[info] Using makefile-style concurrent boot in runlevel 2. [ 43.841922][ T26] audit: type=1800 audit(1575113515.915:21): pid=7438 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2452 res=0 [ 43.872564][ T26] audit: type=1800 audit(1575113515.915:22): pid=7438 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="motd" dev="sda1" ino=2480 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.255' (ECDSA) to the list of known hosts. 2019/11/30 11:32:08 fuzzer started 2019/11/30 11:32:10 dialing manager at 10.128.0.105:44645 2019/11/30 11:32:28 syscalls: 2592 2019/11/30 11:32:28 code coverage: enabled 2019/11/30 11:32:28 comparison tracing: enabled 2019/11/30 11:32:28 extra coverage: extra coverage is not supported by the kernel 2019/11/30 11:32:28 setuid sandbox: enabled 2019/11/30 11:32:28 namespace sandbox: enabled 2019/11/30 11:32:28 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/30 11:32:28 fault injection: enabled 2019/11/30 11:32:28 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/30 11:32:28 net packet injection: enabled 2019/11/30 11:32:28 net device setup: enabled 2019/11/30 11:32:28 concurrency sanitizer: enabled 2019/11/30 11:32:28 devlink PCI setup: PCI device 0000:00:10.0 is not available syzkaller login: [ 77.300776][ T7600] KCSAN: could not find function: 'poll_schedule_timeout' 2019/11/30 11:32:40 adding functions to KCSAN blacklist: 'run_timer_softirq' 'dd_has_work' 'ext4_nonda_switch' 'poll_schedule_timeout' 'blk_mq_sched_dispatch_requests' 'bio_endio' 'rcu_gp_fqs_loop' 'tomoyo_supervisor' 'do_exit' 'tick_do_update_jiffies64' 'mod_timer' 'generic_permission' 'ktime_get_real_seconds' 'do_syslog' 'p9_poll_workfn' '__hrtimer_run_queues' 'do_wait' 'br_handle_frame_finish' 'inactive_list_is_low' 'ep_poll' '__snd_rawmidi_transmit_ack' 'tick_sched_do_timer' 'blk_mq_run_hw_queue' 'l2tp_tunnel_del_work' 'lru_add_drain_all' 'pipe_poll' 'timer_clear_idle' 'do_nanosleep' 'list_lru_count_one' 'mem_cgroup_select_victim_node' 'filemap_map_pages' 'echo_char' 'pid_update_inode' 'copy_process' 'vm_area_dup' 'rcu_gp_fqs_check_wake' 'ext4_mb_find_by_goal' 'generic_write_end' 'tcp_add_backlog' 'n_tty_receive_buf_common' 'xas_find_marked' '__filemap_fdatawrite_range' '__splice_from_pipe' 'add_timer' 'ext4_free_inode' '__ext4_new_inode' 'audit_log_start' 'queue_access_lock' 'pcpu_alloc' 'kvm_mmu_notifier_invalidate_range_end' 'find_get_pages_range_tag' 'mm_update_next_owner' 'taskstats_exit' 'wbt_issue' 'tick_nohz_idle_stop_tick' 'ext4_mark_iloc_dirty' 'ext4_da_write_end' '__mark_inode_dirty' 'blk_mq_get_request' 'page_counter_try_charge' 'virtqueue_disable_cb' 'balance_dirty_pages' 'do_signal_stop' 'generic_file_read_iter' '__add_to_page_cache_locked' 'kauditd_thread' 'xas_clear_mark' 'blk_mq_dispatch_rq_list' 'unix_notinflight' 'find_next_bit' 'snd_ctl_notify' 'process_srcu' 'fsnotify' 'lruvec_lru_size' '__delete_from_page_cache' 'ext4_has_free_clusters' 'generic_fillattr' 'exit_signals' 'sit_tunnel_xmit' 'ext4_free_inodes_count' 11:35:58 executing program 0: r0 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) close(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/11, 0xa) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = msgget$private(0x0, 0x0) msgrcv(r2, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_RMID(r2, 0x0) ioctl$TIOCLINUX5(r0, 0x541c, 0x0) 11:35:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0xa99) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) clone(0x42102001ff0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_TIMERSLACK(0x1d, 0x2000201) futex(&(0x7f0000000540), 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x1c9c380}, 0x0, 0x0) ioctl$KIOCSOUND(r0, 0x4b2f, 0x0) [ 287.021676][ T7604] IPVS: ftp: loaded support on port[0] = 21 [ 287.149621][ T7604] chnl_net:caif_netlink_parms(): no params data found [ 287.172058][ T7607] IPVS: ftp: loaded support on port[0] = 21 11:35:59 executing program 2: r0 = socket(0x40000000002, 0x3, 0x2) r1 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='veth1_to_hsr\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) [ 287.196325][ T7604] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.203547][ T7604] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.212038][ T7604] device bridge_slave_0 entered promiscuous mode [ 287.224726][ T7604] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.232417][ T7604] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.240566][ T7604] device bridge_slave_1 entered promiscuous mode [ 287.265817][ T7604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.297320][ T7604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.358457][ T7604] team0: Port device team_slave_0 added [ 287.377061][ T7604] team0: Port device team_slave_1 added [ 287.399565][ T7607] chnl_net:caif_netlink_parms(): no params data found [ 287.407134][ T7610] IPVS: ftp: loaded support on port[0] = 21 11:35:59 executing program 3: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002e00)=""/102400, 0x19000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f00000006c0)=""/242, 