 0000000000000001 RCX: 0000ffffffffffff [ 68.129383][ C0] RDX: 0000000000000001 RSI: 0000000000000010 RDI: 0000888124890a68 [ 68.137338][ C0] RBP: ffffc900016abb18 R08: 0000000000000000 R09: 0000888124890a6f [ 68.145290][ C0] R10: 00000000aaaaaaab R11: 0000000000000000 R12: 0000000000000000 [ 68.153326][ C0] R13: ffff888124890a68 R14: 0000000000000008 R15: 0000000000000001 [ 68.161294][ C0] __tsan_read8+0x15/0x30 [ 68.165604][ C0] tomoyo_compare_name_union+0x26/0xa0 [ 68.171042][ C0] tomoyo_check_path2_acl+0x81/0xb0 [ 68.176220][ C0] tomoyo_check_acl+0xf6/0x270 [ 68.180962][ C0] ? tomoyo_check_path_acl+0xa0/0xa0 [ 68.186241][ C0] tomoyo_path2_perm+0x3d3/0x4c0 [ 68.191189][ C0] tomoyo_path_rename+0x95/0xd0 [ 68.196039][ C0] security_path_rename+0x17e/0x1e0 [ 68.201217][ C0] do_renameat2+0x6ea/0xa50 [ 68.205707][ C0] __x64_sys_rename+0x47/0x60 [ 68.210370][ C0] do_syscall_64+0xcf/0x2f0 [ 68.214877][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 68.221141][ C0] RIP: 0033:0x7f304c0c9527 [ 68.225558][ C0] Code: 32 00 64 83 38 15 74 07 b8 ff ff ff ff 5b c3 48 89 df e8 1c c1 07 00 85 c0 75 ed 31 c0 eb d3 90 90 90 90 b8 52 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d e1 f8 32 00 31 d2 48 29 c2 64 [ 68.245164][ C0] RSP: 002b:00007ffeb85460c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 68.253576][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f304c0c9527 [ 68.261546][ C0] RDX: 00000000014b3060 RSI: 00007ffeb8546100 RDI: 00007ffeb8546500 [ 68.269517][ C0] RBP: 00000000014bae80 R08: 00007f304ca3c7a0 R09: 0000000000000001 [ 68.277490][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000014b1fd0 [ 68.285470][ C0] R13: 00000000014a2250 R14: 00007ffeb8546100 R15: 0000000000000001 [ 68.294906][ C0] Kernel Offset: disabled [ 68.299230][ C0] Rebooting in 86400 seconds..