0xf2}], 0x1}}], 0x2, 0x10020, 0x0) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) [ 287.499707][ T7604] device hsr_slave_0 entered promiscuous mode [ 287.546977][ T7604] device hsr_slave_1 entered promiscuous mode [ 287.625463][ T7607] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.656633][ T7607] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.664362][ T7607] device bridge_slave_0 entered promiscuous mode [ 287.774670][ T7604] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.781776][ T7604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.789142][ T7604] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.797101][ T7604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.877637][ T7607] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.884882][ T7607] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.917666][ T7607] device bridge_slave_1 entered promiscuous mode [ 287.932885][ T7629] IPVS: ftp: loaded support on port[0] = 21 [ 287.978059][ T7610] chnl_net:caif_netlink_parms(): no params data found [ 288.013563][ T7607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.084696][ T7607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.118298][ T7604] 8021q: adding VLAN 0 to HW filter on device bond0 11:36:00 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000180)=[{0x3, 0x300000000000000, &(0x7f0000000080), 0x100000000000019a, 0x0, 0x227}], 0xf2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="d6ac7d3f595180001d00"], 0xa) close(r2) socket(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="2000008012005fff", 0x8) r3 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r3, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 288.144143][ T7607] team0: Port device team_slave_0 added [ 288.205251][ T7604] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.214727][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 288.267208][ T17] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.287447][ T17] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.328001][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 288.370628][ T7610] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.396844][ T7610] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.404532][ T7610] device bridge_slave_0 entered promiscuous mode [ 288.447774][ T7607] team0: Port device team_slave_1 added [ 288.466604][ T2416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 288.475453][ T2416] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 288.517343][ T2416] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.524408][ T2416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.559410][ T2416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 288.597076][ T2416] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 288.605465][ T2416] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.612762][ T2416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.667165][ T2416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 288.676098][ T2416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 288.727533][ T2416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 288.736491][ T2416] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 288.777545][ T2416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 288.786350][ T2416] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 288.834123][ T7641] IPVS: ftp: loaded support on port[0] = 21 [ 288.847574][ T7610] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.854634][ T7610] bridge0: port 2(bridge_slave_1) entered disabled state 11:36:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f00000028c0)=[{{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x2, 0x1000000000) open(&(0x7f0000000100)='./file0\x00', 0x400000, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00') preadv(r7, &(0x7f00000017c0), 0x1000000000000277, 0x400000000000) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/fscreate\x00', 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r2}]]}}}]}, 0x38}}, 0x0) [ 288.887517][ T7610] device bridge_slave_1 entered promiscuous mode [ 288.942769][ T2416] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 288.957461][ T2416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 288.998218][ T2416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 289.026759][ T2416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 289.035545][ T2416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 289.168578][ T7607] device hsr_slave_0 entered promiscuous mode [ 289.206942][ T7607] device hsr_slave_1 entered promiscuous mode [ 289.246678][ T7607] debugfs: Directory 'hsr0' with parent '/' already present! [ 289.255556][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 289.308705][ T7610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.334713][ T7652] IPVS: ftp: loaded support on port[0] = 21 [ 289.340723][ T7629] chnl_net:caif_netlink_parms(): no params data found [ 289.350171][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 289.366753][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 289.389901][ T7604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.403026][ T7610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.590604][ T7629] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.614442][ T7629] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.658559][ T7629] device bridge_slave_0 entered promiscuous mode [ 289.666729][ T7610] team0: Port device team_slave_0 added [ 289.721051][ T7629] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.728608][ T7629] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.746698][ T7629] device bridge_slave_1 entered promiscuous mode [ 289.786397][ T7610] team0: Port device team_slave_1 added [ 289.819932][ T7641] chnl_net:caif_netlink_parms(): no params data found [ 289.848022][ T7629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.898453][ T7629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.978911][ T7610] device hsr_slave_0 entered promiscuous mode [ 290.006950][ T7610] device hsr_slave_1 entered promiscuous mode [ 290.046605][ T7610] debugfs: Directory 'hsr0' with parent '/' already present! [ 290.148230][ T7607] 8021q: adding VLAN 0 to HW filter on device bond0 11:36:02 executing program 0: [ 290.224185][ T7641] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.240665][ T7641] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.306524][ T7641] device bridge_slave_0 entered promiscuous mode [ 290.370254][ T7629] team0: Port device team_slave_0 added [ 290.379077][ T7652] chnl_net:caif_netlink_parms(): no params data found [ 290.418704][ T7641] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.425855][ T7641] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.470162][ T7641] device bridge_slave_1 entered promiscuous mode [ 290.510760][ T7629] team0: Port device team_slave_1 added [ 290.520070][ T7607] 8021q: adding VLAN 0 to HW filter on device team0 11:36:02 executing program 0: [ 290.560230][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 290.617412][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 290.723866][ T7641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.794018][ T2416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 290.817997][ T2416] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 290.849548][ T2416] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.856842][ T2416] bridge0: port 1(bridge_slave_0) entered forwarding state 11:36:03 executing program 0: [ 290.907144][ T2416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 290.915746][ T2416] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 291.016982][ T2416] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.024134][ T2416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.080236][ T2416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 291.114842][ T2416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 291.163280][ T2416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready 11:36:03 executing program 0: [ 291.218189][ T2416] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 291.252932][ T2416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 291.290416][ T2416] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 291.347520][ T2416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 291.356050][ T2416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 291.402121][ T7607] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 291.434938][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 11:36:03 executing program 0: [ 291.518736][ T7629] device hsr_slave_0 entered promiscuous mode [ 291.537045][ T7629] device hsr_slave_1 entered promiscuous mode [ 291.586588][ T7629] debugfs: Directory 'hsr0' with parent '/' already present! [ 291.595142][ T7641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.641176][ T7652] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.656592][ T7652] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.664687][ T7652] device bridge_slave_0 entered promiscuous mode 11:36:03 executing program 0: [ 291.720764][ T7652] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.751777][ T7652] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.792831][ T7652] device bridge_slave_1 entered promiscuous mode [ 291.809426][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 291.823378][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 11:36:03 executing program 0: [ 291.844363][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 291.881720][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 291.933806][ T7607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.014128][ T2416] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 292.027221][ T2416] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 292.105500][ T7652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.153048][ T7610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.190196][ T7641] team0: Port device team_slave_0 added [ 292.202038][ T7652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.248210][ T7641] team0: Port device team_slave_1 added [ 292.260111][ T2416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 292.308477][ T2416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 292.333417][ T7610] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.426635][ T2416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 292.435346][ T2416] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 292.496959][ T2416] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.504141][ T2416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.597420][ T7652] team0: Port device team_slave_0 added [ 292.629241][ T7641] device hsr_slave_0 entered promiscuous mode [ 292.656929][ T7641] device hsr_slave_1 entered promiscuous mode [ 292.686674][ T7641] debugfs: Directory 'hsr0' with parent '/' already present! [ 292.704290][ T7640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 292.737313][ T7640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 292.790671][ T7640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 292.805112][ T7640] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.812225][ T7640] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.851272][ T7640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 292.885836][ T7640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 292.910387][ T7640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 292.942867][ T7640] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 292.980842][ T7640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 293.040858][ T7640] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 293.081040][ T7640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 293.117402][ T7640] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 293.127681][ T7610] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 293.157162][ T7610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 293.168038][ T7652] team0: Port device team_slave_1 added [ 293.237750][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 293.246437][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 293.307273][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 293.388893][ T7629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.421315][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 293.447085][ T2576] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 293.502667][ T7652] device hsr_slave_0 entered promiscuous mode [ 293.547092][ T7652] device hsr_slave_1 entered promiscuous mode [ 293.586784][ T7652] debugfs: Directory 'hsr0' with parent '/' already present! [ 293.599089][ T7610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.648666][ T7629] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.667223][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 293.675104][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 293.727481][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 293.736216][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 293.797060][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.804238][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.922506][ T7640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 293.947341][ T7640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 293.987221][ T7640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 294.046913][ T7640] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.053978][ T7640] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.126980][ T7640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 294.160621][ T7640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 294.220304][ T7640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 294.267516][ T7640] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 294.317724][ T7640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 294.326498][ T7640] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 11:36:06 executing program 1: [ 294.387687][ T7640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 294.407289][ T7640] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 294.415841][ T7640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 294.489802][ T7640] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 294.565113][ T7629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 294.593420][ T7641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.669662][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 294.731111][ T7629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.780033][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 294.793480][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 294.856809][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 294.896869][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 294.931500][ T7641] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.951875][ T7652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.094374][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 295.103149][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 295.149702][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.156790][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.184325][ T7830] raw_sendmsg: syz-executor.2 forgot to set AF_INET. Fix it! [ 295.243706][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 295.310521][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 295.376043][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.383157][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.483872][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 295.559650][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 295.624863][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 295.690223][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 295.753721][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 295.813710][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 295.899779][ T7640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 295.949792][ T7640] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 295.997916][ T7640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 296.031964][ T7640] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 296.110265][ T7640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 296.157458][ T7640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 296.217160][ T7640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 296.290437][ T7640] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 296.371442][ T7652] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.427025][ T7654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 296.435718][ T7654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 296.488794][ T7755] ================================================================== [ 296.497055][ T7755] BUG: KCSAN: data-race in pipe_wait / put_pipe_info [ 296.503843][ T7755] [ 296.506177][ T7755] read to 0xffff8880a4945c4c of 4 bytes by task 7756 on cpu 0: [ 296.513709][ T7755] pipe_wait+0xd7/0x140 [ 296.517864][ T7755] pipe_read+0x3b1/0x5e0 [ 296.522113][ T7755] new_sync_read+0x389/0x4f0 [ 296.526707][ T7755] __vfs_read+0xb1/0xc0 [ 296.530845][ T7755] vfs_read+0x143/0x2c0 [ 296.534978][ T7755] ksys_read+0xd5/0x1b0 [ 296.539114][ T7755] __x64_sys_read+0x4c/0x60 [ 296.543695][ T7755] do_syscall_64+0xcc/0x370 [ 296.548182][ T7755] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 296.554049][ T7755] [ 296.556360][ T7755] write to 0xffff8880a4945c4c of 4 bytes by task 7755 on cpu 1: [ 296.564110][ T7755] put_pipe_info+0x4d/0xb0 [ 296.568534][ T7755] pipe_release+0x152/0x1b0 [ 296.573034][ T7755] __fput+0x1e1/0x520 [ 296.577017][ T7755] ____fput+0x1f/0x30 [ 296.581017][ T7755] task_work_run+0xf6/0x130 [ 296.585524][ T7755] exit_to_usermode_loop+0x2b4/0x2c0 [ 296.590945][ T7755] do_syscall_64+0x353/0x370 [ 296.595528][ T7755] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 296.601399][ T7755] [ 296.603707][ T7755] Reported by Kernel Concurrency Sanitizer on: [ 296.609850][ T7755] CPU: 1 PID: 7755 Comm: ps Not tainted 5.4.0-syzkaller #0 [ 296.617036][ T7755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 296.627172][ T7755] ================================================================== [ 296.635237][ T7755] Kernel panic - not syncing: panic_on_warn set ... [ 296.641862][ T7755] CPU: 1 PID: 7755 Comm: ps Not tainted 5.4.0-syzkaller #0 [ 296.649045][ T7755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 296.659094][ T7755] Call Trace: [ 296.662491][ T7755] dump_stack+0x11d/0x181 [ 296.667778][ T7755] panic+0x210/0x640 [ 296.671667][ T7755] ? vprintk_func+0x8d/0x140 [ 296.676264][ T7755] kcsan_report.cold+0xc/0xd [ 296.680909][ T7755] kcsan_setup_watchpoint+0x3fe/0x460 [ 296.686404][ T7755] __tsan_unaligned_write4+0xc4/0x100 [ 296.691767][ T7755] put_pipe_info+0x4d/0xb0 [ 296.696194][ T7755] pipe_release+0x152/0x1b0 [ 296.700696][ T7755] __fput+0x1e1/0x520 [ 296.704676][ T7755] ? put_pipe_info+0xb0/0xb0 [ 296.709269][ T7755] ____fput+0x1f/0x30 [ 296.713344][ T7755] task_work_run+0xf6/0x130 [ 296.717851][ T7755] exit_to_usermode_loop+0x2b4/0x2c0 [ 296.723136][ T7755] do_syscall_64+0x353/0x370 [ 296.727880][ T7755] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 296.734007][ T7755] RIP: 0033:0x7ff84a7df2b0 [ 296.738418][ T7755] Code: 40 75 0b 31 c0 48 83 c4 08 e9 0c ff ff ff 48 8d 3d c5 32 08 00 e8 c0 07 02 00 83 3d 45 a3 2b 00 00 75 10 b8 03 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 ce 8a 01 00 48 89 04 24 [ 296.758017][ T7755] RSP: 002b:00007ffccf460468 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 296.766430][ T7755] RAX: 0000000000000000 RBX: 00007ff84aa947a0 RCX: 00007ff84a7df2b0 [ 296.774438][ T7755] RDX: 00007ff84aa95df0 RSI: 0000000000000001 RDI: 0000000000000001 [ 296.783295][ T7755] RBP: 0000000000000000 R08: 00007ff84aed8700 R09: 00007ff84aed8700 [ 296.791690][ T7755] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 296.799672][ T7755] R13: 0000000000000001 R14: 0000000001efe160 R15: 0000000000000000 [ 296.809586][ T7755] Kernel Offset: disabled [ 296.813922][ T7755] Rebooting in 86400 seconds..